Hello,

Franklin Matthew wrote:
> 
> I have been trying to use the Netscape signtool 1.3 on and applet i
> wish to run uner Netscape, but seem to be getting an error when I
> ttempt to run anything.
> 
> java.lang.SecurityException: cannot verify signature block file
> META-INF/ZIGBERT

It worked for me.. I forgot the exact vertsion of Netscape but I
think it was 4.73.. Signtool is v 1.3 anyway. I was running Linux
redhat 6.2. However, I have a problem due to the Comm API (IBM
has filled a bug report about it) and so it is currently impossible
to use a Netscape VM with a pure java driver :-(. It is possible
under Windows using the PC/SC wrapper though.

Please find the trace of what commands I launched in PS, maybe
you will find a difference that would help you.

Cheers,
Christophe.

= Falling in love makes smoking pot all day look like the ultimate in =
= restraint.        -- Dave Sim                                       =
--
-------------------------------------------------------------
[EMAIL PROTECTED] - Gemplus Research Lab
Phone: +33 4-42-36-57-83 | Disclaimer: I don't speak for Gemplus
Gemplus doesn't speak for me... it is better that way!
-------------------------------------------------------------

------------------------------------

Steps for Netscape Communicator 4.x

1) create a password (security icon / passwords)

2) add to "init":
opencard.core.util.SystemAccess sys =
  new opencard.opt.netscape.NetscapeSystemAccess();
opencard.core.util.SystemAccess.setSystemAccess(sys);

3) sign the applet

$ signtool -G cm
... Test Applet Signing Certificate
... Gemplus
... Research Lab
... France
... FR
... cmuller
... [EMAIL PROTECTED]
... zzzzzz

$ signtool -l
using certificate directory: /root/.netscape

Object signing certificates
---------------------------------------
cm
    Issued by: cm (Test Applet Signing Certificate)
    Expires: Sat Aug 12, 2000
---------------------------------------
For a list including CA's, use "signtool -L"

$ mkdir signing
$ cp -i Dir.class signing
$ cp -i NetscapeSystemAccess.class signing 
$ signtool -k cm -Z NetDir.jar signing 
using certificate directory: /root/.netscape
Generating signing/META-INF/manifest.mf file..
--> Dir.class
adding signing/Dir.class to NetDir.jar...(deflated 48%)
--> NetscapeSystemAccess.class
adding signing/NetscapeSystemAccess.class to NetDir.jar...(deflated 52%)
Generating zigbert.sf file..
Enter Password or Pin for "Communicator Certificate DB":
adding signing/META-INF/manifest.mf to NetDir.jar...(deflated 29%)
adding signing/META-INF/zigbert.sf to NetDir.jar...(deflated 36%)
adding signing/META-INF/zigbert.rsa to NetDir.jar...(deflated 14%)
tree "signing" signed successfully
$ signtool -v NetDir.jar 
using certificate directory: /root/.netscape
archive "NetDir.jar" has passed crypto verification.

          status   path
    ------------   -------------------
        verified   Dir.class
        verified   NetscapeSystemAccess.class

4) use it in an HTML file with <APPLET> tag:
      <applet codebase="." code="Dir" archive=NetDir.jar width=251
height=125>
      </applet>


--------------------------------------------------------------------


---
> Visit the OpenCard web site at http://www.opencard.org/ for more
> information on OpenCard---binaries, source code, documents.
> This list is being archived at http://www.opencard.org/archive/opencard/

! To unsubscribe from the [EMAIL PROTECTED] mailing list send an email
! to
!                           [EMAIL PROTECTED]
! containing the word
!                           unsubscribe 
! in the body.

Reply via email to