>>> jfreres 05/14/10 8:15 PM >>>
On 05/12/2010 02:23 PM, Jim WANDERSCHEID wrote:
>> First some possibly related info:
>> For some indiscovered reason my Ubuntu/Firefox3 combination does not
>> work any more on the BGL site.
>
>Hello,
>
I get this on lucid/firefox3.6:
May 15, 2010 3:23:16 PM lu.luxtrust.logging.jre.JRELogger log
WARNING: Unknown parameter : label.btnReload
May 15, 2010 3:23:16 PM lu.luxtrust.logging.jre.JRELogger log
WARNING: Unknown parameter : label.smartcards
Exception in thread "thread applet-com.luxtrust.web.applets.signature.SignApplet-1" java.lang.ClassFormatError: Incompatible magic value 168430090 in class file lu/luxtrust/gemalto/classic/cryptoti/GTO_CTI_Module
at java.lang.ClassLoader.defineClass1(Native Method)
at java.lang.ClassLoader.defineClassCond(ClassLoader.java:632)
at java.lang.ClassLoader.defineClass(ClassLoader.java:616)
at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:141)
at sun.plugin2.applet.Applet2ClassLoader.findClass(Applet2ClassLoader.java:208)
at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
at java.lang.ClassLoader.loadClass(ClassLoader.java:248)
at java.lang.Class.forName0(Native Method)
at java.lang.Class.forName(Class.java:169)
at lu.luxtrust.commonlayer.Adapter.newInstance(Adapter.java:131)
at com.luxtrust.web.applets.signature.SignApplet.initCryptoTI(Unknown Source)
at com.luxtrust.web.applets.signature.SignApplet.init(Unknown Source)
at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Plugin2Manager.java:1579)
at java.lang.Thread.run(Thread.java:619)
> I don't know if the tokens (sms, or token generator) are working with
linux, as i don't have them.
For development purposes I have all 4 private versions available in the office. They all work with Linux (ubuntu flavor).
> Luxtrust only lists MAC and Windows as compatible with the tokens,
but why should they not work on a linux?
There is no reason it shouldn't work.
> Do the tokens need a middleware at all?
No, basically, tokens don't.
> As i understand the specifications at Luxtrust site, the tokens need a middleware only if
they are used in some specific applications like "de guichet".
Correct. This is due to the fact that the guichet's vision is to apply signatures on documents using the adobe acrobat features (it is an embedded signature stored in the pdf document). If you want to do this, you need a middleware even if your using tokens.
Whereas the City of Luxembourg uses a detached signature without adobe stuff, avoiding the need for special middlewares on tokens.
My bank (BGL) uses Luxtrust only to identify me, not to sign documents. That works without a middleware on tokens.
> Whereas for bank applications, the tokens work with a java applet
without a middleware, whatever the browser or the OS ...?
See above, if you only identify people, you don't need middleware with tokens.
> I think a major incentive for Luxtrust developping the token versions,
> was to have a solution for people using Luxtrust in their workplaces,
> where users are not allowed to install a Luxtrust software middleware or
> plugin a certificate on an USB device.
Yeap, and if you're on vacation and need to do some urgent bank operations out of a cybercafe somewhere in the world.
Jim Wanderscheid
jim.wanderscheid(a)gmail.com
Hello all,
Taking the opportunity that was given to me by the CCP Luxembourg to get
a free Luxtrust certificate, I ordered it but ... when receiving the
password letter I went to the luxtrust site to discover that, using any
of the browsers I have (I tryed with opera, seamonkey and firefox3), I
always get :
La configuration de votre ordinateur ne permet pas d'effectuer
l'action demandée.
* Bien que LuxTrust s'éfforce de rendre ses produits compatibles
avec les systèmes d'exploitation Linux, nous ne pouvons pas
garantir que votre produit fonctionnera correctement .*
Par ailleurs, LuxTrust n'est pas en mesure de fournir un support
technique pour les plarteformes Linux. Si vous avez besoin d'un
support veuillez contacter la communauté Linux.*
* * * *Le support pour ce navigateur Internet n'est pas connu.
Veuillez utiliser un navigateur officiellement supporté par
LuxTrust liste des configurations officiellement supportées
<https://www.luxtrust.lu/solutions/config/config>*
As you can see from the link above, "only" two distros are supported
(Linux Debian 4.0 (Etch) and Linux Red Hat 4.0) and firefox is valid on
the later only. And that is not even with the signing server (token)
they sent me !
Was anybody able to use the said certificate with linux ?
Thanks for your help.
Guilain
> From: Brent Fr?re <Brent.Frere(a)abilit.eu>
> Subject: Re: [Lilux-help] Luxtrust certificate - activation
> To: Jim WANDERSCHEID <jwanderscheid(a)vdl.lu>
> Cc: lilux-help(a)lilux.lu
>
> Jim WANDERSCHEID a ?crit :
>> Also, do you have a JRE from SUN installed or any other one like e.g.
