Hi Damien, I suppose to reconsider opening this bug again, as it has been fixed in openjk-6 as it can be seen in bug 634058.
With current nss libs, the location of libnss3.so is in fact
/usr/lib/x86_64-linux-gnu/libnss3.so. However programs using libsoftokn3.so,
which is needed by JCA's PKCS11 class, can't find the library as it is located
at /usr/lib/x86_64-linux-gnu/nss/libsoftokn3.so.
The bug report suggests changing the nss directory in
/etc/java-7-openjdk/security/nss.cfg. By altering it to
/usr/lib/x86_64-linux-gnu/nss libsoftokn3.so is found, but libnss3.so is not,
as /usr/lib/x86_64-linux-gnu/nss/libnss3.so is the wrong path.
To me it seems the nss lib locations are all correct.
My library versions are:
libnss3-1d 3.12.10-3
libc6 2.13-10
Unaltered nss path leads to:
Caused by: java.security.ProviderException: Library
/usr/lib/x86_64-linux-gnu/libsoftokn3.so does not exist
at sun.security.pkcs11.SunPKCS11.<init>(SunPKCS11.java:292)
at sun.security.pkcs11.SunPKCS11.<init>(SunPKCS11.java:103)
Altered nss path:
Caused by: java.io.FileNotFoundException:
/usr/lib/x86_64-linux-gnu/nss/libnss3.so
at sun.security.pkcs11.Secmod.initialize(Secmod.java:186)
at sun.security.pkcs11.SunPKCS11.<init>(SunPKCS11.java:206)
... 26 more
I hope this information helps to get some clarity about the problem.
Perhaps the patch that made it work for openjdk-6 6b23~pre4-1 can be applied to
openjdk-7 as well.
Best regards
Tobias Wich
smime.p7s
Description: S/MIME cryptographic signature
