SSL-Explorer Installation on Debian Etch

Posted by jhabib on Thu 5 Oct 2006 at 11:21

SSL-Explorer is the world's first open-source, browser-based SSL VPN solution. This unique remote access solution provides users and businesses alike with a means of securely accessing network resources from outside the network perimeter using only a standard web browser.

All thought installing SSL Explore is painful but now with Debian Etch is much easier and much flexible I suggest installing it on Etch and not Sarge for a simple reason that on Sarge there are a lot of dependency issues.

SSL-Explorer Prerequisites

Apache ANT (The package is called ant on Etch systems), and the SUN Java JDK. (not JRE)

Lets Begin:

# apt-get update
# apt-get install ant

Please test well if you already have any installed Java packages, with this command:

java -version

if you find anything other then the Sun java please remove it before you continue to the next step .

Now lets make a suitable Debian package from the Sun-provided .bin filedownload the latest Sun JDK from here :

We will be needing both the fakeroot and java-package to be installed as described in our installing Java for Debian article. Please edit your /etc/apt/sources.list and make sure to add the following :

deb etch main contrib non-free

Then you can run:

# apt-get update
# apt-get install fakeroot java-package

Now make sure that you login with a non-previlaged user and copy jdk-1_5_0_09-linux-i586.bin from wherever you downloaded it to any place that the user has permissions, such as their home directory.

Now run this command :

fakeroot make-jpkg jre-1_5_0_06-linux-i586.bin

(no #sudo or su)

All being well you should now have a file with the name in this format:


Now excute the follwing command, as root, to install the built package:

# dpkg -i vendor-j2[re|sdk]shortversion_fullversion_hardwarearch.deb

To verify that the installation was successful, execute:

java -version

The output should be something like:

java version "1.5.0_09"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0_09-b01)
Java HotSpot(TM) Client VM (build 1.5.0_09-b01, mixed mode, sharing)
Now lets install SSl-explore

Download the source release from its homepage:

Please dont try to download and install the RPM package, via alien, as the RPM differs too much. (I already tried it!)

Now lets exctract the tar file :

# tar -zxvf sslexplorer-0.2.8_01-src.tar.gz

And now the installation:

# cd sslexplorer-0.2.8_01
# ant install

After that while you are in the console you will be asked to open the browser and access the installations web interface wizard. When you finish this the SSL-Explorer will shutdown

Now you can execute the following to run SSL-Explorer:

# ant run

(You can use "# ant console" to run in console mode).

It is preferable to install it as a service :

ant install-service

Then you can run "#/etc/init.d start|stop|restart".

Your SSL-Explorer should be listening on the port 443 and be accessible via:

Please be free now to configure it to suit your needs, if you get any alert on the main page "Failed to load plugin SSL-Explorer Client Certificates" please check this it may help :

For more help, information or documentation please visit the Homepage of SSL-Explorer:




Posted by Anonymous (82.70.xx.xx) on Thu 5 Oct 2006 at 13:07
SSL-Explorer looks pretty neat, but I wouldn't go as far as calling it a real VPN solution. Ultimately, it is simply WebDAV over SSL which could be implemented in Apache with minimal effort. That said, I like the interface, and webDAV does rock!

[ Parent | Reply to this comment ]

Posted by jhabib (194.42.xx.xx) on Thu 5 Oct 2006 at 13:38
[ View Weblogs ]
what makes you thinks it is neat ?

[ Parent | Reply to this comment ]

Posted by goeb (84.184.xx.xx) on Thu 5 Oct 2006 at 19:44
[ View Weblogs ]
Note that there are SUN Java packages available in Etch's non-free repository. I have not tested them, but it seems that there is no need for java-package anymore.
desktop:~$ aptitude search sun-java
p   sun-java5-bin                   - Sun Java(TM) Runtime Environment (JRE) 5.
p   sun-java5-demo                  - Sun Java(TM) Development Kit (JDK) 5.0 de
p   sun-java5-doc                   - Sun JDK(TM) Documention -- integration in
p   sun-java5-fonts                 - Lucida TrueType fonts (from the Sun JRE)
p   sun-java5-jdk                   - Sun Java(TM) Development Kit (JDK) 5.0
p   sun-java5-jre                   - Sun Java(TM) Runtime Environment (JRE) 5.
p   sun-java5-plugin                - The Java(TM) Plug-in, Java SE 5.0
p   sun-java5-source                - Sun Java(TM) Development Kit (JDK) 5.0 so

