Older versions of libreswan (and openswan) would allow the secrets files to contain filenames to encrypted RSA private keys. These are no longer supported and must reside in the NSS database. The NSS database itself can be protected with a passphrase.
placeholder to suppress warning
This HTML page was made with roffit.