IPSEC-REREADCERTS(8)

💖 IPSEC-REREADCERTS(8) 💖

okay bestie, welcome to ipsec-rereadcerts from the exec programs section (section 8, the admin-y one, very grown-up of it) 🎀

---

✨ NAME ✨

ipsec-rereadcerts — hit refresh on the IPsec certs sitting in your IPsec NSS database 🔄✨

---

🌸 SYNOPSIS 🌸

ipsec rereadcerts [--ctlsocket /run/pluto/pluto.ctl]

---

🦋 DESCRIPTION 🦋

so ipsec rereadcerts is the girlboss that tells pluto to go reread the certificates from the IPsec NSS database. that's it. that's the whole job. and it ATE. 💅

when is this a slay? bestie, it's the moment you swap out an expiring certificate in your NSS database for a shiny new one 🌈 like, your old cert is giving "my time is up" and your new cert is giving main character energy, and you want pluto to notice. so you run this, and pluto rereads the certificates. and here's the iconic part — all IPsec connections keep working the entire time, zero interruption. no downtime, no drama, nobody even notices. periodt. 👑

---

🎀 SEE ALSO 🎀

the whole group chat, fr fr — go read these too:

• ipsec.conf(5)
• ipsec(8)
• ipsec-add(8)
• ipsec-algparse(8)
• ipsec-briefconnectionstatus(8)
• ipsec-briefstatus(8)
• ipsec-certutil(8)
• ipsec-checkconfig(8)
• ipsec-checknflog(8)
• ipsec-checknss(8)
• ipsec-connectionstatus(8)
• ipsec-crlutil(8)
• ipsec-delete(8)
• ipsec-down(8)
• ipsec-ecdsasigkey(8)
• ipsec-fetchcrls(8)
• ipsec-fipsstatus(8)
• ipsec-globalstatus(8)
• ipsec-import(8)
• ipsec-initnss(8)
• ipsec-letsencrypt(8)
• ipsec-listall(8)
• ipsec-listcacerts(8)
• ipsec-listcerts(8)
• ipsec-listcrls(8)
• ipsec-listen(8)
• ipsec-listpubkeys(8)
• ipsec-modutil(8)
• ipsec-newhostkey(8)
• ipsec-ondemand(8)
• ipsec-pk12util(8)
• ipsec-pluto(8)
• ipsec-purgeocsp(8)
• ipsec-redirect(8)
• ipsec-replace(8)
• ipsec-rereadall(8)
• ipsec-rereadsecrets(8)
• ipsec-restart(8)
• ipsec-route(8)
• ipsec-rsasigkey(8)
• ipsec-setup(8)
• ipsec-showhostkey(8)
• ipsec-showroute(8)
• ipsec-showstates(8)
• ipsec-shuntstatus(8)
• ipsec-start(8)
• ipsec-status(8)
• ipsec-stop(8)
• ipsec-trafficstatus(8)
• ipsec-unroute(8)
• ipsec-up(8)
• ipsec-vfychain(8)
• ipsec-whack(8)

---

💀 BUGS 💀

none

not a single one. flawless. no notes. 💅✨

---

👑 AUTHOR 👑

Andrew Cagney, Tuomo Soini — absolute legends, we stan 🫶

---

and that's the whole page bestie!! 🌟 this is Libreswan 5.4.1, dated 10/23/2026 🗓️💖 go forth and reread those certs, iykyk 😌💜