---
name: "ipsec_checknss"
section: "8"
platform: "linux"
package: "libreswan"
version: "4.10-2+deb12u1"
release: "Debian 12 (Bookworm)"
platforms: ["linux"]
url: "https://new.carta.tech/ipsec_checknss"
---

# ipsec\_checknss(8)

Initialise the IPsec NSS database

## NAME

ipsec\_checknss - Initialise the IPsec NSS database

## SYNOPSIS

**ipsec checknss** \[--nssdir */var/lib/ipsec/nss*\] \[--settrusts\]\

## DESCRIPTION

*Checknss* Checks or initialises the NSS database where all private keys for RSA and certificate keypairs are stored. To remove an existing IPsec NSS database, remove all the \*.db files and pkcs11.txt from the NSS data directory (default: /var/lib/ipsec/nss).

## SEE ALSO

[**ipsec.conf**(5)](/ipsec.conf/5.md), [**ipsec**(8)](/ipsec/8.md), [**ipsec\_auto**(8)](/ipsec_auto/8.md), [**ipsec\_initnss**(8)](/ipsec_initnss/8.md)

## BUGS

none

## AUTHOR

**Tuomo Soini**