cryptoki-log: A PKCS#11 log module cryptoki-log is a PKCS#11 module which filters requests for any other module and prints out the calls either to stderr or a file. This is only useful to developers working with PKCS#11. Don't use this unless you understand why you want to. Here's how to log all calls to firefox's libnssckbi.so module: # export CRYPTOKI_LOG_MODULE=/usr/lib/firefox/libnssckbi.so # export CRYPTOKI_LOG_FILE=/tmp/cryptoki.log # mv /usr/lib/firefox/libnssckbi.so /usr/lib/firefox/libnssckbi.so.real # ln -s /usr/lib/cryptoki-log.so /usr/lib/firefox/libnssckbi.so # firefox # mv /usr/lib/firefox/libnssckbi.so.real /usr/lib/firefox/libnssckbi.so