The clauer project.

Software.

To start using "clauer devices" you need to install the software.
Click here to download the setup and run it!.

You install:

• The operating system (clos) and the update agent.
• The CSP and Store for Windows CryptoAPI.
• The PKCS11 for firefox.
• The managers to create the "clauer devices" and more.

Creating the device.

The device can created and managed using command-line tools that are described here, but there are two device managers for Windows to make it easy, one for disks another for files, choose for your convenience.

Test.

Open Internet Explorer, select form the Tools menu, the Preferences option. Then select Contents and then Certificates. Your ceriticates apperar in the list if the "clauer device" is inserted.

From the Windows start button, install the firefox support (you should ensure that the web page is opened with Firefox). Then, open the Preferences dialog, Advanced tab, Encryption, View certificates, your certificates should appear labeled as stored in the "clauer device" device.

Prebuilt software.

Clauer packages for some Linux distributions are available. Currently, they include the base software, the command-line utilities, and the integrated firefox manager. In future updates, they may will include a QT managet for non-Firefox users.

To install a package, drag and drop it on your Desktop, your package manager will install the required dependencies. An instalation source will be automatically added to your system, in order to be always updated.

If you are using Firefox, restart it, you will find the pkcs11 module already installed and the clauer manager installed in the Tools menu. To install the pkcs11 in thunderbird, read here.

Available packages (only i386, contributors are wellcome).

Open software.

If your linux distribution does not match the above ones, to download and install the software, proceed as:

	cd /tmp
	wget "http://dwnl.nisu.org/dwnl/ClauerLinux-3.0.3.tar.gz/si" \
	   -O ClauerLinux-3.0.3.tar.gz
	tar zxf ClauerLinux-3.0.3.tar.gz
	cd ClauerLinux*
	./configure

Perhaps some problems appear, please contact with us if they are not trivial.
Note: for 64 bits, use:

	./configure --enable-64

Then:

	make
	su

And, as root:

	make install
	/etc/init.d/clos start
	exit

Now, to install the support for Firefox:

	firefox-install-pkcs11.sh

You have installed only the pkcs11 support. Compiling and installing the Firefox clauer manager is not a trivial operation. Please contact with the autor for support.

To install the thunderbird support:

• Start thunderbird.
• From the tools menu, take Javascript console.
• Type (copy+paste):

  pkcs11.addmodule("Modulo pkcs11 Clauer", "/usr/local/lib/libpkcs11.so", 0x1<<28, 0);

  and press Enter. If the module is located at /usr/lib, of course type:

  pkcs11.addmodule("Modulo pkcs11 Clauer", "/usr/lib/libpkcs11.so", 0x1<<28, 0);

Creating the device.

If you are using Firefox and have the clauer manager installed on it, from the Tools menu you can manage the device and the certificates.

If not, the script called fclauer can do the task of creating an USB "clauer device", acting as a wizard.

Alternatively you can do it totally by hand, doing:

• Repartition the device with fdisk, creating a partition #1 for data (usually vfat) and another partition, that must be #4, with special type 105 (dec, 69 hex)
• Create a filesystem on partition #1, something like: mkfs.vfat /dev/sda1.
• Run clmakefs on the partition #4, something like: clmakefs /dev/sda4 mypwd.

The you can import certificates and keys from PKCS12 files, using climport.

Test.

Open Mozilla / Firefox and use the certificates.

cldel

Allows to delete objects from the device specified by -d. The -l options shows the available devices. This options are present in almost any of the commands.
Deleting individual blocks is a dangerous oprion (-b num) that must be used carefully, as it can leave the device in an incoherent status.
To delete certificates and its private keys, use -c num, where num is the number returned by clls or clexport.

clexport

Allows the extraction of a certificate + private key in PKCS12 format.
First, use -l to list the certificates, then run it with the certificate number as parameter (i.e clexport 4 >my.p12).
Also, parameter -c dumps the entiere device (not in PKCS12). This is usefull for Widows users (that cannot do a simple unix "cat").

climport

clls

List the objects contained in the clauer filesystem. Available options are the usual -l and -d, and you can select the object type using -t.

clmakefs

Creates a clauer filesystem.
First parameter is the device name or file name, and second parameter the password.
If file does not exist, can be created using -s size.
If file already carries a clauer filesystem, -i tries to get the identifier.

clpasswd

Used to change the device password, available options are the usual -l and -d.

clview

Intuitive device view, shows information about the clauer filesystem, and the presumed device owner, extracted form first certificate.

clwblock

Write a block, readed from a file.

fclauer

Only for Linux, acts a wizard for device creation, used to repartition the disk and create the filesystem.

Windows update agent behaviour.

The update agent runs in background maintaining an icon in the toolbar. It retrieves from internet (from our web server) four types of events:

1. Critical Update. In this case, the user is forced to update in the next 15 days.
2. Major release. The user is prompted to update (with a typical Windows XP yellow buble).
3. Nigth build. A new version with minor changes is ready.
4. Up to date.

The update agent connects automatically every 30 minutes. If it receives events 1 or 2, informs the user. If receives events 3 or 4, nothing is displayed.
If user connects manually (with menu option), the behaviour is the same except that event 3 is treated as event 2, so user can download a nigth build.

The update agent has two modes of operation:

• Silent mode (default). The user is informed with a yellow buble, and if he clicks in the buble, the update agent downloads and installs the software, then the user is again informed about completion.
• Verbose mode. Here, after clicking on the yellow buble, an information window appears. If user press escape, he can change the notification period and process is interrumpted. If user continues, the update agent downloads the software, and informs about completion, showing another window, inviting to install. The installation process is again verbose, so user can select additional modules to be installed.