>> OpenJDK?
>> I had bad experiences with anything else than the Sun package when
>> using LuxTrust signatures.
>>
> I had the problem at one of my customer's site: I confirm that only the
> genuine Sun Java version works with LuxTrust.
Hello,
I use my Luxtrust certification (smartcard version) with my netbook
Asus with external USB card reader.
It works fine. Distro is Ubuntu Netbook Remix.
Indeed (as far as I remember) only Sun JDK works.
For bank BCEE connection it works fine. However for Guichet.lu it
doesn't work : it seems that for this website unfortunately browser IE
is requested.
Bye,
Bruno
--
Linux Counter #353844
http://counter.li.org/
----------------------------------------------------------------
Hello everyone. Does anyone have any experience with using NAS devices
in a mixed environment (Windows, OSX, and linux)? The two primary
purposes of the device would be backup of user data and
sharing/streaming of media files.
Due to the layout of my apartment, this device will be sitting in my
living room in the open, so it must be quiet and ideally compact enough
to fit on a bookshelf behind a few small books.
Although I am not fixated on it, RAID 1 or above would be a very nice
value add.
User swappable drives would be preferred.
It should work with OSX Time Machine, but not let it eat up the entire
hard drive (quota support)
Of course, I would love to have something that is based on open source
software!
So, does anyone have any advice, recommendations, horror stories?
Regards
Mike
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Good day lads,
I have a little issue with nginx as reverse proxy for an imap server.
Instead of retelling all of the story in this mail I'll rather point to the forums I've been posting
about this:
http://www.zimbra.com/forums/administrators/39925-nginx-mail-proxy-times-ou…
What I need (I guess) is a suiting solution to debug that SSL connection timing out. I've been
looking at the connection with tcpdump but let's not allow ourselves any illusions, I don't really
know what I should be looking at.
Any tips?
D.
- --
HaxoGreen 2010 - the Hackers' Summercamp in Luxembourg
July 22nd till July 25th 2010, in Dudelange, Luxembourg
Register Now: http://events.hackerspace.lu/camp/2010/
- ----
mailto:david@hackerspace.lu
xmpp:kwisatz@jabber.hackerspaces.org
mobile: +43 650 73 63 834 | +352 691 44 23 24
++++++++++++++++++++++++++++++++++++++++++++
Wear your geek: http://syn2cat.spreadshirt.net
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAkvpAnoACgkQYTtdUdP5zDe6QACgstMOa3XxU1VqRolLDef0BnHg
6DAAn2TQVNUEvFQHyY6vIcmHZr//g31a
=vQJH
-----END PGP SIGNATURE-----
Hi,
I've been experiencing a very bizarre problem :
I have an ASUS laptop with Windows Vista and a Huawei USB modem with a Tango subscription [mobile internet]. It works just fine under Vista.
A couple of days ago I got from a magazine a DVD with several Linux distributions, I tried some of them [namely Suse and Mandriva] in the live-CD mode [running from the DVD] and they seemed to work fine. They even recognized the Huawei, configured it without a problem and the internet connection was pretty good. As a matter of fact much faster than Windows !
So, I decided to install Mandriva on the hard disk, installation went just fine [multiple boot with grub], and internet was excellent.
And then I shut down and when I turned the PC on the following day, I had no internet and Mandriva did not even see my Huawei modem! I tried several times with the other distributions from my DVD but nothing. Huawei had disappeared completely!!!
Still I can use it without any problem from Windows !
Does anybody have an idea ? Who can help me ?
thanks in advance
Nikolas NASSOS
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Short translation service:
Gemalto decreased the development process to 15k Euros and recommended
using the .net imlementation where the source would be available.
D.
- -------- Original Message --------
Subject: Antwort: Re: gemsafe LIB - libgclib.so - Linux 64 bit
Date: Wed, 14 Apr 2010 16:18:14 +0200
From: the guy
To: David Raison <david(a)hackerspace.lu>
Hallo David,
vielen Dank fuer deine muehe und die schnelle Antwort.
Ich habe heute mit Gemalto gesprochen - Kundenspezifisch wuerde die
Entwicklung ca. 15k Euro kosten. Da sind sie in dem einem Jahr
schonmal mit dem Preis drastisch nach unten gegangen. :) 58k Euro - da
kann man jetzt nicht wirklich viel zu sagen ausser das einem die spuke
wegbleibt.
Wenn wir eine Karte haben moechten die Plattform uebergreifend
funktioniert und nicht dem Europaeischen Sicherheitsstandard
entsprechend muss - also FIPS ausreichend ist, dann sollten wir es mit
der DOT NET von Gemalto probieren - da ist der SOURCE dann auch frei
verfügbar.
