Estonian ID-card

From ArchWiki
Revision as of 14:44, 24 March 2017 by Arti (talk | contribs) (Added text about chrome-token-signing package)
Jump to navigation Jump to search

Tango-go-next.pngThis article or section is a candidate for moving to eID card.Tango-go-next.png

Notes: Shared instructions amongst different eID cards (card readers, pcsc), different mostly in middleware and browser plugins. Merge with Belgian eID card reader. (Discuss in Talk:Estonian ID-card#)

Packages to enable Estonian ID-card support are available from the Arch User Repository. This article explains how to install the official software versions by AS Sertifitseerimiskeskus.

Quick install

1. Install pcsclite from the official repositories and chrome-token-signingAUR, qdigidocAUR and qesteidutilAUR from the AUR.

2. Enable pcscd.socket using systemd.

chrome-token-signingAUR package contains Native Messaging host for Google Chrome/Chromium and Firefox and it is the modern way of doing authentication and digital signatures on the web.

For Google Chrome and Chromium you also will probably want to run esteid-update-nssdb script that enables TLS client authentication the the browser.

Browser plugin (web authentication & digital signatures)

The browser plugin AUR package is called esteidfirefoxpluginAUR, which also requires dependencies esteidpkcs11loaderAUR and esteidcertsAUR[broken link: archived in aur-mirror].

It also requires you to run the PCSC daemon, which can be installed with pcsclite from the official repositories.

Make it auto-start on demand by enabling pcscd.socket using systemd.

Don't forget to restart Firefox after finishing.

ID-card and Digidoc utilities

The ID-card utility packages are qesteidutilAUR and qdigidocAUR, with dependencies esteidcertsAUR[broken link: archived in aur-mirror], libdigidocAUR and libdigidocppAUR.

These applications will automatically appear in your application menus. You can also start from command line with qdigidocclient and qesteidutil.