12 Jun
2012
12 Jun
'12
8:50 a.m.
Hello,
On 2012-06-12 09:32, Bruno Costacurta wrote:
Hello,
I have an Ubuntu 64-bit.
So I download the middleware 64-bit (which is now available) from
Luxtrust website.
https://www.luxtrust.lu/fr/simple/189
My java version is openjdk-7.
I also installed icedtea-7 for the Firefox browser plugin.
As far as I know, you need Sun (Oracle) Java 7. Icedtea does not work
correctly (is not able to manage additional permissions requested by
java applets)
You may find instructions on how to install it here:
http://www.webupd8.org/2012/01/install-oracle-java-jdk-7-in-ubuntu-via.html
However, even with Java 7, there still are errors with the various
banks... (tested with BGL, BCEE and CCP).
Presumably, the banks have not yet installed "their" part of the 64 bit
Library.
Indeed, rather than using the standard Java PKCS11 Interface, the banks
provide their own JNI because apparently they prefer to support the
(IMHO) rare case of a user having more than one card reader, rather than
opting for simplicity and reliability (the standard Java PKCS11
Interface does apparently not support choosing between card readers).
However I got two following problems or errors using two different
testing methods.
1)
Using Luxtrust test site.
https://www.luxtrust.lu/fr/management/status
I'm able to reach the PIN checking phase (which works correctly) but no
more.
Here it helps to install firebug, and the locate the opacity: 0
statement in the CSS (in id #main_content), and disable it.
I was expecting here some additional validation or
display about the
card ..etc.. so it looks stuck.
Yes, after the above work-around, I'm only seeing a page with "status"
written in huge red letters (and menues around it...). I'm not really
sure what this means, or what to do next...
2)
Under BCEE bank website I have the following error when trying to start
the applet :
java.security.AccessControlException : access denied("java lang
RuntimePermission" "setIO")
With BCEE, I get "Erreur LuxTrust: 131081 - LTEC:131081:Middleware is
not installed!" (Number may be off, I had to retype this, because they
used some trickery to disable copy-paste...)
With BGL, last week I got a ClassNotFoundException mentioning a fortis
class (D'oh, it's already 3 1/2 years since they're no longer Fortis...)
When I retried today, it dumps a 32 Bit JNI into /tmp, and then just
sits there doing nothing (and one time it even freeze'd my browser).
Apparently, the banks haven't updated their applet yet to detect the
architecture (32 bit or 64) and chose the JNI which is appropriate.
Other persons using the middleware 64-bit ?
Some clues or help ?
Many thanks.
Bye,
Bruno
Yes, I've been trying it since last week. No success with any bank, but
I do manage loading it in my browser using
Advanced->Encryption->SecurityDevices, and can then use it as a client
certificate with web sites that ask for a client certificate.
File name of the module is /usr/lib/pkcs11/libgclib.so
Regards,
Alain