Faq autofirma execution en US - ctt-gob-es/clienteafirma GitHub Wiki
If Autofirma does not start when a signing operation starts from the web browser or if your splash image is displayed but then the operation does not run, the problem may be that your web browser cannot communicate correctly with Autofirma.
Self-signature and the web browser are communicated through a websocket opened by the application and encrypted with an electronic certificate. If this electronic certificate is not found in the application's trusted certificate list, the browser will not be able to establish the connection and send the signing order to Autofirma. To resolve this issue, first verify that Autofirma is installed on your computer. If it is, open the application and run the installation restore function (Menu “Tools
” -> “Restore installation
”).
In case the connection restore fails, you can manually install the user's trust certificates. To do this, first locate the file "Automarca_ROOT.cer
" in your system and install it in the trusted store that uses your browser.
Windows
Find the file "Autofirma_ROOT.cer
" in the directory:
- C:\ProgramData\Autofirma
If it is not in the previous directory, look for it in the Autofirma installation directory. By default:
- C:\Program Files\Autofirma (On 64-bit computers)
- C:\Program Files (x86)\Autofirma (On 32-bit computers)
To install it in the Windows store:
-
We will double-click on the file "
Autofirma_ROOT.cer
". -
We will press the “Install certificate…” button of the dialog with the certificate information.
- We will press the “Next” button.
- We will select the option “Place all certificates in the next store” and press the button “Browse…”.
- We will select the “Trusted Root Certification Entities” store and press “Accept”.
-
We will press the “Next” button once we have selected the store to which to import the certificate.
-
We will press the “Finish” button of the new window.
- Finally, we will be shown the result of importing the certificate.
To install it in the Firefox store (although it may vary depending on the version):
- We access the "Settings" option from the browser menu.
- We access the "Privacy & Security" section of the left panel.
- Go to the Security section and press the "View Certificates" button in the "Certificates" block.
- Go to the "Authorities" tab and click on the "Import" button.
- Select the file "
Autofirma_ROOT.cer
" and press the "Open
" button.
- Select the option "Trust this CA to identify websites" and press the "Accept" button.
Linux
Find the file "Autofirma_ROOT.cer
" in the directory:
- $HOME/.afirma/Autofirma
If it is not in the previous directory, look for it in the Autofirma installation directory. By default:
- /usr/lib/Autofirma/
To install it in the Firefox store, the process is analogous to that used in Windows. Follow the instructions listed above.
To install the certificate in Chrome, the process is as follows:
- We access the "Settings" option from the browser menu.
- Go to the "Privacy and security" section of the left panel.
- We move to the "Manage certificates" section.
- We access the list of certificates installed by us ("Installed by you").
- Click the "Import" button in the "Trusted certificates" section.
- Select the file "Autofirma_ROOT.cer" and press "Accept".
macOS
Find the "Autofirma_ROOT.cer
" and "autofirma.cer
" files in the directory:
- $HOME/Library/Application Support/Autofirma
To install them in the system store:
-
Double-click on the file "
Autofirma_ROOT.cer
" and insert your password to allow the import into the keychain of the system. -
Open the context menu of the certificate "ROOT Autofirma" in the listing and click on the "Get information" option.
- Modify the value of the "When using this certificate" listing and select the "Always trust" option.
-
Close the window and authorize the operation by inserting your user password when prompted.
-
Repeat steps 1 to 4 with the "
autofirma.cer
" file, which will import the "127.0.0.1
" certificate. -
Close the dialog and authorize the operation by inserting your password if required.
To install it in the Firefox store, the process is analogous to that used in Windows. Follow the instructions listed above.
If you generate a configuration file for importing the configuration options in Autofirma and when importing it shows the error message “The preferences file is invalid, no change will be made in the configuration
”, it is likely that the file used is not a valid XML or that has some coding problem. Verify that your configuration file is well formed and that the encoding used is correct.
Some older versions of Java 8 and earlier versions of Java 11 will not allow you to upload elliptic curve certificates from the Windows store. If you are not shown your certificates in the store check:
- You are running Java 21 or higher or at least a recent version of Java 8 or 11. You can check this from the “About” panel of Self-Signature.
- That your certificate is not expired.
- That in the Windows certificate listing appears that your certificate has a private key associated with it. If your certificate appears when you use Autofirma directly, but not when you upload it from a web process, it is likely that the process is limiting what type of certificates can be used to sign the process and that your certificate is not among those allowed.
Many Linux distributions include a headless version of the JRE by default. These versions do not support graphical interfaces, so the Autofirma graphical interface cannot be opened (although you will be able to perform operations per console). If you try to open Autofirma from your system’s application launcher or if running it by console without parameters shows the warning “You cannot create the graphical environment. The request is treated as a console call
", it is very likely to be affected by this problem.
To solve this problem, install a full JRE version such as OpenJDK, configure it to run as the default Java version (when using the java
command from the console) and reinstall Autofirma.
In certain environments it may happen that when viewing the help of the AutoFirma graphic interface the Firefox browser is opened and indicates that the page is not found or cannot be opened. The problem is due to the version of Firefox used, which does not allow you to open web pages on disk. It is known, for example, that this happens with the version of Firefox included by default in some versions of Ubuntu (confirmed in Ubuntu 22.04). You can see the help of Autofirma by opening from another browser the same page that you are trying to open, changing your default browser for another or replacing the pre-installed version of Firefox with the official version.
The behavior is correct. Starting with macOS Sequoia 15.3.2, the operating system requires the user to insert their password twice, once to access the certificate and once to use their signature key.
New versions of macOS omit the title of file upload and save dialogs. In the event that the integrator delegates the selection and saving of generated signatures to Autofirma, he should be careful to inform the user of this so that at all times he knows what operation he is performing (loading of a data file for signature, loading of a signature file for co-signature/counter-signature, saving of a generated signature…).