Nexus Personal mini guide
FedoraForum.org - Fedora Support Forums and Community
Results 1 to 14 of 14
  1. #1
    Join Date
    Feb 2009
    Posts
    18

    Nexus Personal mini guide

    This might be of interest for people living in sweden. Don't know if the software is used anywhere else...

    I just saw that Nexus Personal, used for Bank-ID in sweden, is available for linux. They support Ubuntu, but i installed on fedora 10 with a few problems.

    The problems I got was that the installer uses ldconfig witch wasn't in my $PATH. So I added /sbin to the $PATH and the install went great.

    SELinux complaind both about personal.bin using libai.so and firefox using the same library. Added modules for this (See SELinux FAQ, for description)

    And i had to manually link the plugin so that firefox found it. Just a matter of linking libplugins.so to your firefox plugin directory.

    Might be of some help for someone

  2. #2
    Join Date
    Jan 2005
    Posts
    15

    How to load the BankID

    Didn't have patience to learn how SELinux works really so switched it temporarily off.

    Linked the plugin as you suggested (/usr/local/lib/personal/libplugins.so), and things seems to work...

    However, I dont find any way to load my bankid file (.nge) into the program? And when I go to some page (skatteverket) to load my bankid via the applet (servlet or whatever), the applet asks for a .p12 file (the old format)

  3. #3
    Join Date
    Mar 2004
    Location
    In your closet
    Posts
    15,750
    Hello Nickeh. I going to move this thread over to Guides and How-To Articles.

    Glennzo
    Glenn
    The Bassinator
    © ®

  4. #4
    Join Date
    Feb 2009
    Posts
    18
    Quote Originally Posted by karnbo
    Didn't have patience to learn how SELinux works really so switched it temporarily off.

    Linked the plugin as you suggested (/usr/local/lib/personal/libplugins.so), and things seems to work...

    However, I dont find any way to load my bankid file (.nge) into the program? And when I go to some page (skatteverket) to load my bankid via the applet (servlet or whatever), the applet asks for a .p12 file (the old format)
    Oh, I had problems importing too. Exported from windows onto a USB stick and then I could load the certificates from nexus personal

  5. #5
    Join Date
    Sep 2009
    Posts
    99
    Hello All,

    Going one step further: did anyone succeed to set up the card reader, to authorize transactions in Fedora?

    I was trying to help a friend with that but I failed. He has an account with Handelsbanken (Sweden). I installed Nexus Personal provided by Handelsbanken (l also linked the plugin and added the entry in Firefox encryption security devices), The bank provides the driver for the card reader, but it is for Ubuntu. Nevertheless, I simply unpacked the file and put the libraries into proper directory, hoping that it would work. Indeed it does seem to work - when I start nexus without plugging in the card reader, it does not show any certificates, but when I insert the card reader with the card, nexus shows the correct certificate. The problem is at the login page: nexus starts, shows the right certificate, a page appears saying something about checking the software, it states that the version is OK and it gives a link to go back. So far it looks similar to what happens in Windows. But then, in Windows, if I click on the link, I get to the account page as it should be, but in Fedora, instead of logging in, clicking this link simply repeats the software check and so on. No error messages but can't get any further.

    What I described earlier was happening on Fedora 10 i386. On Fedora 11 x86_64 I cannot even do that - nexus does not show the certificate after plugging in the card. I guess the card reader drivers are not correct for the 64 bit system.

    If anyone managed to get the card reader working (especially on 64bit Fedora) I would really appreciate if you can share your experience.

  6. #6
    Join Date
    Feb 2009
    Posts
    18
    No success on cardreader with Handesbanken, and i have switched to ubuntu now. But with the card reader i can login without using cable so i haven't looked at that problem so much

  7. #7
    Join Date
    Sep 2009
    Posts
    99
    Thanks nickeh, I know the card reader works without cable. So, setting it to work with cable is not vital, but it would be nicer not to have to put in all these numbers.... Well, if one has many transactions to confirm one could switch to Windows, I suppose. One more item to add to the thread on "why haven't you dropped Windows" .

  8. #8
    Join Date
    Jun 2009
    Posts
    35
    Successful install on Fedora 12, both 32 and 64 bits.

    I'm writing this mostly to help others wasting their time on this.
    I did spend several nights of attempts on this before I figured out how to get it working.

    What puzzled me most was the step where you download a new Id.
    Ï followed some online advice (sorry, they're in Swedish)
    http://ma7.se/node/210
    http://blogg.akia.se/?p=28
    to get there.
    My problem was when downloading a new Id and the bank site say, "your new id is installed successfully" after I've entered my PIN. Not so! The nexus application asks for PIN three times in a row and then, the Id installation is completed. I thought this was an error...

