Dotaz: NetBanka + Firefox-1.5.0.4 + JRE-1.5.0.6

[Devilkin]

Dobrý večer všem,
můžete mi prosím někdo potvrdit, nebo vyvrátit funkčnost NetBanky (Živnostenská banka) s touto konfigurací - Firefox-1.5.0.4 + JRE-1.5.0.6. Všechno se tváří v pořádku, ale nedaří se zaregistrovat podpisový certifikát. Bohužel mi informace z JRE konzoly moc neříkají, ale snad se v tom někdo vyzná lépe. Zkusím to trochu zkratkovitě popsat: Prihlaseni
- bezpečnostni heslo prohližece
- bezpečnostní heslo certifikátu (jre)
tohle je log Java konzoly při přihlášení

security: Accessing keys and certificate in Mozilla user profile: /home/devilkin/.mozilla/default/hy48xqnq.slt
security: JSS package is not found
security: JSS is not configured
basic: New window ID: 20175af
basic: Value of xembed: 1
basic: setWindow: call before applet exists:20175af
basic: Referencing classloader: sun.plugin.ClassLoaderInfo@969c29, refcount=1
basic: Added progress listener: sun.plugin.util.GrayBoxPainter@139e351
basic: Loading applet ...
basic: Initializing applet ...
basic: Starting applet ...
network: Connecting https://www1.netbanka.cz/ZIBAIBS32/bin/bsc/util/javadetector/JavaDetector.class with proxy=DIRECT
security: Loading Root CA certificates from /home/devilkin/.java/deployment/security/trusted.cacerts
security: Loaded Root CA certificates from /home/devilkin/.java/deployment/security/trusted.cacerts
security: Loading Root CA certificates from /opt/sun-jre-bin-1.5.0.06/lib/security/cacerts
security: Loaded Root CA certificates from /opt/sun-jre-bin-1.5.0.06/lib/security/cacerts
security: Loading SSL Root CA certificates from /home/devilkin/.java/deployment/security/trusted.jssecacerts
security: Loaded SSL Root CA certificates from /home/devilkin/.java/deployment/security/trusted.jssecacerts
security: Loading SSL Root CA certificates from /opt/sun-jre-bin-1.5.0.06/lib/security/cacerts
security: Loaded SSL Root CA certificates from /opt/sun-jre-bin-1.5.0.06/lib/security/cacerts
security: Loading Deployment SSL certificates from /home/devilkin/.java/deployment/security/trusted.jssecerts
security: Loaded Deployment SSL certificates from /home/devilkin/.java/deployment/security/trusted.jssecerts
security: Loading certificates from Deployment session certificate store
security: Loaded certificates from Deployment session certificate store
basic: User selected: 0
network: Connecting https://www1.netbanka.cz/ZIBAIBS32/bin/bsc/util/javadetector/JavaDetector.class with cookie "JSESSIONID=00001HrVszuOXp_r15SBdeJRMUz:-1"
basic: Loading https://www1.netbanka.cz/ZIBAIBS32/bin/bsc/util/javadetector/JavaDetector.class from cache
liveconnect: JavaScript: calling Java system code
liveconnect: JavaScript: default security policy = https://www1.netbanka.cz
..... (opakuje se to tak 1000x)
liveconnect: JavaScript: UniversalBrowserRead enabled
liveconnect: JavaScript: default security policy = https://www1.netbanka.cz

-pak se přihlásím (jméno, heslo) Java konzola vyhodí tohle:

basic: New window ID: 0
basic: Stopping applet ...
basic: Removed progress listener: sun.plugin.util.GrayBoxPainter@139e351
basic: Finding information ...
basic: Releasing classloader: sun.plugin.ClassLoaderInfo@969c29, refcount=0
basic: Caching classloader: sun.plugin.ClassLoaderInfo@969c29
basic: Current classloader cache size: 1
basic: Done ...
basic: Joining applet thread ...
basic: Destroying applet ...
basic: Disposing applet ...
basic: Joined applet thread ...
basic: Quiting applet ...

a objeví se informace, že nemám zaregistrovaný podpisový certifikát. - Vlezu do banky Java konzola hlásí:

