#8 mod_nss NSS database initialization issues
Opened by rcritten. Modified

Cloned from BZ https://bugzilla.redhat.com/show_bug.cgi?id=1256527

mod_nss currently calls NSS_Init() directly which means that NSSCertificateDatabase and NSSDBPrefix are global options that are shown in the example nss.conf within the VirtualHost. This suggests that one may specify a different NSS database per vhost which is not possible because of the NSS_Init.

There are two options:

  1. Use NSS contexts instead and potentially initialize a separate context per vhost, https://wiki.mozilla.org/NSS_Library_Init

  2. Make the values global only and move them in the configuration file to make clear they are global.


Metadata