as described in
http://wiki.services.openoffice.org/wiki/How_to_use_digital_Signatures "Debian
and maybe Fedora Linux Installations seem to set the profile names in an other
way as suggested by the Mozilla developers. In this case the Certificates are
not shown in the digital signature dialog of the Office suite. In this case,
locate the appropriate profile folder and set the Environment Variable
MOZILLA_CERTIFICATE_FOLDER accordingly."

This is because distros don't distribute the hacked up moz stuff in a vanilla
OOo due to fears about missing security updates, and for dislike of duplication.
The upshot though is that the mozilla address book stuff is not available, and
it is this profile code that is used by xmlsecurity to find the profiles.

Attached is a patch to provide a minimal profile finder in with-system-mozilla
case which will allow OOo to work-out-of-the-box on fedora and other distros.