Hello, So what is the status of this? In RHEL 7 they made the switch to p11-kit and libnssckbi.so is an alternative between the file shipped by nss and p11-kit-trust.so shipped by p11-kit (with p11-kit version being the default). Should we switch debian by default to p11-kit as well?