Re: [Lilux-help] Luxtrust now works in 64 bit with BGL, CCP and Raiffeisen! (Was: Re: LuxTrust using middleware Ubuntu 64-bit)

Dear all, I have forewarded the information right now to our IT waiting for a reply. thanks Paul -----Original Message----- From: Alain Knaff [mailto:alain@knaff.lu] Sent: Tuesday, June 12, 2012 8:08 PM To: lilux-help(a)prophecy.lu Cc: SCHUMACHER Pierre; Guy.Muller(a)luxtrust.lu; MULTILINE BPI; Maurice Hellers; Marco Trauffler; Lionel Elie Mamane Subject: Luxtrust now works in 64 bit with BGL, CCP and Raiffeisen! (Was: Re: [Lilux-help] LuxTrust using middleware Ubuntu 64-bit) ***** This message comes from the Internet Network ***** Hello all, After a bit of investigation, I've found that the only reason why BGL, CCP and Raiffeisen bank do not yet work in 64 bit is because the banks have not deployed LuxTrust's new version of their java JNI shim. (This shim allows java applets to call the PKCS11 middleware directly, bypassing java's normal security framework, and allowing to propose a menu if multiple card readers are present) So far this shim has existed only for 32 bits (which is expected, as the middleware itself only existed for 32 bit). Now, Luxtrust also have made a 64 bit version, but the banks (apparently) haven't deployed this yet. This is understandable, but why was there nobody at BGL who could point this out? (BGL was the only bank among the 3 listed above that I contacted, as it is the only one where I've got an account. I've also contacted BCEE, but the issue with their site is apparently unrelated) However, Luxtrust themselves have already installed this shim on their own site! To get it, go to test.luxtrust.lu (with javascript activated :-( ), and click yourself through the test. Just before the final screen, a file named LT_CTI_CC_GEM_9176010884699777019.tmp of size 130203 bytes will show up in /tmp (the exact digits in the name will change each time). This is the 64 bit version of the shim (if you performed the "test" with a 64 bit browser, else you will get a 32 bit version of 120041 bytes). Copy this to LT_CTI_CC_64.tmp both to /tmp and to your home directory. Now run the attached fix64.pl script. The script watches for new LT_CTI_CC_GEM_???????????????????.tmp files to appear in /tmp, and as soon as one appears, it is replaced immediately with a symlink to the LT_CTI_CC_64.tmp that you placed there in the previous step. Now, while the script is running, visit again one of the BGL, CCP or Raiffeisen sites: it should work now! Probably, in a couple of days (or weeks... :-( ), once all banks have deployed the new version of the Luxtrust shim, this "hack" should no longer be necessary. Many thanks to Mr Hellers for pointing me to the Luxtrust test site and to the BGL team for fixing a previous issue with a leftover Fortis class. Regards, Alain ============================================ Internet communications are not secure and therefore BGL BNP Paribas does not accept legal responsibility for the contents of this message. The information contained in this e-mail is confidential and may be legally privileged. It is intended solely for the addressee. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. Nothing in the message is capable or intended to create any legally binding obligations on either party and it is not intended to provide legal advice. ============================================