Problem renewing digital signature

Information and help in the IT field of computers, internet, ISP's, mobile and fixed line telephones plus satellite TV systems.
alpujarran
Resident
Posts: 316
Joined: Tue Jun 08, 2010 5:11 pm
Location: Alpujarras

Problem renewing digital signature

Postby alpujarran » Thu Feb 07, 2013 7:04 pm

I've been trying to renew my DS as it runs out in about 6 weeks.

Via https://www.cert.fnmt.es I get as far as the sign and send page, then a pop-up appears saying ...

The site 'apuc.cert.fnmt.es' has requested that you sign the
following text message:
DATOS IDENTIFICATIVOS: NOMBRE ............

To confirm you agree to sign this text message using your selected
certificate, please confirm by entering the master password.

Anyone knows what this "master password" is ?? It doesn't seem to be the password for the DS. I've even deleted the DS from Firefox and reloaded it - it asks for the DS password to do this so I'm sure that I know what the password is.

Tried it on both Windoze XP and MacOSX 10.5 with the same results.

User avatar
Enrique
Andalucia Guru
Posts: 8603
Joined: Tue Mar 24, 2009 9:47 am
Location: Camberley/Alcala La Real

Re: Problem renewing digital signature

Postby Enrique » Thu Feb 07, 2013 7:14 pm

Hi,
Have you tried the Password you used when you set up the Digital Signature :?:
UNIX is basically a simple operating system, but you have to be a genius to understand the simplicity.

El Cid
Andalucia Guru
Posts: 15092
Joined: Sun Oct 24, 2004 10:42 pm
Location: La Herradura, Costa Tropical, Granada

Re: Problem renewing digital signature

Postby El Cid » Thu Feb 07, 2013 7:19 pm

Enrique wrote:Hi,
Have you tried the Password you used when you set up the Digital Signature :?:
I don't remember having to put in a password - it may have been optional.

Sid

alpujarran
Resident
Posts: 316
Joined: Tue Jun 08, 2010 5:11 pm
Location: Alpujarras

Re: Problem renewing digital signature

Postby alpujarran » Thu Feb 07, 2013 7:25 pm

The original DS was done for me at a local office [Ujigar] and the official wrote it onto a CD for me and told me the password he'd assigned. I used this CD because I think it's possible to backup one from Firefox and change it. The Cd is write only so I can't have changed it. Apart from that, the password he gave me still worked when I reloaded it into Firefox. So I'm fairly confident.

You can test it yourseld by going the the "Modify Data" section of https://www.cert.fnmt.es as it goes through a similar routine [not subject to the 2 month renewal limitation]. As long as you only make a slight mod to the address - and don't actually send it - you should be able to simulate this.

alpujarran
Resident
Posts: 316
Joined: Tue Jun 08, 2010 5:11 pm
Location: Alpujarras

Re: Problem renewing digital signature

Postby alpujarran » Thu Feb 07, 2013 7:36 pm

This is the Mac version - windoze is very similar,
Image

El Cid
Andalucia Guru
Posts: 15092
Joined: Sun Oct 24, 2004 10:42 pm
Location: La Herradura, Costa Tropical, Granada

Re: Problem renewing digital signature

Postby El Cid » Thu Feb 07, 2013 7:45 pm

I just tried that and it didn't ask for a password.

I think I was correct when I said that it was optional. Obviously when you got someone to do it for you, they put in a password.

Looks like you might have to go through the process gain - this time don't use a password.

Sid

User avatar
Enrique
Andalucia Guru
Posts: 8603
Joined: Tue Mar 24, 2009 9:47 am
Location: Camberley/Alcala La Real

Re: Problem renewing digital signature

Postby Enrique » Thu Feb 07, 2013 8:06 pm

Hi alpujarran ,
I get the same as you.....wants a master Password................. :oops:
UNIX is basically a simple operating system, but you have to be a genius to understand the simplicity.

alpujarran
Resident
Posts: 316
Joined: Tue Jun 08, 2010 5:11 pm
Location: Alpujarras

Re: Problem renewing digital signature

Postby alpujarran » Thu Feb 07, 2013 8:19 pm

Enrique wrote:Hi alpujarran ,
I get the same as you.....wants a master Password................. :oops:
It would appear that maybe not all digital signatures are created equally :?

alpujarran
Resident
Posts: 316
Joined: Tue Jun 08, 2010 5:11 pm
Location: Alpujarras

Re: Problem renewing digital signature

Postby alpujarran » Thu Feb 07, 2013 8:32 pm

El Cid wrote: . .Obviously when you got someone to do it for you, they put in a password.
Looks like you might have to go through the process gain - this time don't use a password.
If you've actually managed to sign your change of data then that looks like a possibility.

The story [as much as I can remember 3 years on]:

Guy goes into a Government office with the paperwork he's printed out from the FNMT. Idea being that all he has to do is verify his identity to the official and said official will then push some buttons and the guy can simply go home and download the digital signature.

But the official says there's no need to go through all that performance because he can download it there & then and put it onto the CD for the guy.

Maybe because it came from the official's computer it somehow has a different security level?? Certainly possible. If so, this info might be of use to other readers.

edit: Sid, having re-read this it. looks like I might be having a go a you which is not the case. You just provided the hook to hang the explanation on.

alpujarran
Resident
Posts: 316
Joined: Tue Jun 08, 2010 5:11 pm
Location: Alpujarras

Re: Problem renewing digital signature

Postby alpujarran » Thu Feb 07, 2013 8:53 pm

Enrique wrote:Hi alpujarran ,
I get the same as you.....wants a master Password................. :oops:
Enrique, have you tried with different signatures??

