drsr.sk: Elektronický podpis

Zaujímalo by ma prečo musí byť podateľňa elektronických dokumentov na drsr.sk založená na komponente, ktorý je schopný bežať len na systémoch Windows?

Aký je problém implementovať elektronický podpis s použitím technológie Java, ktorá umožní spustenie aplikácie na takmer ľubovoľnom operačnom systéme (Windows, Linux, Mac OS X)?

To ani nehovorím, že podateľňa musí bežať pod Internet Explorerom .... :-(

drsr.sk: Elektronická podateľňa - horšie to už nejde!

Zvoní mobil .... a ja už viem, že niečo je zle ....
Určite tento pozná každý programátor alebo iný človek od počítačov.

"Zasa niečo zmenili na DRSR.sk, nejde mi posielať súhrnný výkaz DPH!!!"
"OK, zastavím sa pozrieť ..."

Zaujímalo by ma koľko ľudí absolvovalo podobný telefonát.

Ale k veci. Z dôvodu prechodu na nový hashovací algoritmus (SHA2) sa mení podpisová politika vydaná NBÚ a hash vydaný Daňovým riaditeľstvom SR. Toto si ďalej vyžiadalo aj zmenu podpisového komponentu D.SIGNER/XADES na novú verziu (1.1.0.0).
Podľa popisu na DRSR.sk treba vykonať nasledovné kroky:
1. Registrácia novej podpisovej politiky sa vykoná použitím inštalačného súboru PP2011.zip.
2. Inštalácia novej elektronickej značky sa vykoná použitím inštalačného súboru EZ_cert_end_user_v2.ZIP.
3. ZMENA VERZIE PODPISOVÉHO KOMPONENTU D.SIGNER/XADES (V1.1.0.0)Krok č. len v prípade ak nemáte zaručený elektronický podpis a fungujete na dohodu s daňovým riaditeľstvom.

Hm, ľahké a rýchle pre človeka s potrebnými znalosťami .... ale chybička sa pritrafila.
Postup nefunguje.
Pri podpísaní dokumenktu sa objaví banner D.SIGNERu a potom už nič. Žiadne chybové hlásenie ani iné upozornenie pre užívateľa. (toto považujem za obrovskú chybu).

Po chvíľke pátrania človeka napadne riešenie. Stačí zmeniť poradie krokov. (3., 1., 2.).
Žeby to po napisaní ani nevyskúšali? Vlastne ma to ani neprekvapuje. Veď všetci ľudia maju obrovské množstvá voľného času, aby skúšali ako prinútit aplikáciu pracovať. Nie prispôsobiť svojmu štýlu práce ale vôbec sa rozbehnúť!

Sonic Workbench 7.0.1 on Fedora Core 6

Continuing with my installation guides ...

1. Libraries
Before install make sure you have installed folowing libraries:

compat-libstdc++-33-xxxxxx
libstdc++-devel-4.xxxx
libstdc++-4.xxxxx
compat-libstdc++-296-xxxxxx

If you are missing something, yum it in.

Then do:

su -
cd /usr/lib
ln -s libstdc++-libc6.2-2.so.3 libstdc++-libc6.1-1.so.2

2. Java
Make sure you have Java 1.4.2 installed. I was not able to run Sonic Workbench under Java 1.5., due to Process Editor crash.
Currently using Java 1.4.2_14. Don't worry Eclipse has it's own compiler so can still produce 1.5 compatible classes (when needed).

3. Run it
Run $SonicInstall/Workbench7.0/startworkbench.sh.
If you got an XPCOM error, add following two lines to startworkbench.sh (or choose your own way of setting MOZILLA_FIVE_HOME variable).

# to make SWT browser support work
export MOZILLA_FIVE_HOME=/usr/lib/mozilla

This was done on my home FC6 (Linux frodo 2.6.20-1.2948.fc6 #1 SMP Fri Apr 27 19:48:40 EDT 2007 i686 i686 i386 GNU/Linux).
It also worked on my laptop with Fedora 8 (Linux javadev-nb 2.6.23.9-85.fc8 #1 SMP Fri Dec 7 15:49:59 EST 2007 i686 athlon i386 GNU/Linux).

