Fix handling of NSS tokens. The database was opened NOMODDB so not all tokens were visible to certmonger so it couldn't always find certificates associated with those tokens (keys too).
There are some places where permission testing is done to ensure the database can be opened both for perms and SELinux reasons. Leave that with NOMODDB and re-open if necessary.
Also use slot:nickname when comparing to see if the right certificate is found.
Fix handling of NSS tokens. The database was opened NOMODDB so not all tokens were visible to certmonger so it couldn't always find certificates associated with those tokens (keys too).
There are some places where permission testing is done to ensure the database can be opened both for perms and SELinux reasons. Leave that with NOMODDB and re-open if necessary.
Also use slot:nickname when comparing to see if the right certificate is found.