IPSEC-CERTUTIL(8)

💖 IPSEC-CERTUTIL(8) 💖

okay bestie, so this is ipsec-certutil from section 8 of the manual — aka Executable programs. Think of it as the little ✨glow-up✨ wrapper that makes NSS's certutil actually know where Libreswan keeps its stuff. It's adorable, it's tiny, and it will absolutely save you from typing the same path 400 times. 💅

---

🌸 NAME 🌸

ipsec-certutil — the helper that runs NSS certutil on the IPsec NSS database 🎀

---

✨ SYNOPSIS ✨

ipsec certutil

that's it. that's the whole thing. iconic behaviour honestly. 👑

---

🦋 DESCRIPTION 🦋

ipsec certutil is a helper that runs NSS's certutil command against Libreswan's NSS database, and the way it does that is by slipping the option -d /var/lib/ipsec/nss into the parameter list for you. 🫶

so like… you don't have to point at the database yourself. it already knows. main character energy fr fr.

heads up bestie: for any extra info beyond this, go read certutil(1) — that's where the real lore lives. 📖

---

🌈 SEE ALSO 🌈

the whole squad, no cap. here's literally everyone:

• certutil(1)
• ipsec.conf(5)
• ipsec(8)
• ipsec-add(8)
• ipsec-algparse(8)
• ipsec-briefconnectionstatus(8)
• ipsec-briefstatus(8)
• ipsec-checknflog(8)
• ipsec-checknss(8)
• ipsec-connectionstatus(8)
• ipsec-crlutil(8)
• ipsec-delete(8)
• ipsec-down(8)
• ipsec-ecdsasigkey(8)
• ipsec-fetchcrls(8)
• ipsec-fipsstatus(8)
• ipsec-globalstatus(8)
• ipsec-import(8)
• ipsec-initnss(8)
• ipsec-letsencrypt(8)
• ipsec-listall(8)
• ipsec-listcacerts(8)
• ipsec-listcerts(8)
• ipsec-listcrls(8)
• ipsec-listen(8)
• ipsec-listpubkeys(8)
• ipsec-modutil(8)
• ipsec-newhostkey(8)
• ipsec-ondemand(8)
• ipsec-pk12util(8)
• ipsec-pluto(8)
• ipsec-purgeocsp(8)
• ipsec-redirect(8)
• ipsec-replace(8)
• ipsec-rereadall(8)
• ipsec-rereadcerts(8)
• ipsec-rereadsecrets(8)
• ipsec-restart(8)
• ipsec-route(8)
• ipsec-rsasigkey(8)
• ipsec-setup(8)
• ipsec-showhostkey(8)
• ipsec-showroute(8)
• ipsec-showstates(8)
• ipsec-shuntstatus(8)
• ipsec-start(8)
• ipsec-status(8)
• ipsec-stop(8)
• ipsec-trafficstatus(8)
• ipsec-unroute(8)
• ipsec-up(8)
• ipsec-vfychain(8)
• ipsec-whack(8)

---

💀 BUGS 💀

none

literally zero. not one. the bug count is giving flawless. ✨🙈✨

---

👑 AUTHOR 👑

Andrew Cagney, Tuomo Soini — absolute legends, we thank them for their service 🫡💖

---

and that's a wrap, bestie!! this page is from Libreswan 5.4.1, dated 10/23/2026, and it lives in the IPSEC-CERTUTIL(8) part of the manual. go forth and certutil responsibly. 🌸💅🌸