AUSkey now native under Linux firefox

[Onno Benschop]

As of March 2014, AUSkey can be installed without any issues under Linux. There is no need to install any additional AUSkey software, no need to deal with policy files, or any of the previous hard work.

The process to install AUSkey is now trivial:

• Install firefox - doesn't work under Chromium
• Install Java - I've not tested that this works for anything other than Oracle Java
• Verify that Java is working - http://java.com/verify
• Visit http://bp.ato.gov.au/
• Click Login
• Done

Note that this assumes that you have your certificate installed in ~/AUSkey/keystore.xml. Instructions on how to obtain your keystore file can be found here: https://abr.gov.au

It's been fun.

I'll leave the website up, I'll leave the mailing list in place and I'll even attempt to respond to emails in a timely fashion. Thanks to those people inside the ATO who made this happen and to those members of the community who documented their experiences and shared them on the list. Thank you to my predecessors who shared their documentation.

Please feel free to share this information with your friends and colleagues. I've updated the documents and put this information up at http://auskey.itmaze.com.au/how-to/ - one day I hope to see it on an ATO website :-)

The next step is to be able to submit my tax return under Linux >;-)

Onno

[Rob Hills]

Hi Onno,

On Friday, 28 March 2014 10:45:51 UTC+8, Onno Benschop wrote:

As of March 2014, AUSkey can be installed without any issues under Linux. There is no need to install any additional AUSkey software, no need to deal with policy files, or any of the previous hard work.

 
Thanks for the news.  Inspired by your post, I bit the bullet and tried uninstalling Oracle JDK, reinstalling OpenJDK 7 and the IcedTea plugin and they work seamlessly as well!  I didn't try the new AUSkey with Oracle Java, but it seems much quicker than I remember, not sure if this is the change in JDK (to OpenJDK), the change in the AUSkey applet or my memory, but it's all good news!

Cheers,

Rob Hills

[Onno Benschop]

That's excellent news Rob.

Can you give me some version numbers, browser, java, OS?

I'm going to start a table to show what works.

--
--
You received this message because you are subscribed to the "AUSkey" group.
 
To post to this group, send email to aus...@itmaze.com.au
To subscribe from this group, send email to auskey-s...@itmaze.com.au
To unsubscribe from this group, send email to auskey-un...@itmaze.com.au
 
To use the web-forum, visit: http://auskey.itmaze.com.au/

---
You received this message because you are subscribed to the Google Groups "AUSkey" group.
To unsubscribe from this group and stop receiving emails from it, send an email to auskey+un...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
Onno Benschop

()/)/)()        ..ASCII for Onno..
|>>?            ..EBCDIC for Onno..
--- -. -. ---   ..Morse for Onno..

ITmaze   -   ABN: 56 178 057 063   -  ph: 04 1219 8888   -   on...@itmaze.com.au

[Rob Hills]

Hi Onno,

On Friday, 28 March 2014 16:09:38 UTC+8, Onno Benschop wrote:

That's excellent news Rob.

Can you give me some version numbers, browser, java, OS?

Certainly:
Ubuntu:  13.10 (Saucy Salamander)
Firefox: 28.0
Java:
java version "1.7.0_51"
OpenJDK Runtime Environment (IcedTea 2.4.4) (7u51-2.4.4-0ubuntu0.13.10.1)
OpenJDK 64-Bit Server VM (build 24.45-b08, mixed mode)

Cheers,

Rob Hills

[Murray Jensen]

On Friday, 28 March 2014 19:09:38 UTC+11, Onno Benschop wrote:

Can you give me some version numbers, browser, java, OS?

Works fine on Ubuntu 12.04 LTS (Precise) - 64bit (x86_64) with Firefox 34.0 and Java 1.7.0_72 ... (both 64 bit)

java version "1.7.0_72"

Java(TM) SE Runtime Environment (build 1.7.0_72-b14)

Java HotSpot(TM) 64-Bit Server VM (build 24.72-b04, mixed mode)

Doesn't work with Chrome 34.0.1847.137 with same O/S and Java - and note that google has dropped support for NPAPI in Chrome 35.0 and later versions:

http://googlesystem.blogspot.com.au/2013/09/chrome-to-gradually-drop-support-for.html

http://blog.chromium.org/2014/04/chrome-35-beta-more-developer-control.html

http://googlesystem.blogspot.com.au/2013/09/chrome-to-gradually-drop-support-for.html

Whatever spin they put on this, they just made our lives harder by doing this. Cheers!

Murray...

[Andrew Pitts]

Works brilliantly!  Thanks so much for supporting Linux.  I was using a VM before and this is much better.  

