SSL-Explorer Installation on Debian Etch
Posted by jhabib on Thu 5 Oct 2006 at 11:21
SSL-Explorer is the world's first open-source, browser-based SSL VPN solution. This unique remote access solution provides users and businesses alike with a means of securely accessing network resources from outside the network perimeter using only a standard web browser.
All thought installing SSL Explore is painful but now with Debian Etch is much easier and much flexible I suggest installing it on Etch and not Sarge for a simple reason that on Sarge there are a lot of dependency issues.
SSL-Explorer PrerequisitesNow lets install SSl-exploreApache ANT (The package is called ant on Etch systems), and the SUN Java JDK. (not JRE)
Lets Begin:
# apt-get update # apt-get install antPlease test well if you already have any installed Java packages, with this command:
java -versionif you find anything other then the Sun java please remove it before you continue to the next step .
Now lets make a suitable Debian package from the Sun-provided .bin filedownload the latest Sun JDK from here :
We will be needing both the fakeroot and java-package to be installed as described in our installing Java for Debian article. Please edit your /etc/apt/sources.list and make sure to add the following :
deb http://ftp.us.debian.org/debian etch main contrib non-freeThen you can run:
# apt-get update # apt-get install fakeroot java-packageNow make sure that you login with a non-previlaged user and copy jdk-1_5_0_09-linux-i586.bin from wherever you downloaded it to any place that the user has permissions, such as their home directory.
Now run this command :
fakeroot make-jpkg jre-1_5_0_06-linux-i586.bin(no #sudo or su)
All being well you should now have a file with the name in this format:
vendor-j2[re|sdk]shortversion_fullversion_hardwarearch.debNow excute the follwing command, as root, to install the built package:
# dpkg -i vendor-j2[re|sdk]shortversion_fullversion_hardwarearch.debTo verify that the installation was successful, execute:
java -versionThe output should be something like:
java version "1.5.0_09" Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0_09-b01) Java HotSpot(TM) Client VM (build 1.5.0_09-b01, mixed mode, sharing)
Download the source release from its homepage:
Please dont try to download and install the RPM package, via alien, as the RPM differs too much. (I already tried it!)
Now lets exctract the tar file :
# tar -zxvf sslexplorer-0.2.8_01-src.tar.gzAnd now the installation:
# cd sslexplorer-0.2.8_01 # ant installAfter that while you are in the console you will be asked to open the browser and access the installations web interface wizard. When you finish this the SSL-Explorer will shutdown
Now you can execute the following to run SSL-Explorer:
# ant run(You can use "# ant console" to run in console mode).
It is preferable to install it as a service :
ant install-serviceThen you can run "#/etc/init.d start|stop|restart".
Your SSL-Explorer should be listening on the port 443 and be accessible via:
Please be free now to configure it to suit your needs, if you get any alert on the main page "Failed to load plugin SSL-Explorer Client Certificates" please check this it may help :
For more help, information or documentation please visit the Homepage of SSL-Explorer:
Cheers
[ Parent | Reply to this comment ]
[ Parent | Reply to this comment ]
desktop:~$ aptitude search sun-java p sun-java5-bin - Sun Java(TM) Runtime Environment (JRE) 5. p sun-java5-demo - Sun Java(TM) Development Kit (JDK) 5.0 de p sun-java5-doc - Sun JDK(TM) Documention -- integration in p sun-java5-fonts - Lucida TrueType fonts (from the Sun JRE) p sun-java5-jdk - Sun Java(TM) Development Kit (JDK) 5.0 p sun-java5-jre - Sun Java(TM) Runtime Environment (JRE) 5. p sun-java5-plugin - The Java(TM) Plug-in, Java SE 5.0 p sun-java5-source - Sun Java(TM) Development Kit (JDK) 5.0 so
[ Parent | Reply to this comment ]
[ Parent | Reply to this comment ]
[ Parent | Reply to this comment ]
isn't the java command managed by alternatives (ie /etc/alternatives/java)? so shouldn't the user install sun's JVM only if necessary and then point /etc/alternatives/java to it? it's a little bit more difficult, but hey, we're debian "administrators", not simply "users".
actually, i prefer to have "java" point to a "free" version (which i think is currently either free-java-sdk or whatever the highest weighted alternative is).
i make non-free java the exception, not the rule, so i modify the java application's start up script to use sun's java when necessary. (actually, because there is such a wealth of JVM's, i've created several wrapper scripts for each one i have installed so that i can "java-sable -jar GalleryRemote" or "java-kaffe ..." or "java-gij ...", etc.)
so, could that approach not be used and ssl-explorer's init script be modified to explicitly use sun's JVM? i think that would be more logical than telling everybody they need to uninstall whatever their free JVM is and install sun's non-free JVM as their default. (and yes, whenever sun releases their java under an open source license, hopefully one in line with DFSG, then this will be a mute point, but that hasn't happened yet.)
[ Parent | Reply to this comment ]
I am sure my problem is due to not setting the paths correctly but I have tryed may different option but am getting no where
Thank you in advanced for any help
timm
gateway:/home/timm/SSL/sslexplorer-1.0.0_RC11# ant install
Unable to locate tools.jar. Expected to find it in /usr/lib/j2re1.5-sun/lib/tools.jar
Buildfile: build.xml
install:
compile-dependencies:
compile:
[javac] Compiling 15 source files to /home/timm/SSL/sslexplorer-1.0.0_RC11/maverick-util/build/classes
BUILD FAILED
/home/timm/SSL/sslexplorer-1.0.0_RC11/build.xml:49: The following error occurred while executing this line:
/home/timm/SSL/sslexplorer-1.0.0_RC11/sslexplorer/build.xml:742: The following error occurred while executing this line:
/home/timm/SSL/sslexplorer-1.0.0_RC11/maverick-util/build.xml:44: Unable to find a javac compiler;
com.sun.tools.javac.Main is not on the classpath.
Perhaps JAVA_HOME does not point to the JDK
Total time: 2 seconds
[ Parent | Reply to this comment ]
[ Parent | Reply to this comment ]