General

What license does OpenSign come with?

OpenSign is licensed under the GNU LGPL.

Creative Commons have done a good job at explaining how the GNU LGPL license works. You find it here.

[top]

What platforms does OpenSign support?

OpenSign is a java applet, so any platform capable of executing applets will in principle do. This includes Microsoft Windows, MacOS X and linux. We also maintain a list of supported platforms.

[top]

Using

I just discovered a directory named .oces. Should I worry?

No you should not worry.

The directory is created by the OpenSign applet. It is used to store PKCS-12 files and other files used by the applet. If you remove the directory only the PKCS-12 files will be lost. All other files will be restored the next time the applet is run.

[top]

Deploying

OpenLogon applet hangs in 2-step mode but functions fine in 3-step mode. I'm using ASP.NET master pages, what could be wrong?

This problem is not ASP.NET or master page specific. But occurs because a default ASP.NET master page contains html "form" tags, and your content pages are nested within this form. In 2-step mode OpenLogon hangs if the applet form is nested within another html form. Therefore deleting the form tags from your master page solves the problem.

This entry was contributed by Ian Gibson.

[top]

When using ASP.NET and OpenSign in 3-step mode, I try to save my "user" to a session in the authentication script (my implementation of verifier.java). When the user is redirected to my content pages the User session is empty. What could be wrong?

ASP.NET recognizes OpenLogon as another user, and therefore stores your User instance in a different session. This problem can be solved by adding a few extra parameters to handle cookies

<param></param>
<param></param>
<param></param>
<param></param>
<param></param>

This entry was contributed by Ian Gibson.

[top]

Building

I am getting dependencies errors while compiling OpenSign - how should I compile OpenSign?

First of all, consider using the precompiled binary release of OpenSign. The applets in the binary releases are signed too, so you do not have to go purchase an object-signing certificate.

However, if you still want to compile OpenSign yourself, you will need to install the following thirdparty dependencies

Product Homepage Notes
Apache XML-Security API Apache XML-Security homepage Download the Java version and copy all files in libs/ to opensign-x-y-z-src/lib/. Also note, that this library in not used by the applets themselves, but by the serverside demonstration of how to handle the generated xmldsig document.
ServletAPI One implementation is implemented by Apache Tomcat Download the Tomcat binary distribution and copy all files in server/lib and common/lib to opensign-x-y-z-src/lib/. Also note that this API is not used by the applets themselves, but by the serverside demonstration of how to use the OpenSign applets.
A Base64 implementation http://javabase64.sourceforge.net Download the jar file and copy it to opensign-x-y-z-src/lib/. Also note that this API is not used by the applets themselves, but by the serverside demonstration of how to use the OpenSign applets. This library is only required by OpenSign v1.3.1 and older versions.
Microsoft proprietary MFC Java classes http://www.openoces.org/cgi-bin/viewvc.cgi/opensign/lib/4D7DBNBP.ZIP Download the jar file from our CVS repository and copy it to opensign-x-y-z-src/lib/.
Browser Security classes http://www.openoces.org/cgi-bin/viewvc.cgi/opensign/lib/BrowserSecurityClasses.jar Download the jar file from our CVS repository and copy it to opensign-x-y-z-src/lib/.

If you have checked OpenSign out from our CVS repository, all the thirdparty libraries are available in the lib/ directory for you.

[top]

How do I build MicrosoftCryptoApi_x_y.dll?

A howto has been written with detailed information about building the wrapper library.

[top]

I am getting an "java.io.IOException: CreateProcess: patch" error when I try to build OpenSign. How can I fix this?

This happens when you do not have a patch command available. This is common on the Microsoft Windows platform. You can solve this problem by building OpenSign using Cygwin. Remember to install the patch command when you install Cygwin.

[top]