Setting up an electronic budget workstation takes place in several stages, they are not complicated, but require care. We do everything according to the instructions for setting up an electronic budget. Briefly and to the point ...
Electronic budget workplace setup
Root certificate e-budget
Create a key folder in My Documents to store downloaded certificates in this folder:
On the site http://roskazna.ru/gis/udostoveryayushhij-centr/kornevye-sertifikaty/ in the GIS menu -> Certification center -> Root certificates, you need to download " Root certificate (qualified) "(see figure), or if you received a USB flash drive with certificates, copy them from the Certificates folder.
Continent TLS VPN Certificate
The second certificate that you need to download is the Continent TLS VPN certificate, but I could not find it on the new roskazna site, so I put a link from my site. Download the Continent TLS VPN certificate to the key folder, it will be useful to us later when we configure the Continent TLS client program.
Install the downloaded Root Certificate (qualified) to work with an electronic budget.
In the START menu -> All programs -> CRYPTO-PRO -> run the Certificates program.
Go to the Certificates item as shown in the picture below:
Go to the Action menu - All tasks - Import, the Certificate Import Wizard window will appear - Next - Browse - Find the downloaded Root certificate (qualified) in our case, it is located in My Documents in the key folder
If everything is done correctly, then the root certificate of the Federal Treasury CA will appear in the certificates folder.
Installation "Continent TLS Client" for working with electronic budget
Continent_tls_client_1.0.920.0 can be found on the internet.
Unpack the downloaded archive, go to the CD folder and run ContinentTLSSetup.exe
From the point click on the Continent TLS Client KC2 and start the installation.
We accept the terms
In the destination folder, we leave it by default
In the Configurator Launch window, put a check mark on Launch Configurator after installation is complete.
During installation, the Service settings window will appear:
Address - indicate lk.budget.gov.ru
Certificate - select the second certificate downloaded earlier in the key folder.
Click OK and complete the installation, Done.
When asked to restart the operating system, we answer No.
Installation of the electronic signature tool "Jinn-Client"
You can download the Jinn-Client program on the Internet.
Go to the Jinn-client - CD folder, run setup.exe
Click from the Jinn-Client list, the installation of the program starts
Ignore the error, click Continue, Next, accept the agreement and click Next.
Enter the issued license key
Install the program by default, click Next
We complete the installation, we answer the question about restarting the operating system No
Installation of the module for working with electronic signature "Cubesign"
If you need an archive with the program, write in the comments.
Run the cubesign.msi installation file
Configuring the Mozilla Firefox browser to work with the Electronic budget.
1. Open the "Tools" menu and select "Options".
2. Go to the "Additional" section on the "Network" tab
3. In the "Connection" section of settings, click the "Configure ..." button.
4. In the opened connection parameters window, set the value
"Manual configuration of the proxy service".
5. Set the values of the HTTP-proxy fields: 127.0.0.1; Port: 8080.
6. Press the "OK" button.
7. In the "Settings" window, click the "OK" button.
Login to the personal account of the Electronic budget
A window will open with a choice of a certificate for entering the personal account of the Electronic Budget.
We select a certificate for entering the Personal Account of the Electronic Budget, if there is a password for the closed part of the certificate, write and click OK, after which the Personal Account of the Electronic Budget will open.
Considered the most stable browser, some users may encounter various errors during use. This article will discuss the error "An error occurred while establishing a secure connection", namely, how to fix it.
The "Error while establishing a secure connection" message can appear in two cases: when you go to a secure site and, accordingly, when you go to an unprotected site. We will consider both types of problems below.
In most cases, the user encounters an error while establishing a secure connection when going to a secure site.
The fact that the site is protected, the user can say "https" in the address bar in front of the name of the site itself.
If you are faced with the message "An error occurred while establishing a secure connection", then below it you can see an explanation of the cause of the problem.
Reason 1: The certificate will not be valid until the date [date]
When you go to a secure website, Mozilla Firefox necessarily checks the site for certificates, which will make sure that your data will only be transferred to where it was intended.
As a rule, this type of error indicates that the wrong date and time is set on your computer.
In this case, you will need to change the date and time. To do this, click on the date icon in the lower right corner and select the item Date and time options .