    Also, exporting an Id file from windows and importing to Fedora does not work. It has to be imported / exported with the same OS.

    A final tip for troubleshooting: adding to the config file /home/<user>/.personal/config/Personal.cfg the lines
    [Diagnostics]
    Trace=<path>

    will give you a log file of what the application was doing.

    Good luck. I hope this can save some time for you.

  9. #9
    Join Date
    Apr 2010
    Posts
    4

    Re: Nexus Personal mini guide

    This worked for me on f12 x86_64:

    Go to https://install.bankid.com, click your way to the linux (Ubuntu) version of the Nexus Personal program, and download the file (LinuxPersonal.tgz when I tried).

    Unpack the gzipped tar file (e.g. tar zxvf LinuxPersonal.tgz).

    Go to the unpacked directory (personal-4.10.2.16 in my case).

    Become root (su), and do

    ./install.4.10.2.16.sh i

    You will get a message saying, among other things,

    WARNING: Failed installing plugin for Firefox 3. Manually add symlink to libplugins.so in your Firefox 3 plugin directory if this browser is to be used.
    Installation complete.

    This is OK.

    Then do

    ln -s /usr/local/lib/personal/libplugins.so /usr/lib/mozilla/plugins
    I first did
    ln -s /usr/local/lib/personal/libplugins.so /usr/lib64/mozilla/plugins, but then the Nexus program did not work. Possibly this is needed as well, though...

    Make sure you have the right wrappers installed, by running (still as root)

    yum install libgtk-x11-2.0.so.0 libidn.so.11 nspluginwrapper.i686 nspluginwrapper.x86_64

    In my case, these were all OK already.

    Then install the plugin in Firefox by running

    mozilla-plugin-config -i -v -l

    If you run SELinux, create policies as follows:

    chcon -t textrel_shlib_t '/usr/local/lib/personal/libai.so'
    chcon -t textrel_shlib_t '/usr/local/lib/personal/libplugins.so'
    chcon -t textrel_shlib_t '/usr/local/lib/personal/libP11.so'

    Restart Firefox.

    Go to https://install.bankid.com again, and verify that your program works.
    Then go to your web bank site and install the BankID on your computer.
    As noted in the previous post, you need to enter your password several times before you're done.

    Best of luck!
    Last edited by ds3066; 4th April 2010 at 05:32 PM.

  10. #10
    Join Date
    Sep 2005
    Posts
    1

    Re: Nexus Personal mini guide

    Thanks to previous posters. Here are some additional comments and
    scripts that might be of help.

    Note: I use a 32-bit Fedora 12, firefox, and IcedTea6 1.7.1 java.

    First of all, it might be good set the SELinux labels before running
    mozilla-plugin-config. Without this, I got some error messages and a
    link in /usr/lib/mozilla/plugins-wrapped. I don't know if this would
    have worked or not, but after I fixed the SELinux labels and removed
    the link, mozilla-plugin-config instead made a wrapped plugin in the
    same directory.

    Second, the install script runs the ldconfig command. I am not very
    familiar with this, but I guess it does not hurt to install missing
    libraries beforehand.

    Eventually, I arrived at the following procedure.

    1. Get Nexus Personal [NP] from https://install.bankid.com/

    2. Unpack and cd to the resulting directory.

    3. Check if any libraries are missing. If this is the case, I imagine
    there should be errors from the ls command here (I got none):

    ldd * 2> /dev/null | grep -Eo '/[^ ]*' | xargs ls -d 1> /dev/null

    4. If you have a restrictive umask, don't forget to relax this.
    For example, in the unpacked directory:

    chmod a+r *; chmod a+x persadm personal.bin *.sh

    5. As root, run ./install.4.10.2.16.sh i

    You should get the 'Installation complete' message, but expect
    warnings relating to firefox plugin links.
    NP should appear in a menu, probably Applications - Other.

    6. Find which files use text relocation. I wrote a script for this.

    spottextrel () (
    while [ $# -gt 0 ]; do
    eu-readelf -d $1 2> /dev/null | fgrep -q TEXTREL && echo $1
    shift
    done
    )

    In the unpacked directory: spottextrel *
    gave me

    libai.so
    libCardPrisma.so
    libCardSetec.so
    libCardSiemens.so
    libP11.so
    libplugins.so

    Now set the SELinux labels to allow this. As I do not have a card
    reader, I just used the three lines from previous posts. As root:

    chcon -t textrel_shlib_t '/usr/local/lib/personal/libai.so'
    chcon -t textrel_shlib_t '/usr/local/lib/personal/libP11.so'
    chcon -t textrel_shlib_t '/usr/local/lib/personal/libplugins.so'

    You can see the result with ls -Z.

