| IPSEC-REREADCERTS(8) | Executable programs | IPSEC-REREADCERTS(8) |
.SH "NAME" ipsec-rereadcerts - Reread IPsec certificates from IPsec
NSS database
.SH "SYNOPSIS"
.HP 432u
ipsec rereadcerts
[--ctlsocket /run/pluto/pluto.ctl]
.SH "DESCRIPTION"
.PP ipsec rereadcerts instructs pluto to reread certificates from
IPsec NSS database. This is useful when you replace expiring certificate in
NSS database with a new one. After replacing certificate in NSS database you
can instruct pluto to reread certificates while all IPsec connections
continue to work without any interruption.
.SH "SEE ALSO"
.PP ipsec.conf(5), ipsec(8), ipsec-add(8),
ipsec-algparse(8), ipsec-briefconnectionstatus(8),
ipsec-briefstatus(8), ipsec-certutil(8),
ipsec-checkconfig(8), ipsec-checknflog(8),
ipsec-checknss(8), ipsec-connectionstatus(8),
ipsec-crlutil(8), ipsec-delete(8), ipsec-down(8),
ipsec-ecdsasigkey(8), ipsec-fetchcrls(8),
ipsec-fipsstatus(8), ipsec-globalstatus(8),
ipsec-import(8), ipsec-initnss(8),
ipsec-letsencrypt(8), ipsec-listall(8),
ipsec-listcacerts(8), ipsec-listcerts(8),
ipsec-listcrls(8), ipsec-listen(8),
ipsec-listpubkeys(8), ipsec-modutil(8),
ipsec-newhostkey(8), ipsec-ondemand(8),
ipsec-pk12util(8), ipsec-pluto(8), ipsec-purgeocsp(8),
ipsec-redirect(8), ipsec-replace(8),
ipsec-rereadall(8), ipsec-rereadsecrets(8),
ipsec-restart(8), ipsec-route(8), ipsec-rsasigkey(8),
ipsec-setup(8), ipsec-showhostkey(8),
ipsec-showroute(8), ipsec-showstates(8),
ipsec-shuntstatus(8), ipsec-start(8), ipsec-status(8),
ipsec-stop(8), ipsec-trafficstatus(8),
ipsec-unroute(8), ipsec-up(8), ipsec-vfychain(8),
ipsec-whack(8)
.SH "BUGS"
.PP none
.SH "AUTHOR"
Andrew Cagney, Tuomo Soini
| 10/23/2026 | Libreswan v5.4.1-HEAD |