dab7ae3 Don't use same NSS db in nss_pcache as mod_nss, use NSS_NoDB_Init()

Authored and Committed by rcritten 7 years ago
    Don't use same NSS db in nss_pcache as mod_nss, use NSS_NoDB_Init()
    
    This is to avoid doing the wrapping within an HSM. There have been
    reports of disconnects which causes future mod_nss children to fail
    to spawn because the PIN cannot be retrieved.
    
    A side-effect is that nss_pcache is only used for storage now. It used
    to also verify that the PIN was correct since it had the NSS database
    with the token available.
    
    mod_nss will be responsible for validating the PIN which it already
    does.
    
    This move is also needed if mod_nss eventually moves to using
    NSS Contexts because multiple databases may be configured at once.
    
        
file modified
+2 -2
file modified
+2 -4
file modified
+6 -28
file modified
+1 -1