Just debugged this on OpenJDK 7, Tomcat 7, Debian wheezy.
The workaround to comment out the line
security.provider.9=sun.security.pkcs11.SunPKCS11 ${java.home}/lib/security/nss.cfg
worked. The line
#security.provider.9=sun.security.ec.SunEC
was already commented out, since this is the nōn-free part AFAICT.
Just debugged this on OpenJDK 7, Tomcat 7, Debian wheezy.
The workaround to comment out the line
security. provider. 9=sun.security. pkcs11. SunPKCS11 ${java. home}/lib/ security/ nss.cfg
worked. The line
#security. provider. 9=sun.security. ec.SunEC
was already commented out, since this is the nōn-free part AFAICT.