Reason 2: Certificate expired [date]
This error can also speak of an incorrectly set time, and it can be a sure sign that the site has not renewed its certificates in time.
If the date and time is set on your computer, then the problem is probably in the site, and until it renews the certificates, the site can only be accessed by adding to the exclusions, which is described near the end of the article.
Reason 3: the certificate is not trusted because its issuer certificate is unknown
This error can occur in two cases: the site is really not worth trusting, or the problem lies in the file cert8.db located in the folder of the Firefox profile that has been corrupted.
If you are sure that the site is safe, then the problem is probably still in the corrupted file. And to solve the problem, you need Mozilla Firefox to create a new such file, which means you need to delete the old version.
To get to the profile folder, click on the Firefox menu button and in the window that appears, click on the icon with a question mark.
An additional menu will be displayed in the same area of the window, in which you will need to click on the item "Information for problem solving" .
In the window that opens, click on the button Show folder .
After the profile folder appears on the screen, you need to close Mozilla Firefox. To do this, click on the browser menu button and in the window that appears, click on the button "Exit" .
Now let's go back to the profile folder. Find the cert8.db file in it, right-click on it and select "Delete" .
Once the file is deleted, you can close the profile folder and start Firefox again.
Reason 4: there is no trust in the certificate, because missing certificate chain
A similar error occurs, as a rule, due to antiviruses in which the SSL scanning function is activated. Go to your antivirus settings and disable the network (SSL) scan function.
How to fix the error when going to an unsecured site?
If the message "An error occurred while switching to a secure connection" appears, if you go to an unsecured site, this may indicate a conflict between settings, add-ons and themes.
First of all, open the browser menu and go to the section "Supplements" ... In the left pane of the window by opening the tab "Extensions" , disable the maximum number of extensions installed for your browser.
Next go to the tab "Appearance" and remove all third-party themes, leaving and applying the default for Firefox.
After completing these steps, check for an error. If it persists, try disabling hardware acceleration.
To do this, click on the browser menu button and go to the section "Settings" .
In the left pane of the window, go to the tab "Additional" , and at the top open the sub-tab "Are common" ... In this window, you need to uncheck the box "Use hardware acceleration whenever possible" .
Workaround the error
If you are still unable to resolve the "Error establishing secure connection" message, but are confident that the site is safe, you can fix the problem by bypassing the persistent Firefox warning.
To do this, in the window with an error, click on the button "Or you can add an exception." , then click on the button that appears "Add an exception" .
A window will appear on the screen in which click on the button "Get a certificate" , and then click on the button "Confirm Security Exception" .
Video tutorial:
We hope this article helped you fix problems with Mozilla Firefox.
Not so long ago, budgetary organizations, namely the administration of village councils, began to contact me with a request to help them set up the Electronic Budget system. This is another project of our, give_im_vsem_ health, government, as part of the services of the Electronic Government of the Russian Federation project. Grandmothers and aunts in villages and village councils with old computers and very slow internet. Join our group on VK! Under repair! Smart workshop!
They are obliged, on an equal basis with everyone, to be able to install these things according to the instructions and use them. Otherwise the terms. Someone is waiting for execution, here are the workers of rural administrations and reach out to those who can help them in this. Of course they don't have a full-time programmer. Well, okay, all this is lyrics. Let's get down to business. People have a disk in their hands, apparently with distributions, and a desire for this kind of Electronic budget to work for them.
On the disk, in principle, everything is neatly laid out and it was not a problem to install the whole thing according to the instructions. By the way, the instruction is also available on the Roskazna website itself. There were no particular problems following the instructions to install a set of programs, certificates, etc. As a result, after the last reboot and registering the proxy in the browser (the mozilla was chosen). Trying to enter the site http://lk.budget.gov.ru/ was not crowned with success. After choosing a user certificate, the site began to swear: Root certificate was not found. Although I personally installed it, adding according to the instructions in the trusted root certificates. After sitting for a while and looking through the instructions again, I discovered such an interesting moment, which I think other people may also encounter.