basic: New window ID: 201a2fe
basic: Value of xembed: 1
basic: setWindow: call before applet exists:201a2fe
basic: Referencing classloader: sun.plugin.ClassLoaderInfo@45378f, refcount=1
basic: Added progress listener: sun.plugin.util.GrayBoxPainter@b8176d
basic: Loading applet ...
basic: Initializing applet ...
basic: Starting applet ...
network: Connecting https://www1.netbanka.cz/ZIBAIBS32/bin/aplp11_plugin-3.3.0.0.jar with proxy=DIRECT
security: Loading certificates from Deployment session certificate store
security: Loaded certificates from Deployment session certificate store
network: Connecting https://www1.netbanka.cz/ZIBAIBS32/bin/aplp11_plugin-3.3.0.0.jar with cookie "JSESSIONID=0000-dPVZdyWSmRzGz80Qt8aHY-:-1"
basic: Loading https://www1.netbanka.cz/ZIBAIBS32/bin/aplp11_plugin-3.3.0.0.jar from cache
basic: Reading cached JAR file from JRE 1.5 release
basic: Certificates for https://www1.netbanka.cz/ZIBAIBS32/bin/aplp11_plugin-3.3.0.0.jar is read from JAR cache
security: Loading Deployment certificates from /home/devilkin/.java/deployment/security/trusted.certs
security: Loaded Deployment certificates from /home/devilkin/.java/deployment/security/trusted.certs
security: Loading certificates from Deployment session certificate store
security: Loaded certificates from Deployment session certificate store
security: Checking if certificate is in Deployment permanent certificate store
1154463302194 [Secto] Starting Secto [3.3.0.0]
adding Provider IAIK...

Java version number: null
Java compiler: null
Java vendor-specific string: null
Java vendor URL: null
Java installation directory: null
Java class format version number: null
Java class path: null
Operating system name: null
Operating system architecture: null
Operating system version: null

Installed security providers providers:

Provider 1: IAIK  version: 3.0100000000000002
Provider 2: SUN  version: 1.0
1154463302267 [Secto] Setting JavaScript variable [isSectoRunning]...
liveconnect: the url of the applet is https://www1.netbanka.cz and the permission is = true
liveconnect: JSObject::eval(isSectoRunning=true)
liveconnect: the url of the applet is https://www1.netbanka.cz and the permission is = true
liveconnect: JavaScript: calling Java system code
liveconnect: JavaScript: default security policy = https://www1.netbanka.cz
liveconnect: JavaScript: calling Java system code
liveconnect: JavaScript: default security policy = https://www1.netbanka.cz
1154463302272 [Secto] Variable [isSectoRunning] set
1154463302275 [Secto] Initializing SecRandom...
1154463302281 [Secto] SecRandom [iaik.security.random.SHA1Random] ready
1154463302282 [Secto] Initializing SeedGenerator...
1154463305043 [Secto] SeedGenerator [iaik.security.random.MetaSeedGenerator] ready

- Jdu na registraci certifikátu, odkaz procházet. Mělo by se objevit okno, kde si můžu naklikat cestu k certifikátu, ale to se nestane. JAVA LOG:

liveconnect: JavaScript: calling Java system code
liveconnect: JavaScript: default security policy = https://www1.netbanka.cz
liveconnect: JavaScript: calling Java system code
liveconnect: JavaScript: default security policy = https://www1.netbanka.cz
.... (Opět tak 1000x)
liveconnect: JavaScript: UniversalBrowserRead enabled
liveconnect: JavaScript: default security policy = https://www1.netbanka.cz
1154463577180 [Secto] File dialog...
java.security.PrivilegedActionException: java.lang.reflect.InvocationTargetException
	at java.security.AccessController.doPrivileged(Native Method)
	at sun.plugin.liveconnect.SecureInvocation$2.run(Unknown Source)
	at java.security.AccessController.doPrivileged(Native Method)
	at sun.plugin.liveconnect.SecureInvocation.CallMethod(Unknown Source)
	at sun.plugin.navig.motif.AThread.handleRequest(Native Method)
	at sun.plugin.navig.motif.AThread.JNIHandleLoop(Unknown Source)
	at sun.plugin.navig.motif.AThread.run(Unknown Source)
Caused by: java.lang.reflect.InvocationTargetException
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
	at java.lang.reflect.Method.invoke(Unknown Source)
	at sun.plugin.javascript.invoke.JSInvoke.invoke(Unknown Source)
	at sun.reflect.GeneratedMethodAccessor5.invoke(Unknown Source)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
	at java.lang.reflect.Method.invoke(Unknown Source)
	at sun.plugin.javascript.JSClassLoader.invoke(Unknown Source)
	at sun.plugin.liveconnect.PrivilegedCallMethodAction.run(Unknown Source)
	... 7 more
Caused by: java.security.AccessControlException: access denied (java.io.FilePermission /home/devilkin read)
	at java.security.AccessControlContext.checkPermission(Unknown Source)
	at java.security.AccessController.checkPermission(Unknown Source)
	at java.lang.SecurityManager.checkPermission(Unknown Source)
	at java.lang.SecurityManager.checkRead(Unknown Source)
	at java.io.File.isDirectory(Unknown Source)
	at sun.awt.X11.XFileDialogPeer.setDirectory(Unknown Source)
	at sun.awt.X11.XFileDialogPeer.show(Unknown Source)
	at java.awt.Dialog.conditionalShow(Unknown Source)
	at java.awt.Dialog.show(Unknown Source)
	at java.awt.Component.show(Unknown Source)
	at java.awt.Component.setVisible(Unknown Source)
	at bsc.security.Secto.fileFromDialog(Unknown Source)
	... 17 more
liveconnect: JavaScript: UniversalBrowserRead enabled
liveconnect: JavaScript: default security policy = https://www1.netbanka.cz
liveconnect: JavaScript: UniversalBrowserRead enabled
liveconnect: JavaScript: default security policy = https://www1.netbanka.cz
liveconnect: JavaScript: UniversalBrowserRead enabled
liveconnect: JavaScript: default security policy = https://www1.netbanka.cz
liveconnect: JavaScript: UniversalBrowserRead enabled
liveconnect: JavaScript: default security policy = https://www1.netbanka.cz
liveconnect: JavaScript: UniversalBrowserRead enabled
liveconnect: JavaScript: default security policy = https://www1.netbanka.cz
liveconnect: JavaScript: UniversalBrowserRead enabled
liveconnect: JavaScript: default security policy = https://www1.netbanka.cz
liveconnect: JavaScript: UniversalBrowserRead enabled
liveconnect: JavaScript: UniversalJavaPermission enabled