Now if we can only do something about the UI and UX of the Business Portal........

[Onno Benschop]

Note that Chrome doesn't work any more.

--

--
You received this message because you are subscribed to the "AUSkey" group.
 
To post to this group, send email to aus...@itmaze.com.au
To subscribe from this group, send email to auskey-s...@itmaze.com.au
To unsubscribe from this group, send email to auskey-un...@itmaze.com.au
 
To use the web-forum, visit: http://auskey.itmaze.com.au/

---
You received this message because you are subscribed to the Google Groups "AUSkey" group.
To unsubscribe from this group and stop receiving emails from it, send an email to auskey+un...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--

Onno Benschop

()/)/)()        ..ASCII for Onno..
|>>?            ..EBCDIC for Onno..
--- -. -. ---   ..Morse for Onno..

If you need to know: "What computer should I buy?" http://goo.gl/spsb66

[Keith Bates]

 

Followed all the steps,but it says I have no AUSKey on my system :(

I just did 2 BAS on this computer going through a Windows server so I know that the AUSkey part is OK

Any suggestions?

Using Ubuntu 15.04 

[Murray Jensen]

Does the file ~/AUSkey/keystore.xml exist (with sensible permissions on the file and directory)?

[Keith Bates]

Thanks, Murray. That fixed it!

Keith

[wayneh...@gmail.com]

What a disaster
http://www.smh.com.au/money/tax/tax-time-in-danger-from-atos-tech-wreck-20170207-gu7a98.html

What a farce
http://www.abc.net.au/news/2017-02-20/ato-admit-working-hours-are-below-community-standards/8284384

[Damon Royle]

Hi,

you say " this assumes that you have your certificate installed in ~/AUSkey/keystore.xml." but there are no instructions for this.
The link you provide sends me to the ABR site which just says Linux not supported, try this group.

and the link to your page seems to say no more than you say in this post.

oh, you also note Chromium is not supported yet the page linked to says to use Chromium and Firefox is not supported.

So ,,, how does one install a certificate on linux?

regards

[Onno Benschop]

Once you have a certificate from the ABR, then you can create a directory called AUSkey in your homedirectory and copy the keystore.xml file into that.

o

--

--
You received this message because you are subscribed to the "AUSkey" group.
 
To post to this group, send email to aus...@itmaze.com.au
To subscribe from this group, send email to auskey-s...@itmaze.com.au
To unsubscribe from this group, send email to auskey-un...@itmaze.com.au
 
To use the web-forum, visit: http://auskey.itmaze.com.au/

---
You received this message because you are subscribed to the Google Groups "AUSkey" group.

To unsubscribe from this group and stop receiving emails from it, send an email to auskey+unsubscribe@googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

[luifgc]

Just something that happened to me recently.

Onno's fix above which works well I am grateful it was available.

My problem was that I built a new system and just wanted to copy over to it my AUSkey. I copied my ~/AUSkey directory but things did not work. Nothing was being written to the ~/AUSkey/logs/abrmessages.log.

Guess what, it was because abrakmbe was not executing.

AUSkey requires that the ~/.local/bin/AUSkey directory be there will all the required bits in it for (in my case) both chrome and firefox.

If this is not here (or wrong) then when you look for your AUSkey it silently is not there.

In addition the routine abrakmbe located in there requires links to old libraries which are normally not found in Linux installs any more.

This is easily fixed with

cd /usr/lib64        # or /usr/lib if you are still 32 bit
ln -s libssl.so.10 libssl.so.1.0.0
ln -s libcrypto.so.10 libcrpyto.so.1.0.0
This then makes it happy. I am not sure for how long version 10 will be the active one and around in the distros but since that one links to the current one my guess is it will be quite a while before this changes.

To help with debugging go to the ~/.local/bin/AUSkey directory and execute abrakmbe directly from the shell. It will display error messages if there is a problem and if not it just waits for input so good old ^C gets you out.

It would be really useful if the login/pick AUSkey process said SOMETHING when it fails.

Also I have not noticed anywhere when you get warned that your AUSkey is nearing expiry or expired, not even in the AUSkey management pages. Mind you it does tell you if its expired but you cannot get there without a valid AUSkey. You can check your expiry by looking in the keystore.xml and look at the field called <notAfter>. They currently seam to be about 1 year after creating (it used to be longer). That caught me out too.

[luifg...@gmail.com]

Opps typo in the ln commands.

should be

cd /usr/lib64        # or /usr/lib if you are still 32 bit
ln -s libssl.so.10 libssl.so.1.0.0

ln -s libcrypto.so.10 libcrypto.so.1.0.0