Fixing NSS and p11-kit in Fedora (and beyond)

David Woodhouse dwmw2 at
Fri Dec 12 05:22:19 PST 2014

On Fri, 2014-12-12 at 12:02 +0100, Stef Walter wrote:
> > Yeah. I'm severely tempted at least to file an overall tracker bug for
> > the "feature", and file individual bugs against all the packages that
> > need to be "fixed" to comply with the vision. It'll make it much easier
> > to track. Any objections?
> There's nothing to object to. That makes sense.

> $ sudo certutil -d sql:/etc/pki/nssdb -L
> certutil: function failed: SEC_ERROR_PKCS11_GENERAL_ERROR: A PKCS #11
> module returned CKR_GENERAL_ERROR, indicating that an unrecoverable
> error has occurred.

Joy. Remind me again why you're happy for NSS softokn to be one of the
default writable tokens on the system and ditch that functionality from
gnome-keyring-pkcs11? :)


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5745 bytes
Desc: not available
URL: <>

More information about the p11-glue mailing list