从Java访问Firefox的证书信任库

这是代码：

import java.security.KeyStore;
import java.security.Security;
import java.util.Enumeration;
import sun.security.pkcs11.SunPKCS11;

public class Test {

    public static void main(String[] args) throws Exception {
        String configName = "pkcs11.cfg";
        SunPKCS11 p = new SunPKCS11(configName);
        Security.addProvider(p);
        KeyStore ks = KeyStore.getInstance("PKCS11",p);
        ks.load(null,"apassword".toCharArray());
        System.out.println("Size: " + ks.size());
        Enumeration<String> aliases = ks.aliases();
        while (aliases.hasMoreElements()) {
            System.out.println(aliases.nextElement());
        }
    }
}

以下是PKCS#11配置的内容：

name = NSS
nssLibraryDirectory = /usr/lib/firefox/
nssSecmodDirectory = "/home/bogdan/.mozilla/firefox/x5d8wol9.default/"
nssModule =trustanchors
showInfo = true

当我运行应用程序时,我还设置了属性-Djava.library.path = /usr/lib / firefox /

当我运行应用程序时,我得到以下内容：

NSS modules: [NSS Internal PKCS #11 Module (CRYPTO,/usr/lib/firefox/libsoftokn3.so,slot 0),NSS Internal PKCS #11 Module (KEYSTORE,slot 1)]
Exception in thread "main" java.security.ProviderException: NSS module not available: trustanchors
    at sun.security.pkcs11.SunPKCS11.<init>(SunPKCS11.java:271)
    at sun.security.pkcs11.SunPKCS11.<init>(SunPKCS11.java:103)
    at Test.main(Test.java:11)

您实际上可以看到“trustanchors”模块未在初始化步骤中加载,但我不知道为什么.
这里的文档：http://docs.oracle.com/javase/6/docs/technotes/guides/security/p11guide.html#NSS说

The trustanchors module enables access to NSS trust anchor
certificates via the PKCS11 KeyStore,if secmod.db has been configured
to include the trust anchor library.

但我不知道这意味着什么.
值得注意的是,我对Windows XP 32位和Ubuntu 11.10 64位都有相同的行为.
似乎pkcs11.cfg是正确的,好像我改变了应用程序因其他错误而失败的任何路径.

有什么好主意吗？