URL: https://github.com/freeipa/freeipa/pull/3062 Author: tiran Title: #3062: Disable global p11-kit configuration for NSS Action: opened
PR body: """ The p11-kit configuration injects p11-kit-proxy into all NSS databases. Amongst other p11-kit loads SoftHSM2 PKCS#11 provider. This interferes with 389-DS, certmonger, Dogtag and other services. For example certmonger tries to open OpenDNSSEC's SoftHSM2 token, although it doesn't use it at all. It also breaks Dogtag HSM support testing with SoftHSM2.
IPA server does neither need nor use p11-kit.
Related: https://pagure.io/freeipa/issue/7810 Signed-off-by: Christian Heimes cheimes@redhat.com """
To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3062/head:pr3062 git checkout pr3062