And I stubbornly displayed in the form:
As you can see, there is no local computer storage here. Here the dog rummaged. Well, okay, apparently they know better there, but we will go around, adding where necessary. To do this, click Start and in the line Find programs and services we type: certmgr.msc.
The System Certificates management console opens. Go to Trusted Root Certification Authorities -> Local computer-> Right click on Certificates -> All tasks -> Import.
The Certificate Import Wizard will open. Click Next -> Browse -> and specify the path to the root certificate file. Download it by the way, if you suddenly did not download it according to the instructions, you can from the Roskazna website by choosing a qualified one.
If you have opened certmgr.mscand you don't have a branch there either Local computer... We are not upset, there is still a way, we press Start and in the line Find programs and services we type: mmc. If you are a win 7 or higher user, I advise you to run mmc as administrator. I wrote how to do it. In the opened console, go to the menu File -> Add Remove Snap... In the list of available accessories we are looking for Certificates... We successively add the snap-in for the current user and the local computer.
And voila, going on http://lk.budget.gov.ru/ making sure everything works. The root certificate error should at least be gone. But here's the thing that it will work ... I can't promise. In general, I advise you to go every time through http://budget.gov.ru/ Later entrance in the upper right corner, and on the big button Enter the personal account of the "Electronic budget" system. Well, don't be afraid of mistakes, etc. the system is currently working in test mode, and does not enter it the first time. We poke we suffer 🙂
Join our group on VK!
New version of HandyCache released.
The changes made in this version are mainly related to fixing problems and errors.
In the archive of the previous version, I put the updated dll-libraries libeay32.dll and ssleay32.dll compiled by me. These libraries work when the SSL Handling option is enabled. As I found out, one of them, when loading, required the presence of the msvcp120.dll library. The absence of this library on the computer resulted in the message Port xxxx already in use when starting HandyCache with the SSL processing option enabled. This time I have compiled the specified dlls in such a way that additional dlls are no longer needed.
I am sometimes asked: which version of Windows does HandyCache require? If you do not use the SSL Handling option, you can use Windows 7 or 10. If SSL Handling is used, then it is better to use Windows 10. If you are using Windows 7 HandyCache, when accessing some sites, the SSL Handling option cannot work. There are far fewer such sites when using Windows 10. If HandyCache is unable to process SSL when working with a specific site, then it automatically disables this option for this site and in the Monitor in the Rules column the message Stop SSL decryption for this host + useragent is displayed.
A complete list of changes can be found below.
To install version RC4 1.0.0.885, unpack the archive over the existing version and replace the existing files. New lists of rules will be created automatically when HandyCache starts only if there are no current lists (files * .lst, * .lso and * .lsb).
If HandyCache has not yet been installed on your computer, then just copy the contents of the archive into an empty folder and run the exe-file.
One of the most common errors of the "Electronic Budget" AWS program is an error that occurs when connecting to the server, which has the index number 434. It is quite simple to solve it, in most cases only 2 actions help:
1. TLS Continent build update to the current version. For example, version number 920 was unstable and often the connection ended with 434 with the "Destination server unavailable" error. The current version can be downloaded from the site securitycode.ru.
2. Checking if the address is entered correctly personal account of the user of the "Electronic Budget" program in the TLS Continent, as well as the port number (8080). The line should not contain spaces or any other characters, neither at the beginning of the line, nor at the end. The correct address would be: lk.budget.gov.ru(as pictured). If you configure a proxy server through a browser, it must be configured accordingly. If you do not work through a proxy server, there should be no tick in the TLS settings. More on this below.
Error 434 "The destination server is unavailable." How to remove?
If the above two solutions to the problems did not help you (updating the assembly and the correct spelling of the address of the personal account), then the problem most likely lies in the incorrect installation of the root certificates of the certification authority or the proxy settings in the browser, and it can also be solved.- With regards to certificates- some users, if the program is installed incorrectly, put the root certificates of the CA and TLS in the Registry, while according to the instructions correctly - in the Local computer. In this case, moving the certificates will help.
If you choose the proxy server setting in the browser, it must be enabled in the correct way. You must specify the type of proxy - HTTP and check the box that the proxy server will be used for all protocols. An example of configuring the Firefox browser is below.
