Re: Bank of Ireland Business Banking

paul <[email protected]> Thu, 13 Oct 2016 12:46:27 +0100
Newsgroups	gmane.user-groups.linux.ilug.general
Message-ID	<[email protected]>
Where is it actually looking for the certs when you run it?
lsof (or some other system tool) should be able to tell you this, if
it's written competently.


On 13/10/16 12:16, Harry Duncan wrote:
> Hi Guys,
> 
> Been trying to get Bank of Ireland business banking working on my linux
> machine, and not having much luck, others appear to have had sucess but
> I am failing, just like to bounce my findings here.
> 
> My system is debian jessie 64bit with KDE, and I use firefox as my browser.
> 
> Traditionally Bank of Ireland only supported Microsoft Windows but this
> year released an upgrade to include Apple Mac support. From virtually
> any environment, you can log in and browse the application interface,
> but for the fun elements like making payments you need to use Sun Java
> to access digital certificates stored on the local machine.
> 
> I enrolled for a digital cert from linux, got my sun java working, and
> sucessfully created a digital cert with the path /home/harry/HARRY001
> 
> The actions of authorising a payment or changing the certificate
> password yield the error - no certificate.
> 
> I zipped up the cert, and took it to a windows host, unpacked it into:
> c:\mydocument\dc\HARRY001
> 
> And voilla it works, I can authorise payments from windows using the
> keys / certs I created under linux.
> 
> I googled for an answer, and it suggested the Apple default paths work
> under linux, so if you create
> /Users/<username>
> Then your cert goes into
> /Users/harry/HARRY001
> 
> Doesn't work for me. And yes... the path from /Users down is owned by
> me, my group, and I have given it world read write and excute permissions.
> 
> When you create a cert, it lets you specify the path, but you can't
> change this afterwards. I found this curious. I impersonated a Mac user
> and rang for support, the agent told me that you can create a cert on
> Mac and transport it to windows and use it, but you cannot create a cert
> on windows and transport it to a Mac. The reason all comes down to the
> certificate path. He was able to tell me my path over the phone that it
> was /home/harry/HARRY001 but then asked me to try using it from Safari
> at which point I had to bug out of the call.
> 
> So voilla, the path is not the path, if you set the path on Windows, it
> will expect a c:\ path on any
> other device that you transport the key pair to, but if you create it on
> a mac, it will by default put the cert into /Users/<username> and then
> when loaded on windows, will default back to looking in
> c:\mydocument\dc\<CERTFOLDERNAME>
> 
> I tested this, I created a new cert on a mac, the cert went into
> /Users/harry/HARRY001
> 
> Logged in, it works, I can change the cert password.
> 
> Transported it to my linux host, same path
> logged in, can't change the password, complains that I have no cert
> 
> Transported it to my windows laptop
> put it into c:\mydocument\dc
> works, can change the cert password.
> 
> And it still works on the mac.
> 
> 
> My system specifics are:
> 
> root@linux:/# uname -a
> Linux linux 3.16.0-4-amd64 #1 SMP Debian 3.16.7-ckt25-2+deb8u3
> (2016-07-02) x86_64 GNU/Linux
> root@linux:/# java -version
> java version "1.8.0_101"
> Java(TM) SE Runtime Environment (build 1.8.0_101-b13)
> Java HotSpot(TM) 64-Bit Server VM (build 25.101-b13, mixed mode)
> root@linux:/#
> 
> 
> Curious if anybody has this working and if you are using 32bit or 64bit
> system, 32 bit or 64bit java, and what distro, and if you can spot
> anything glaringly wrong in what I am attempting??
> 
> Are there any particular permissions on the cert folder and key files?
> 
> Thanks,
> 
> Harry.
> 
> -- 
> Irish Linux Users Group
> ---
> You received this message because you are subscribed to the Google
> Groups "ILUG" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to [email protected] <mailto:[email protected]>.
> To post to this group, send email to [email protected] <mailto:[email protected]>.
> Visit this group at https://groups.google.com/a/linux.ie/group/ilug/.
> To view this discussion on the web, visit
> https://groups.google.com/a/linux.ie/d/msgid/ilug/CAHAPYVC0YNWujHU9DTM7ZyfjNV-dNJV3Cg_0zmTLsMUmeWGJJQ%40mail.gmail.com
> <https://groups.google.com/a/linux.ie/d/msgid/ilug/CAHAPYVC0YNWujHU9DTM7ZyfjNV-dNJV3Cg_0zmTLsMUmeWGJJQ%40mail.gmail.com?utm_medium=email&utm_source=footer>.

-- 
Irish Linux Users Group
--- 
You received this message because you are subscribed to the Google Groups "ILUG" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To post to this group, send an email to [email protected].
Visit this group at https://groups.google.com/a/linux.ie/group/ilug/.
To view this discussion on the web, visit https://groups.google.com/a/linux.ie/d/msgid/ilug/a2c3c408-0e8a-50a9-cd6b-b541c934288c%40420blaze.it.
signature.asc (application/pgp-signature, 819 B)