    7. Manually add the firefox plugin. As root

    ln -s /usr/local/lib/personal/libplugins.so /usr/lib/mozilla/plugins
    mozilla-plugin-config -v -i

    8. Restart firefox and go to 'about: plugins' (remove the space). NP should be listed.

    9. Test your installation by directing firefox to https://install.bankid.com.
    NP should pop up, and the web page should say OK.

    10. Get a BankID at your bank. The procedure at Skandiabanken was a
    bit unstable. I had to remove the file .personal-<username> and
    try a couple of times before it worked. After entering my password
    (several times, as noted before), the BankID appeared in the ~/cbt
    directory. Then, when I tried to login, Skandiabanken told me to
    get a BankID! Eventually I got in. Perhaps I restarted firefox,
    which may have helped, because it cleares all my cookies.
    Last edited by ojvind; 3rd May 2010 at 04:46 AM. Reason: unwanted smiley

  11. #11
    Join Date
    Jun 2009
    Posts
    35

    Re: Nexus Personal mini guide

    Just to keep this great thread rolling, the method in #9 by ds3066 worked great on F13 64 bits.

    Many thanks

  12. #12
    Join Date
    Apr 2010
    Posts
    4

    Re: Nexus Personal mini guide

    I just verified that this works on Fedora 14 x86_64 as well.

  13. #13
    Join Date
    Apr 2010
    Posts
    4

    Re: Nexus Personal mini guide

    Update for Nexus Personal 4.17.0.11 on f14 x86_64

    Go to https://install.bankid.com, click your way to the linux (Ubuntu) version of the Nexus Personal program, and download the file (personal.4.17.0.11-tar.gz when I tried).

    Unpack the gzipped tar file (e.g. tar zxvf LinuxPersonal.tgz).

    In a terminal window, go to the unpacked directory (personal-4.17.0.11 in my case).

    Become root (su).

    If you already have an older version of the program installed, you need to delete the directory /usr/local/lib/personal and all its contents first.

    Then do (in the directory personal-4.7.0.11)

    ./install.4.17.0.11.sh i

    You will get a message that may contain errors; ignore these. I personally got

    Installing BankID Security Application
    ln: creating symbolic link `/usr/local/lib/libai.so': File exists
    ERROR: Operation failed. Installation incomplete.

    Then do

    ln -s /usr/local/lib/personal/libplugins.so /usr/lib/mozilla/plugins

    Make sure you have the right wrappers installed, by running (still as root)

    yum install libgtk-x11-2.0.so.0 libidn.so.11 nspluginwrapper.i686 nspluginwrapper.x86_64

    In my case, these were all OK already.

    Then install the plugin in Firefox by running

    mozilla-plugin-config -i -v -l

    If you run SELinux, create policies as follows (this is not necessary if you had the older version installed already; it is needed if you do a first time installation):

    chcon -t textrel_shlib_t '/usr/local/lib/personal/libai.so'
    chcon -t textrel_shlib_t '/usr/local/lib/personal/libplugins.so'
    chcon -t textrel_shlib_t '/usr/local/lib/personal/libP11.so'

    Restart Firefox.

    Go to https://install.bankid.com again, and verify that your program works.
    Then go to your web bank site and install the BankID on your computer.
    As noted in the previous post, you may need to enter your password several times before you're done.

    Best of luck!

  14. #14
    Join Date
    Jun 2009
    Posts
    35

    Re: Nexus Personal mini guide

    I'm having problems with Nexus Personal and Fedora 15.

    The client (when started from menu) briefly shows and then disappears.

    I have noticed that libgtk-x11-2.0.so.0 is not available.

    Any suggestions?

    ---------- Post added at 05:22 PM ---------- Previous post was at 02:53 PM ----------

    Jag har löst mitt problem.

    En uppgradering av Nexus till 4.18 och det fungerar.

    Ett alternativ jag hittade var fribid.se som gör en klient som gör samma sak. Man slipper alltså Nexus.

Similar Threads

  1. VNC-Server Vino Mini Guide
    By briantan in forum Guides & Solutions (Not For Questions)
    Replies: 100
    Last Post: 24th May 2010, 09:45 PM
  2. Fedora 9 Personal Installation Guide
    By spoilt in forum Guides & Solutions (Not For Questions)
    Replies: 0
    Last Post: 1st July 2008, 12:06 PM
  3. Replies: 7
    Last Post: 9th January 2008, 11:21 AM
  4. Mini-Guide: Installing grub from Fedora Core 5 (FC5) Rescue CD
    By Nemesis02 in forum EOL (End Of Life) Versions
    Replies: 3
    Last Post: 5th June 2006, 10:35 PM
  5. Hauppauge Nexus
    By recnelis in forum Hardware & Laptops
    Replies: 0
    Last Post: 2nd October 2004, 12:26 PM

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •