Just a side note. It seems that there's a bug in libreswan's `ipsec initnss` command where it forgets to rebuild pkcs11.txt. As a consequence:
rm /var/lib/ipsec/*.db # not pkcs11.txt ipsec initnss will recreate the DB described in pkcs11.txt; or perhaps that's a feature. -- You received this message because you are subscribed to the Google Groups "[email protected]" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion visit https://groups.google.com/a/mozilla.org/d/msgid/dev-tech-crypto/CAJeAr6uvtsazcuntvMDy-%2BAEQ6hRG4i-6ix0zO5LVbA3HNWwhQ%40mail.gmail.com.