Also versuchen wir das mal !
Nochmals vielen Dank!
Grus
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAkvFz3gACgkQYTtdUdP5zDd7XACfYONQd+/Fq8RkendkHpR+CV/N
PncAnRQ1rTZhATXqmZaX6g4woT5trcQy
=zAly
-----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hey
You may remember my Mini-Howto for using the luxtrust stick on a 32bit
Gentoo System (available here: http://c3l.lu/wiki/index.php/Luxtrust)
Now this guy would like to run it on his 64bit system. I'm certain he
won't be able to get the sourcecode, as it is proprietary; but I'm
clueless about using 32bit libraries on 64bit systems.
Can someone enlighten me on this or give me a direction where to look?
Thanks,
D.
- -------- Original Message --------
Subject: gemsafe LIB - libgclib.so - Linux 64 bit
Date: Wed, 14 Apr 2010 00:40:20 +0200
From: [name removed]
To: david(a)hackerspace.lu
Hello David,
i have a question to GemSafe Lib. is it possible to get on a 64 bit
linux system to run? Can you give me a tip here or tell where i can
get the source of the 32 lib?
best regards
[name removed]
Mit freundlichen Grüßen
[Name removed]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAkvFqjAACgkQYTtdUdP5zDd/iACgj1Yps34RrWKQvsOAlFu7e+vY
dUYAoMpP3iH4EszTHJ30DpB5MOUDR0vw
=Q1d0
-----END PGP SIGNATURE-----
Hello,
THanks again you put me on the right way, interesting point is
when you suggest to try telnet localhost: connection refused means
obviously that tcp connection is impossible, this caused by a bad
configuration of the system; thus I found in /etc/hosts the line:
127.0.0.1 localhost
should be:
127.0.0.1 localhost.localhost.localdomain
I'm not sure that it is a definitive solution, but now connection
to the Oracle's home page is possible; maybe Suyse is responsible to
don't create correctly this file, I don't know what happends with
other distros
--- On Tue, 2/16/10, Alain Knaff <alain(a)knaff.lu> wrote:
> From: Alain Knaff <alain(a)knaff.lu>
> Subject: Re: [Lilux-help] access to Oracle
> To: "Michel-G. .Maria-Sube" <mgms1(a)yahoo.com>
> Cc: lilux-help(a)linux.lu
> Date: Tuesday, February 16, 2010, 10:18 PM
> Michel-G. .Maria-Sube wrote:
> >> What would be interesting to check is:
> >> 1. Find out what the process is called: do an lsof
> -i
> >> tcp:1154 while it
> >> works, and not the name of the process.
>
> ^
> Ooops, should have been "note the name of the process"
> Be sure to exclude firefox of course, if you have a
> connection right at
> that time :-) We are interested in the process that is
> LISTENing on this
> port, not in the clients that may be connecting to it...
>
> >
> > Ok, for practical aspect I will use port 1158 here
> because I have
> > the same problem on two machine running under Suse10.*
> (one in 32b
> > the other in 64b); on current machine http is
> configurated on port
> > 1158.
> >
> > lsof -i tcp:1158 gives no answer
>
> Weird... and you are sure that at this point in time,
> firefox was still
> connecting?
>
> > When I'm launchig
> >
> > firefox http://127.0.0.1:1158/apex
> >
> > and ps -ax|grep firefox I obtain:
> >
> > 6505 ? S
> 0:00 /bin/sh /usr/bin/firefox
> > 6510 ? Sl
> 0:40 /usr/lib64/firefox/firefox
> > 6749 pts/28 S+
> 0:00 grep firefox
>
> Indeed, it's the server process that's important, not the
> client (which
> is firefox obviously...)
>
> > I don't find any log-file at the moment
> >
> [...]
> >> if you somehow don't trust your browser or its
> settings,
> >> you can try to
> >> telnet directly to the port:
> >>
> >> telnet localhost 1154
> >
> > Once again connection is refused:
> >
> > #telnet localhost 1158
> > Trying 127.0.0.1...
> > telnet: connect to address 127.0.0.1: Connection
> refused
> > Trying 127.0.0.1...
> > telnet: connect to address 127.0.0.1: Connection
> refused
> > Trying ::1...
>
> ok.
>
> Regards,
>
> Alain
>
Hello,
For several weeks I've installed both server and client version of Oracle express 10g on my laptop and I reguraly encounter connection problem for access to the main page in graphical version; as it is indicated in the documentation acces is provided by navigating at adress http://127.0.0.1:1154/apex, assuming appplication uses 1154 port, and browser is configurated to don't use proxy for 127.0.0.1; but sometimes it works, sometimes it doesn't!!! What could happend or what else to do?
THank you in advance for suggestions
M-G
