Difference between revisions of "Electronic identification"

From ArchWiki
Jump to: navigation, search
(Firefox might need opensc to be configured)
(Added Firefox configuration, or else the Firefox eID won't work.)
Line 17: Line 17:
 
Install the {{AUR|eid-mw}} package. Before installation, import the (continuous build) keys from [https://files.eid.belgium.be/]. See [[makepkg#Signature checking]].
 
Install the {{AUR|eid-mw}} package. Before installation, import the (continuous build) keys from [https://files.eid.belgium.be/]. See [[makepkg#Signature checking]].
  
There is no plugin for Chrome, but there is one for Firefox. Add the [https://addons.mozilla.org/nl/firefox/addon/belgium-eid Firefox plugin] to your browser. You should now be able to use your eID reader in Firefox. Try it out using the [http://test.eid.belgium.be test page]
+
There is no plugin for Chrome, but there is one for Firefox. Add the [https://addons.mozilla.org/nl/firefox/addon/belgium-eid Firefox plugin] to your browser. In recent versions, you'll need to manually [https://eid.belgium.be/nl/aanmelden-met-eid#7504 add the eID module] to the Firefox security devices configuration. Your module path might be different than the one in the guide.
 +
List the different devices by doing:
 +
# p11tool --list-tokens
 +
Here you'll see the module, which might be beidpkcs11.so.
 +
Now to find the full path you do:
 +
# find /usr/lib --name beidpkcs11.so
 +
You should now be able to use your eID reader in Firefox. Try it out using the [http://test.eid.belgium.be test page]
  
 
You may find hints for troubleshooting in the [http://faq.eid.belgium.be/nl/index.html official documentation (Dutch)] but note that Arch Linux is not officially supported.
 
You may find hints for troubleshooting in the [http://faq.eid.belgium.be/nl/index.html official documentation (Dutch)] but note that Arch Linux is not officially supported.

Revision as of 14:39, 13 May 2018

Tango-edit-clear.pngThis article or section needs language, wiki syntax or style improvements. See Help:Style for reference.Tango-edit-clear.png

Reason: Some duplication with Smartcards (Discuss in Talk:Electronic identification#)

An electronic identification ("eID") is an electronic identification solution of citizens or organizations, for example in view to access benefits or services provided by government authorities, banks or other companies. Apart from online authentication many eICs also give users the option to sign electronic documents with a digital signature.

Installation

Install the ccid package. ACS smart card also require the acsccidAUR package. After installation, enable pcscd.socket.

Belgium

https://eid.belgium.be/en

Install the eid-mwAUR package. Before installation, import the (continuous build) keys from [1]. See makepkg#Signature checking.

There is no plugin for Chrome, but there is one for Firefox. Add the Firefox plugin to your browser. In recent versions, you'll need to manually add the eID module to the Firefox security devices configuration. Your module path might be different than the one in the guide. List the different devices by doing:

# p11tool --list-tokens

Here you'll see the module, which might be beidpkcs11.so. Now to find the full path you do:

# find /usr/lib --name beidpkcs11.so

You should now be able to use your eID reader in Firefox. Try it out using the test page

You may find hints for troubleshooting in the official documentation (Dutch) but note that Arch Linux is not officially supported.

Estonia

https://www.id.ee/?lang=en

Install the chrome-token-signingAUR, qdigidocAUR and qesteidutilAUR packages, with dependencies libdigidocAUR and libdigidocppAUR. These applications will automatically appear in your application menus. You can also start from command line with qdigidocclient and qesteidutil.

chrome-token-signingAUR contains Native Messaging host for Google Chrome/Chromium and Firefox and it is the modern way of doing authentication and digital signatures on the web.

For Google Chrome and Chromium you also will probably want to run esteid-update-nssdb script that enables TLS client authentication in the browser.

Some recent versions of Firefox seem to have problems recognizing opensc, see Smartcards#Mozilla Firefox. If you still cannot login from Firefox with your ID-card you should install esteidfirefoxpluginAUR.

If you updated your certificates due to https://www.id.ee/?lang=en&id=38241, then for signing you need to use a patched version of opensc (see https://github.com/OpenSC/OpenSC/issues/1176). Consider opensc-esteidAUR.

Sweden

BankID is the leading electronic identification in Sweden.