Re: [Lilux-help] Luxtrust certificate - activation - Lilux-help

15 May 2010

...
 >> jfreres  05/14/10 8:15 PM >>>
On 05/12/2010 02:23 PM, Jim WANDERSCHEID wrote:
...
   First some
possibly related info:
 For some indiscovered reason my Ubuntu/Firefox3 combination does not
 work any more on the BGL site. 
Hello,

I get this on lucid/firefox3.6:

May 15, 2010 3:23:16 PM lu.luxtrust.logging.jre.JRELogger log
WARNING: Unknown parameter : label.btnReload
May 15, 2010 3:23:16 PM lu.luxtrust.logging.jre.JRELogger log
WARNING: Unknown parameter : label.smartcards
Exception in thread "thread
applet-com.luxtrust.web.applets.signature.SignApplet-1" java.lang.ClassFormatError:
Incompatible magic value 168430090 in class file
lu/luxtrust/gemalto/classic/cryptoti/GTO_CTI_Module
at java.lang.ClassLoader.defineClass1(Native Method)
at java.lang.ClassLoader.defineClassCond(ClassLoader.java:632)
at java.lang.ClassLoader.defineClass(ClassLoader.java:616)
at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:141)
at sun.plugin2.applet.Applet2ClassLoader.findClass(Applet2ClassLoader.java:208)
at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
at java.lang.ClassLoader.loadClass(ClassLoader.java:248)
at java.lang.Class.forName0(Native Method)
at java.lang.Class.forName(Class.java:169)
at lu.luxtrust.commonlayer.Adapter.newInstance(Adapter.java:131)
at com.luxtrust.web.applets.signature.SignApplet.initCryptoTI(Unknown Source)
at com.luxtrust.web.applets.signature.SignApplet.init(Unknown Source)
at
sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Plugin2Manager.java:1579)
at java.lang.Thread.run(Thread.java:619)

...
  I don't know if the tokens (sms, or token
generator) are working with  linux, as i don't have them.

For development purposes I have all 4 private versions available in the office. They all
work with Linux (ubuntu flavor).

...
  Luxtrust only lists MAC and Windows as compatible with
the tokens, but why should they not work on a linux?

There is no reason it shouldn't work.

...
  Do the tokens need a middleware at all? 

No, basically, tokens don't.

...
  As i understand the specifications at Luxtrust site,
the tokens need a middleware only if  they are used in some specific applications
like "de guichet".

Correct. This is due to the fact that the guichet's vision is to apply signatures on
documents using the adobe acrobat features (it is an embedded signature stored in the pdf
document). If you want to do this, you need a middleware even if your using tokens.
Whereas the City of Luxembourg uses a detached signature without adobe stuff, avoiding the
need for special middlewares on tokens.
My bank (BGL) uses Luxtrust only to identify me, not to sign documents. That works without
a middleware on tokens.

...
  Whereas for bank applications, the tokens work with a
java applet  without a middleware, whatever the browser or the OS ...?

See above, if you only identify people, you don't need middleware with tokens.

...
  I think a major incentive for Luxtrust developping the
token versions, 
 was to have a solution for people using Luxtrust in their workplaces,
 where users are not allowed to install a Luxtrust software middleware or 
 plugin a certificate on an USB device. 

Yeap, and if you're on vacation and need to do some urgent bank operations out of a
cybercafe somewhere in the world.

Jim Wanderscheid
jim.wanderscheid(a)gmail.com