[ Parent | Reply to this comment ]

Posted by jhabib (194.42.xx.xx) on Fri 6 Oct 2006 at 22:35
[ View Weblogs ]
i made a point to get the latest java version ,etch verison is update 8 and i installed update 9

[ Parent | Reply to this comment ]

Posted by Anonymous (194.42.xx.xx) on Mon 9 Oct 2006 at 08:05
i made a point to get the latest java version ,etch verison is update 8 and i installed update 9

[ Parent | Reply to this comment ]

Posted by undefined (192.91.xx.xx) on Fri 6 Oct 2006 at 15:01
is it required to uninstall all other JVMs (or at least the default JVM, the one used in "java -version")?

isn't the java command managed by alternatives (ie /etc/alternatives/java)? so shouldn't the user install sun's JVM only if necessary and then point /etc/alternatives/java to it? it's a little bit more difficult, but hey, we're debian "administrators", not simply "users".

actually, i prefer to have "java" point to a "free" version (which i think is currently either free-java-sdk or whatever the highest weighted alternative is).

i make non-free java the exception, not the rule, so i modify the java application's start up script to use sun's java when necessary. (actually, because there is such a wealth of JVM's, i've created several wrapper scripts for each one i have installed so that i can "java-sable -jar GalleryRemote" or "java-kaffe ..." or "java-gij ...", etc.)

so, could that approach not be used and ssl-explorer's init script be modified to explicitly use sun's JVM? i think that would be more logical than telling everybody they need to uninstall whatever their free JVM is and install sun's non-free JVM as their default. (and yes, whenever sun releases their java under an open source license, hopefully one in line with DFSG, then this will be a mute point, but that hasn't happened yet.)

[ Parent | Reply to this comment ]

Posted by Anonymous (81.151.xx.xx) on Tue 18 Dec 2007 at 18:49
Can Someone help please I am lookin got install ssl-explorer but am running into problems...

I am sure my problem is due to not setting the paths correctly but I have tryed may different option but am getting no where

Thank you in advanced for any help


gateway:/home/timm/SSL/sslexplorer-1.0.0_RC11# ant install
Unable to locate tools.jar. Expected to find it in /usr/lib/j2re1.5-sun/lib/tools.jar
Buildfile: build.xml



[javac] Compiling 15 source files to /home/timm/SSL/sslexplorer-1.0.0_RC11/maverick-util/build/classes

/home/timm/SSL/sslexplorer-1.0.0_RC11/build.xml:49: The following error occurred while executing this line:
/home/timm/SSL/sslexplorer-1.0.0_RC11/sslexplorer/build.xml:742: The following error occurred while executing this line:
/home/timm/SSL/sslexplorer-1.0.0_RC11/maverick-util/build.xml:44: Unable to find a javac compiler; is not on the classpath.
Perhaps JAVA_HOME does not point to the JDK

Total time: 2 seconds

[ Parent | Reply to this comment ]

Posted by Anonymous (82.148.xx.xx) on Tue 5 Feb 2008 at 20:04
I found the mentioned tools.jar file residing in the sslexplorer directory (<sslexplorer-dir>/sslexplorer/lib/tools.jar), which I copied to the location the installer expected it (/usr/lib/j2re1.5-sun/lib/ in your case). After this, the installer did go on and is currently at the configuration prompt.

[ Parent | Reply to this comment ]

Posted by Anonymous (24.21.xx.xx) on Tue 11 Nov 2008 at 04:28
The JAVA_HOME environment variable is not set by default when using the non_free sun_java5-jdk. Add this to the end of /etc/environment --> "JAVA_HOME="/usr/lib/jvm/java-1.5.0-sun". This does not take effect immediately so either restart the machine or EXPORT the same variable.

[ Parent | Reply to this comment ]

Posted by Anonymous (201.16.xx.xx) on Wed 29 Apr 2009 at 20:49
How to restore the password of admin of SSL-Explorer


[ Parent | Reply to this comment ]

Sign In







Current Poll

Will you stick to systemd as the default in Debian?

( 39 votes ~ 1 comments )