Lotus Notes V7 on Fedora Core 6

Well, after all the setup, my new FC6 deserves Lotus Notes client (I don't want to go back to FC3 anymore).
So, here are the steps to install IBM Lotus Notes For Linux on Fedora Core 6:
1. Unzip C93D1NA.zip to ~/notes_install
2. Unzip personality.zip to plugin directory
3. chmod +x ~/notes_install/plugin/setup_wct_platform.bin
4. chmod +x ~/notes_install/setuplinux.bin
5. cp ~/notes_install/setuplinux.bin ~/notes_install/plugin/updateSite/features/
com.ibm.workplace.notesinstall.linux.feature_7.0.1.0000-0900/bin/linux/
6. Run ~/notes_install/plugin/setup_wct_platform.bin -console
7. Sometimes notes plugin is not installed (don't ask me why), so run the installation manually by:
cd to that long directory
./setuplinux.bin -console
You can recognize that notes plugin is not installed when there is no ~/notes directory.
8. Go to ~/notes (cd ~/notes).
9. ln -s /usr/lib/libXmu.so.6 libXm.so.3
10. Run notesstart and finish the setup (old lotus notes way).

Here is the content of my notesstart located in ~/bin:

#!/bin/sh

NOTESBIN=/home/$USER/notes
NOTESDATA=/home/$USER/notes/data
NOTESDIR=/home/$USER/notes/data
LD_LIBRARY_PATH=$NOTESBIN:$NOTESBIN/jvm/bin/classic:$NOTESBIN/jvm/bin
:$LD_LIBRARY_PATH
PATH=$NOTESBIN/jvm/bin:$NOTESBIN:$PATH
CLASSPATH=./:$NOTESBIN/:$CLASSPATH
export NOTESBIN NOTESDATA NOTESDIR LD_LIBRARY_PATH PATH CLASSPATH

/opt/IBM/Workplace\ Managed\ Client/rcp/richclient -personality com.ibm.workplace.noteswc.standalone.linux.personality

To have the information complete, I was using Lotus Notes on FC3 for a long time and installation went without any problems as described by IBM.

Enjoy,
P.

P.S. Many thanks to guys discussing in this thread, where I figured out what how to fix my Notes.

Cheap Code Signing with Your Thawte Freemail Certificate

As I am always loosing this, I better write it down.

There is nice way how to sign your jars using Thawte Freemail Certificate. I think it is fine for code given out for free.

<signjar keystore="your_keystore.p12"
         storetype="pkcs12"
         alias="your_alias"
         storepass="secret">
  <fileset dir="${client.deploy.dir}/lib">
        <include name="**/*" />
  </fileset>          
</signjar>

Step by step guide:

1. Ask Thawte for your certificate.
2. Download it to your Firefox.
3. Choose Edit/Preferences/Encryption/View Certificates/<select>/Backup (use PKCS12)
4. If you don't know your alias use this to list it:
   keytool -list -storetype pkcs12 -keystore your_keystore.p12
   

Enjoy!

P.

Bug Fixing what a "fun".

My the worst nightmare struck again. I have been asked for taking care of important piece of code and as soon as I said yes it happened.
Nice bug popped out of it.
As one can imagine the bug was of coarse a showstopper.
Reading, debugging, putting messages everywhere (it is a multi threaded and communicating with technology devices on very low level).

So, after all, I got it fixed.

Point? Always implement basic structures carefully with long term vision and focus on readability of your code.

(Implementing stack as Object[] stack = new Object(10); is a very bad idea ... indeed.)

P.

SOA, is anybody out there?

Well, I spent half a day searching for some sort of catalog/marketplace/exchange (whatever) for ready to use SOA components.
Best would be Java ESB ready ones, but no luck at all.

I have found only IBM SOA Catalog, so far.

I am a bit disappointed, I thought I would be much better.

P.