Issue

• Getting no such algorithm: SunTls12MasterSecret error
  java.security.ProviderException: java.security.NoSuchAlgorithmException: no such algorithm: SunTls12MasterSecret for provider SunPKCS11-nss-fips`

• We're trying to set up httpd to proxy over https to Tomcat using PKCS#11 with Netscape Security Services (NSS) for FIPS compliant TLS/SSL. The proxy handshakes are failing and debug SSL logging on tomcat indicates that they fail with the following exception:

  RSA master secret generation error:
   java.security.InvalidAlgorithmParameterException: Key format must be RAW
     at com.sun.crypto.provider.TlsMasterSecretGenerator.engineInit(TlsMasterSecretGenerator.java:67)
     at javax.crypto.KeyGenerator.init(KeyGenerator.java:438)
     at javax.crypto.KeyGenerator.init(KeyGenerator.java:414)
     at sun.security.ssl.Handshaker.calculateMasterSecret(Handshaker.java:1052)
     at sun.security.ssl.Handshaker.calculateKeys(Handshaker.java:999)