So, now I have to figure out what's wrong with my Oracle JDK NSS setup.
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
As for OpenJDK + NSS, it looks like that NSS implementation simply does not provide a SecureRandom provider.
SunPKCS11-NSS version 1.7 Signature.MD2withRSA Cipher.DES/CBC/NoPadding Cipher.AES/CBC/PKCS5Padding Cipher.RSA/ECB/NoPadding Cipher.DES/CBC/PKCS5Padding KeyFactory.DH Signature.RawDSA KeyGenerator.SunTlsMasterSecret Cipher.RSA/ECB/PKCS1Padding Alg.Alias.Cipher.RSA Alg.Alias.MessageDigest.SHA-1 Alg.Alias.KeyAgreement.DiffieHellman Alg.Alias.KeyPairGenerator.DiffieHellman KeyAgreement.DH Cipher.DESede/ECB/NoPadding Provider.id className Alg.Alias.MessageDigest.SHA Mac.HmacSHA384 Cipher.AES/ECB/NoPadding Mac.HmacSHA512 KeyFactory.DSA Mac.HmacMD5 Mac.SslMacMD5 SecretKeyFactory.ARCFOUR Mac.HmacSHA1 KeyGenerator.DES Mac.SslMacSHA1 Alg.Alias.Cipher.DESede Cipher.DESede/CBC/PKCS5Padding SecretKeyFactory.DES Provider.id name Cipher.DESede/CBC/NoPadding Cipher.AES/ECB/PKCS5Padding Signature.SHA1withRSA KeyStore.PKCS11 Cipher.ARCFOUR KeyGenerator.AES Cipher.DES/ECB/PKCS5Padding SecretKeyFactory.DESede Alg.Alias.Signature.SHA1withDSA Signature.MD5withRSA MessageDigest.SHA-384 SecretKeyFactory.AES Signature.SHA512withRSA KeyPairGenerator.RSA Cipher.AES/CBC/NoPadding KeyPairGenerator.DH KeyGenerator.ARCFOUR MessageDigest.SHA-512 KeyGenerator.SunTlsPrf Provider.id version Alg.Alias.KeyFactory.DiffieHellman Signature.SHA256withRSA KeyGenerator.SunTlsKeyMaterial Alg.Alias.Cipher.DES Alg.Alias.Signature.NONEwithDSA Mac.HmacSHA256 Alg.Alias.Cipher.RC4 Signature.SHA384withRSA Alg.Alias.KeyStore.PKCS11-NSS Alg.Alias.KeyGenerator.RC4 Cipher.DES/ECB/NoPadding Cipher.DESede/ECB/PKCS5Padding Cipher.AES/CTR/NoPadding Alg.Alias.Cipher.AES KeyGenerator.SunTlsRsaPremasterSecret SecureRandom.PKCS11 Alg.Alias.SecretKeyFactory.RC4 KeyFactory.RSA KeyPairGenerator.DSA Provider.id info MessageDigest.SHA1 Signature.DSA MessageDigest.MD5 MessageDigest.SHA-256 MessageDigest.MD2 KeyGenerator.DESedeTherefore, there should be a different way how to generate secret key. I verified that branch mentioned in https://github.com/danbev/aerogear-simplepush-server/tree/0.8.0-secret-key-issue is working fine with OpenJDK7 + NSS.
So, now I have to figure out what's wrong with my Oracle JDK NSS setup.