El Cid
Andalucia Guru
Posts: 15092
Joined: Sun Oct 24, 2004 10:42 pm
Location: La Herradura, Costa Tropical, Granada

Re: Problem renewing digital signature

Postby El Cid » Thu Feb 07, 2013 9:29 pm

alpujarran wrote:

edit: Sid, having re-read this it. looks like I might be having a go a you which is not the case. You just provided the hook to hang the explanation on.

No problem.

I'm pretty sure I'm right - don't put in a password if you do it yourself.

Each office will handle it differently and you can't avoid that - it happens all the time in Spain.

Sid

User avatar
Enrique
Andalucia Guru
Posts: 8603
Joined: Tue Mar 24, 2009 9:47 am
Location: Camberley/Alcala La Real

Re: Problem renewing digital signature

Postby Enrique » Thu Feb 07, 2013 10:08 pm

Hi alpujarran,
Finally got there............... :evil:

Went back to my original system that I'd setup Digital Signature on.

XP SP3 IE8........... :o

Opened up all the Active-X options in IE8 and Modified my Data.......comfirmed it had changed too :thumbup:

I'll have a play on my Win7/ Firfox system but not tonight for sure...... :idea:


Looks like I'll be keeping this XP system........... :shock:
UNIX is basically a simple operating system, but you have to be a genius to understand the simplicity.

User avatar
Enrique
Andalucia Guru
Posts: 8603
Joined: Tue Mar 24, 2009 9:47 am
Location: Camberley/Alcala La Real

Re: Problem renewing digital signature

Postby Enrique » Fri Feb 08, 2013 8:36 am

Good morning El Cid,

When you did the Test yesterday evening what was you system spec...........

OS and Browser

Its looking to me that its the way the Browser handles the Certificate.

Thanks.
UNIX is basically a simple operating system, but you have to be a genius to understand the simplicity.

alpujarran
Resident
Posts: 316
Joined: Tue Jun 08, 2010 5:11 pm
Location: Alpujarras

Re: Problem renewing digital signature

Postby alpujarran » Fri Feb 08, 2013 8:54 am

I have a theory:

When an application is made for a DS, a file is tucked away in the OS of the machine involved. Let's imagine that this file contains a "master password". When the DS is downloaded it has to be done to the same OS/machine combination to work. The DS can be imported/exported/copied for use any other machine/OS combinations but the original can only be amended or renewed on the actual OS that created it.

El Cid
Andalucia Guru
Posts: 15092
Joined: Sun Oct 24, 2004 10:42 pm
Location: La Herradura, Costa Tropical, Granada

Re: Problem renewing digital signature

Postby El Cid » Fri Feb 08, 2013 8:58 am

I have W7. It works in IE9 and Chrome with no password but Firefox won't let me do anything as it rejects the FNMT site certificate!

Sid

alpujarran
Resident
Posts: 316
Joined: Tue Jun 08, 2010 5:11 pm
Location: Alpujarras

Re: Problem renewing digital signature

Postby alpujarran » Fri Feb 08, 2013 9:24 am

I've only been able to talk Firefox into allowing me into certain sites by manually putting exceptions for various domains, eg:
apuc.fnmt.es
cert.fnmt.es
whatever.dgt.es etc

User avatar
Enrique
Andalucia Guru
Posts: 8603
Joined: Tue Mar 24, 2009 9:47 am
Location: Camberley/Alcala La Real

Re: Problem renewing digital signature

Postby Enrique » Fri Feb 08, 2013 9:28 am

Ok Guys this is it............

Thanks for your input Sid..........

alpujarran:: No theories........keep it simple.............. :)


Got it working on Win 7 and IE9..............enabled all the Active-X settings and some more :evil:

Browser comes up and says "you don't want to be Browsing with these setting " my translation.. :lol:

Changed Data on site.....no Password needed......... :D

You will need your Certificates in the Personal section.........

I'll try and tidy up my proceduer thru the day .


alpujarran::
What version of IE are you using as getting to the settings varies .......... :?:
UNIX is basically a simple operating system, but you have to be a genius to understand the simplicity.

alpujarran
Resident
Posts: 316
Joined: Tue Jun 08, 2010 5:11 pm
Location: Alpujarras

Re: Problem renewing digital signature

Postby alpujarran » Fri Feb 08, 2013 9:35 am

Enrique wrote: alpujarran:
What version of IE are you using as getting to the settings varies .......... :?:
I haven't tried IE yet, only Firefox. I'm on a Mac right now but I'll turn on the XP machine & let you know.

alpujarran
Resident
Posts: 316
Joined: Tue Jun 08, 2010 5:11 pm
Location: Alpujarras

Re: Problem renewing digital signature

Postby alpujarran » Fri Feb 08, 2013 9:53 am

Version 6 ...
Image

User avatar
Enrique
Andalucia Guru
Posts: 8603
Joined: Tue Mar 24, 2009 9:47 am
Location: Camberley/Alcala La Real

Re: Problem renewing digital signature

Postby Enrique » Fri Feb 08, 2013 10:01 am

VERSION 6..................... :!: :!: :!:

That may well work in your favour..................about as good security as chocolate rejas....... :D

make sure your Certificates are in Personal.

I'll get back when my XP system is up..............with some settings to try. 8)
UNIX is basically a simple operating system, but you have to be a genius to understand the simplicity.


Who is online

Users browsing this forum: No registered users and 6 guests