Hi Bernhard, The best way to debug this is to find out where NSS's internal PKCS #11 module sets the error code CKR_DEVICE_ERROR. Unfortunately there are a lot of possible places (all the files in the mozilla/security/nss/lib/softoken directory): http://mxr.mozilla.org/security/ident?i=CKR_DEVICE_ERROR
The best way to track this down is to run your Apache httpd in a debugger with debug symbols for NSS, or run your Apache httpd with NSS shared libraries that you build from source code and insert printf statements. Wan-Teh -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto