We need to add the 'sun.security.pkcs11.SunPKCS11' provider with a single config-arg pointing to a file containing the following properties:
name = NSS
nssLibraryDirectory = /usr/lib
nssDbMode = noDb
attributes = compatibility
Tested on:
* Gentoo, needs devlibs/nss installed and a minor config modification:
nssLibraryDirectory=/usr/lib/nss
and it works ok.
* Debian just needs libnss3-1d installed, and it also works ok.
* Fedora's NSS, by default is compiled most probably *without* ECC!
So it fails.
(see: http://www.mozilla.org/projects/security/pki/nss/nss-3.11/nss-3.11-algorithms.html)
Managed to import COMODO's ECC certificate.
This bug is present also in sun's JDK and it gets fixed as prescribed by Andreas Sterbenz: blogs.sun. com/andreas/ entry/the_ java_pkcs_ 11_provider
http://
We need to add the 'sun.security. pkcs11. SunPKCS11' provider with a single config-arg pointing to a file containing the following properties: ctory = /usr/lib
name = NSS
nssLibraryDire
nssDbMode = noDb
attributes = compatibility
Tested on: ectory= /usr/lib/ nss www.mozilla. org/projects/ security/ pki/nss/ nss-3.11/ nss-3.11- algorithms. html)
* Gentoo, needs devlibs/nss installed and a minor config modification:
nssLibraryDir
and it works ok.
* Debian just needs libnss3-1d installed, and it also works ok.
* Fedora's NSS, by default is compiled most probably *without* ECC!
So it fails.
(see: http://