| IPSEC-INITNSS(8) | Executable programs | IPSEC-INITNSS(8) |
.SH "NAME" ipsec-initnss - Initialise the IPsec NSS database
.SH "SYNOPSIS"
.HP 336u
ipsec initnss
[--nssdir /var/lib/ipsec/nss]
.SH "DESCRIPTION"
.PP ipsec initnss initialises the NSS database where all private keys
for RSA and certificate keypairs are stored. If already initialised, it will
return an error. To remove an existing IPsec NSS database, remove all the
*.db files and pkcs11.txt from the NSS data directory (default:
/var/lib/ipsec/nss).
.SH "SEE ALSO"
.PP ipsec.conf(5), ipsec(8), ipsec-add(8),
ipsec-algparse(8), ipsec-briefconnectionstatus(8),
ipsec-briefstatus(8), ipsec-certutil(8),
ipsec-checkconfig(8), ipsec-checknflog(8),
ipsec-checknss(8), ipsec-connectionstatus(8),
ipsec-crlutil(8), ipsec-delete(8), ipsec-down(8),
ipsec-ecdsasigkey(8), ipsec-fetchcrls(8),
ipsec-fipsstatus(8), ipsec-globalstatus(8),
ipsec-import(8), ipsec-letsencrypt(8),
ipsec-listall(8), ipsec-listcacerts(8),
ipsec-listcerts(8), ipsec-listcrls(8), ipsec-listen(8),
ipsec-listpubkeys(8), ipsec-modutil(8),
ipsec-newhostkey(8), ipsec-ondemand(8),
ipsec-pk12util(8), ipsec-pluto(8), ipsec-purgeocsp(8),
ipsec-redirect(8), ipsec-replace(8),
ipsec-rereadall(8), ipsec-rereadcerts(8),
ipsec-rereadsecrets(8), ipsec-restart(8),
ipsec-route(8), ipsec-rsasigkey(8), ipsec-setup(8),
ipsec-showhostkey(8), ipsec-showroute(8),
ipsec-showstates(8), ipsec-shuntstatus(8),
ipsec-start(8), ipsec-status(8), ipsec-stop(8),
ipsec-trafficstatus(8), ipsec-unroute(8), ipsec-up(8),
ipsec-vfychain(8), ipsec-whack(8)
.SH "BUGS"
.PP none
.SH "AUTHOR"
Andrew Cagney, Daniel Kahn Gillmor, D. Hugh Redelmeier, Paul Wouters, Tuomo
Soini
| 10/06/2026 | Libreswan v5.4.1-HEAD |