There is an nss automatic hardware module loader config that makes system wide hooks available in nss that can be disabled in /etc with some option but I don’t remember exactly which one and a quick google didn’t help me. I ran into it when I installed open dnssec that installed softhsm and then Pluto’s nss also read it the softhsm stored as part of nss.
Sent using a virtual keyboard on a phone > On Apr 28, 2022, at 16:34, Ian Willis <[email protected]> wrote: > _______________________________________________ Swan mailing list [email protected] https://lists.libreswan.org/mailman/listinfo/swan
