nss_pcache(8)nss_pcache(8)NAMEnss_pcache - Helper program used to store token password pins
SYNOPSISnss_pcache <semid> <fips on/off> <directory> [prefix]
DESCRIPTION
A helper program used by the Apache httpd mod_nss plug-in to store the
NSS PKCS #11 token password pins between restarts of Apache.
Whenever an Apache httpd process configured to use the mod_nss plug-in
is started, this program will be automatically invoked via reference to
the mod_nss configuration file stored under /etc/httpd/conf.d/nss.conf
which contains the following default entry:
# Pass Phrase Helper:
# This helper program stores the token password pins between
# restarts of Apache.
#
# NOTE: Located at '/usr/sbin/nss_pcache' prior
# to 'mod_nss-1.0.8-22'.
#
NSSPassPhraseHelper /usr/libexec/nss_pcache
OPTIONS
<semid>
The semaphore which corresponds to the mod_nss plug-in regis‐
tered with the Apache httpd process during startup.
<fips on/off>
Specifies whether FIPS mode should be enabled, on, or disabled,
off. By default, FIPS mode is disabled, and no variable is
specified in /etc/httpd/conf.d/nss.conf. To enable FIPS mode,
establish password access for the specified NSS security data‐
bases, and specify the following variable in
/etc/httpd/conf.d/nss.conf:
NSSFIPS on
<directory>
Specifies the destination directory of the NSS databases that
will be associated with this executable specified by the follow‐
ing entry in /etc/httpd/conf.d/nss.conf:
# Server Certificate Database:
# The NSS security database directory that holds the
# certificates and keys. The database consists
# of 3 files: cert8.db, key3.db and secmod.db.
# Provide the directory that these files exist.
NSSCertificateDatabase /etc/httpd/alias
[prefix]
Optional prefix to attach prior to the names of the NSS certifi‐
cate and key databases contained in the directory referenced by
the previous argument and specified by the following entry in
/etc/httpd/conf.d/nss.conf (must be uncommented in order to be
utilized):
# Database Prefix:
# In order to be able to store multiple NSS databases
# in one directory they need unique names. This option
# sets the database prefix used for cert8.db and key3.db.
#NSSDBPrefix my-prefix-
BUGS
Report bugs to http://bugzilla.redhat.com.
AUTHORS
Rob Crittenden <rcritten@redhat.com>.
COPYRIGHT
Copyright (c) 2013 Red Hat, Inc. This is licensed under the Apache
License, Version 2.0 (the "License"); no one may use this file except
in compliance with the License. A copy of this license is available at
http://www.apache.org/licenses/LICENSE-2.0.
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS, WITH‐
OUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
Rob Crittenden Jul 1 2013 nss_pcache(8)