Pokud zkusím manualně zadat cestu a heslo, tak vyskočí Error - Chyba při registraci podpisového certifikátu. JAVA LOG:

liveconnect: JavaScript: UniversalBrowserRead enabled
liveconnect: JavaScript: default security policy = https://www1.netbanka.cz
.... (tak 50x)
liveconnect: JavaScript: default security policy = https://www1.netbanka.cz
liveconnect: JavaScript: calling Java system code
liveconnect: JavaScript: default security policy = https://www1.netbanka.cz
liveconnect: JavaScript: calling Java system code
..... (tak 1000x)
liveconnect: JavaScript: default security policy = https://www1.netbanka.cz
liveconnect: JavaScript: caller and callee have same origin
liveconnect: JavaScript: default security policy = https://www1.netbanka.cz
liveconnect: JavaScript: caller and callee have same origin
liveconnect: JavaScript: default security policy = https://www1.netbanka.cz
1154463810585 [PKCS12] Verify result [32]
liveconnect: JavaScript: caller and callee have same origin
liveconnect: JavaScript: default security policy = https://www1.netbanka.cz

Nejde to ani v Mozille suite. Předem děkuji všem, co se dostali až sem a pokud by někdo věděl jak na to, budu moooc rád.

Odpovědi

[Devilkin]

Omlouvám se těm, co ztratili čas čtením této otázky.

Asi jsem už přepracovaný a slibuji, že jdu už spát .

Ponaučení: Někdy je dobré se podívat i na datum platnosti certifikátu

[Honza.G]

To je bezva,zes na to prisel, tak to bys mi mohl poradit, co delam spatne, ze mi to nejde, protoze mam skoro totoznou konfiguraci (Mandriva 10 LE). Z http://www.linuxsoft.cz/article_print.php?id_article=480 vim, ze mam naimportovat certifikat do javy (coz jsem udelal - pomoci /usr/java/jre1.5.0_07/bin/ControlPanel ), na prochazeni adresari pri registraci jsem rezignoval, ale ani po napsani cesty a hesla k podpis.certifikatu tlacitko registrace neudela nic nez ze smaze to heslo. V java konsoli je hafa chyb, ale nic co by se napovedelo. Podle rady na linuxsoftu jsem zkusil prohlizec Opera a ejhle, vse chodi jak ma a rychleji nez ve woknech. Ale mne se Firefox libi vic, tak mi to mrzi, ze to tam nechodi zvlast kdyz Tobe jo. Nejaky tip? diky Honza.g@centrum.cz

[Devilkin]

A opravdu funguje ve Firefoxu JAVA?
- třeba jednoduchy test na stránkkách netbanky. Pokud je to opravdu v pořádku, tak by neměl být žádný problém. Aspoň já jsem žádný neměl, až na to procházení adresářů (nejde ani v Mozilla Suite - 1.7.13 ani ve Firefoxu 1.5.0.4). Další možnost je zaregistrovat certifikát pomocí Opery (tam fungovalo i to procházení). Pokud si to dobře pomatuju, tak se cesta k podpis. certifikátu ukládá na server banky.

[Devilkin]

V java konsoli je hafa chyb, ale nic co by se napovedelo.

Aj sorry, jsem si to nějak pořádně nepřečetl. Takže zbývá už jen ta registrace v Opere

[AL]

Řešil jsem stejný problém, mám SeaMonkey 1.1 a Sun Javu 1.5.0-08. SeaMonkey stažené z mozilla.org, Javu z balíku z Ubuntu. Po instalaci mi nefungovala "registrace podpisového certifikátu". No vyřešil jsem to přidáním záznamu: grant { permission java.security.AllPermission; }; do souboru $HOME/.java.policy jak píše Ondřej zde http://www.linuxsoft.cz/article.php?id_article=480 . Pokud by byl někdo tak laskav a dopsal vysvětlení bylo by to jistě fajn.