[Openswan dev] problems with USE_LIBNSS

[Tuomo Soini]

Paul Wouters wrote:

> I guess what we would really need is an nss path option for "config setup",
> provided that would not compromise any FIPS requirements. Then people can
> specify with or without the "sql:" prefix.

Especially when db should really be moved to /etc/pki directory
structure, on fedora/rhel I guess. Like /etc/pki/ipsec or something. I
guess /etc/ipsec.d isn't quite correct place for certificate dabase.

-- 
Tuomo Soini <tis at foobar.fi>
Foobar Linux services
+358 40 5240030
Foobar Oy <http://foobar.fi/>