NSS and forking

I was reminded recently that if you are going to use NSS as your SSL library then you need to be sure to get all the forking out of the way before you call NSS_Init*. The NSS PKCS#11 loader, including the built-in softokn, has fork detection such that it refused to load if a fork is detected.

I had to bend over backwards to work around this in mod_nss a few years ago.