Web eID

From Gentoo Wiki
Jump to:navigation Jump to:search
Resources (Open eID)

The Web eID is a suite of browser extension, native application, and JavaScript library that provides a way to perform cryptographic operations (authentication, signing) using smart cards on the Web. One of the purposes of the project is to replace the legacy architecture of the Open eID project [1].

Installation

Overlay

Gentoo is not officially supported by the Web eID project [2], and there are no packages in the official Gentoo repository. However, there is an official community-driven overlay in the Open eID project. To enable the overlay, first it is necessary to install dev-vcs/git and app-eselect/eselect-repository:

root #emerge --ask dev-vcs/git app-eselect/eselect-repository

The overlay can then be enabled as follows:

root #eselect repository add esteid git https://github.com/open-eid/gentoo.git

And the Gentoo ebuild repository needs to updated:

root #emerge --sync

As all packages in the overlay are masked with the amd64 keyword, they need to be unmasked (see /etc/portage/package.accept_keywords for more information):

FILE /etc/portage/package.accept_keywords
*/*::esteid ~amd64

Package

Note
This section assumes that the overlay described above is enabled.

To install the Web eID package, run the following command:

root #emerge --ask www-plugins/web-eid
Important
The compilation of the package may fail due to the lack of Qt5Svg. In this case, downgrade the dev-qt/qtsvg package:
root #emerge --ask dev-qt/qtsvg:5

Open eID

Warning
As of 2024-05-07, qdigidoc4 compiles but crashes at runtime due to libdigidocpp on musl-based systems.

Even though Web eID was released in 2022 [3], not all companies have migrated to it, and some still require the legacy suite to be installed.

As of 2024-05-07, dev-cpp/libcutl incorrectly defines dependencies, so the dependency needs to be installed manually:

root #emerge --ask dev-libs/boost

As of 2024-05-07, dev-libs/libdigidocpp requires the following patch on a musl-based system (the patch will force the library to compile, but it will still crash at runtime):

FILE /etc/portage/patches/dev-libs/libdigidocpp-3.16.0/ctime.patch
--- a/src/util/File.h
+++ b/src/util/File.h
@@ -22,6 +22,7 @@
 #include "../Exception.h"

 #include <stack>
+#include <ctime>

 namespace digidoc
 {

To install the legacy suite, run the following command:

root #emerge --ask app-crypt/qdigidoc4

And to install the browser extension, run the following command:

root #emerge --ask www-plugins/chrome-token-signing

Smart card reader driver

Follow the instructions provided here.

Testing

The official website has a button to test authentication and signing.

See also

  • Electronic identification — the core part of e-government implementation, providing a way to identify citizens and organizations.

References