master: e92ef6fba67472b6c4a9feec599e4123bbffa74b

mod_ssl in Fedora ships /usr/libexec/httpd-ssl-pass-dialog and that is one way to get systemd support. It consists of:

1
2
3

#!/bin/sh
exec /bin/systemd-ask-password "Enter SSL pass phrase for $1 ($2) : "

The thing about systemd though is it requires root because it writes to /run/systemd/ask-password.

I pass in token name as $1 and "NSS" as $2. In mod_ssl $2 is the key type.

To use the httpd-provided script just set this in nss.conf:

NSSPassPhraseDialog exec:/usr/libexec/httpd/httpd-ssl-pass-dialog