ipsec-checknss8
Check or initialize the ipsec nss database
Usage
ipsec checknss
[--nssdir
/var/lib/ipsec/nss]
[--settrusts]
Overview
Checknss checks or initialises the NSS database where all private keys for RSA and certificate keypairs are stored. To remove an existing IPsec NSS database, remove all the *.db files and pkcs11.txt from the NSS data directory (default: /var/lib/ipsec/nss). If database exists returns successfully.
See also
ipsec.conf(5)
IPsec configuration and connections
ipsec(8)
invoke IPsec utilities
ipsec-add(8)
Add a connection specification to pluto internal database from /etc/ipsec.conf
ipsec-algparse(8)
utility for verifying IKE and IPsec cryptographic proposal syntax
ipsec-briefconnectionstatus(8)
Get brief connection status from IPsec service
ipsec-briefstatus(8)
Get brief status from IPsec service
ipsec-certutil(8)
Helper to run NSS certutil on IPsec NSS database
ipsec-checkconfig(8)
Validate ipsec configuration file, /etc/ipsec.conf
ipsec-checknflog(8)
Initialise nftables or iptables rules for the nflog devices
ipsec-connectionstatus(8)
Get brief status from IPsec service
ipsec-crlutil(8)
Helper to run NSS crlutil on IPsec NSS database
ipsec-delete(8)
Delete a connection definition from IPsec service
ipsec-down(8)
Down all tunnels sharing same IPsec connection.
ipsec-ecdsasigkey(8)
generate ECDSA signature key
ipsec-fetchcrls(8)
Signal IPsec daemon to fetch new certificate revocation lists.
ipsec-fipsstatus(8)
Show IPsec daemon (pluto) FIPS status
ipsec-globalstatus(8)
Get global status information from IPsec daemon (pluto)
ipsec-import(8)
Import PKCS#12 (*.p12) files into the IPsec NSS database
ipsec-initnss(8)
Initialise the IPsec NSS database
ipsec-letsencrypt(8)
invoke Opportunistic Encryption utilities
ipsec-listall(8)
List all public key information from IPsec daemon (pluto)
ipsec-listcacerts(8)
List x.509 Certificate Authority (CA) certificates
ipsec-listcerts(8)
List X.509 certificates loaded from NSS database
ipsec-listcrls(8)
List X.509 certificates revocation lists from NSS database
ipsec-listen(8)
Force pluto to re-listen all interfaces
ipsec-listpubkeys(8)
List all public keys from pluto internal database.
ipsec-modutil(8)
Helper to run NSS modutil on IPsec NSS database
ipsec-newhostkey(8)
generate a new raw RSA authentication key for a host
ipsec-ondemand(8)
Add and route a connection
ipsec-pk12util(8)
Helper to run NSS pk12util on IPsec NSS database
ipsec-pluto(8)
Internet Key Exchange daemon
ipsec-purgeocsp(8)
Purgeocsp purges the NSS OCSP cache.
ipsec-redirect(8)
Redirect a connection definition with one from /etc/ipsec.conf.
ipsec-replace(8)
Replace a connection definition with one from /etc/ipsec.conf
ipsec-rereadall(8)
Reread IPsec secrets and certificates.
ipsec-rereadcerts(8)
Reread IPsec certificates from IPsec NSS database
ipsec-rereadsecrets(8)
Reread IPsec secrets from /etc/ipsec.secrets.
ipsec-restart(8)
Restart the ipsec service via initsystem
ipsec-route(8)
Add and route a connection
ipsec-rsasigkey(8)
generate RSA signature key
ipsec-setup(8)
wrapper routine to the Libreswan init system
ipsec-showhostkey(8)
show host's authentication key
ipsec-showroute(8)
show route to given address
ipsec-showstates(8)
Show current IKE SA and Child SA states
ipsec-shuntstatus(8)
Show current IPsec negotiation shunts
ipsec-start(8)
Add, route, and up a connection
ipsec-status(8)
Show connection status
ipsec-stop(8)
Stop the ipsec service via initsystem
ipsec-trafficstatus(8)
Show current Child SA states with traffic counters
ipsec-unroute(8)
unroute a connection
ipsec-up(8)
Establish a connection
ipsec-vfychain(8)
Helper to run NSS vfychain on IPsec NSS database
ipsec-whack(8)
ipsec whack : IPsec IKE keying daemon low-level control interface
Referred to by
ipsec-up(8)
Establish a connection
ipsec-add(8)
Add a connection specification to pluto internal database from /etc/ipsec.conf
ipsec-down(8)
Down all tunnels sharing same IPsec connection.
ipsec-stop(8)
Stop the ipsec service via initsystem
ipsec-route(8)
Add and route a connection
ipsec-start(8)
Add, route, and up a connection
ipsec-delete(8)
Delete a connection definition from IPsec service
ipsec-import(8)
Import PKCS#12 (*.p12) files into the IPsec NSS database
ipsec-listen(8)
Force pluto to re-listen all interfaces
ipsec-status(8)
Show connection status
ipsec-crlutil(8)
Helper to run NSS crlutil on IPsec NSS database
ipsec-initnss(8)
Initialise the IPsec NSS database
ipsec-listall(8)
List all public key information from IPsec daemon (pluto)
ipsec-modutil(8)
Helper to run NSS modutil on IPsec NSS database
ipsec-replace(8)
Replace a connection definition with one from /etc/ipsec.conf
ipsec-restart(8)
Restart the ipsec service via initsystem
ipsec-unroute(8)
unroute a connection
ipsec-certutil(8)
Helper to run NSS certutil on IPsec NSS database
ipsec-listcrls(8)
List X.509 certificates revocation lists from NSS database
ipsec-ondemand(8)
Add and route a connection
ipsec-pk12util(8)
Helper to run NSS pk12util on IPsec NSS database
ipsec-redirect(8)
Redirect a connection definition with one from /etc/ipsec.conf.
ipsec-vfychain(8)
Helper to run NSS vfychain on IPsec NSS database
ipsec-fetchcrls(8)
Signal IPsec daemon to fetch new certificate revocation lists.
ipsec-listcerts(8)
List X.509 certificates loaded from NSS database
ipsec-purgeocsp(8)
Purgeocsp purges the NSS OCSP cache.
ipsec-rereadall(8)
Reread IPsec secrets and certificates.
ipsec-checknflog(8)
Initialise nftables or iptables rules for the nflog devices
ipsec-fipsstatus(8)
Show IPsec daemon (pluto) FIPS status
ipsec-showstates(8)
Show current IKE SA and Child SA states
ipsec-briefstatus(8)
Get brief status from IPsec service
ipsec-checkconfig(8)
Validate ipsec configuration file, /etc/ipsec.conf
ipsec-listcacerts(8)
List x.509 Certificate Authority (CA) certificates
ipsec-listpubkeys(8)
List all public keys from pluto internal database.
ipsec-rereadcerts(8)
Reread IPsec certificates from IPsec NSS database
ipsec-shuntstatus(8)
Show current IPsec negotiation shunts
ipsec-globalstatus(8)
Get global status information from IPsec daemon (pluto)
ipsec-rereadsecrets(8)
Reread IPsec secrets from /etc/ipsec.secrets.
ipsec-trafficstatus(8)
Show current Child SA states with traffic counters
ipsec-connectionstatus(8)
Get brief status from IPsec service
ipsec-briefconnectionstatus(8)
Get brief connection status from IPsec service