Comment 7 for bug 1006776

*Ouch*

I just realized that it is sufficient to modify /etc/java-6-openjdk/security/java.security so it uses the sun Elliptic Curve impelementation wich is also included in openjdk.

Just change the line
security.provider.9=sun.security.pkcs11.SunPKCS11 ${java.home}/lib/security/nss.cfg
to
security.provider.9=sun.security.ec.SunEC
security.provider.10=sun.security.pkcs11.SunPKCS11 ${java.home}/lib/security/nss.cfg

and move the Sun EC implementation, which provides all curves, in front of the pkcs11 implementation so it is being tried first when creating the key pair.