[Swan] Key pair generation failed: "-8037"

[Paul Wouters]

On Fri, 28 Jun 2013, Greg Scott wrote:

> Subject: Re: [Swan] Key pair generation failed: "-8037"

> Create the NSS database first like this:
>
> certutil -N -d /etc/ipsec.d
>
> and then ipsec newhosthey runs to completion.

I've made the error more obvious now:

$ sudo ipsec newhostkey --output /tmp/test.secrets --configdir /tmp/test
NSS database in /tmp/test not initialized. Please run 'ipsec initnss --configdir /tmp/test'

Paul