Web eID
The Web eID is a suite of browser extension, native application, and JavaScript library that provides a way to perform cryptographic operations (authentication, signing) using smart cards on the Web. One of the purposes of the project is to replace the legacy architecture of the Open eID project [1].
Installation
Overlay
Gentoo is not officially supported by the Web eID project [2], and there are no packages in the official Gentoo repository. However, there is an official community-driven overlay in the Open eID project. To enable the overlay, first it is necessary to install dev-vcs/git and app-eselect/eselect-repository:
root #
emerge --ask dev-vcs/git app-eselect/eselect-repository
The overlay can then be enabled as follows:
root #
eselect repository add esteid git https://github.com/open-eid/gentoo.git
And the Gentoo ebuild repository needs to updated:
root #
emerge --sync
As all packages in the overlay are masked with the amd64 keyword, they need to be unmasked (see /etc/portage/package.accept_keywords for more information):
*/*::esteid ~amd64
Package
This section assumes that the overlay described above is enabled.
To install the Web eID package, run the following command:
root #
emerge --ask www-plugins/web-eid
The compilation of the package may fail due to the lack of
Qt5Svg
. In this case, downgrade the dev-qt/qtsvg package:
root #
emerge --ask dev-qt/qtsvg:5
Open eID
As of 2024-05-07, qdigidoc4 compiles but crashes at runtime due to libdigidocpp on musl-based systems.
Even though Web eID was released in 2022 [3], not all companies have migrated to it, and some still require the legacy suite to be installed.
As of 2024-05-07, dev-cpp/libcutl incorrectly defines dependencies, so the dependency needs to be installed manually:
root #
emerge --ask dev-libs/boost
As of 2024-05-07, dev-libs/libdigidocpp requires the following patch on a musl-based system (the patch will force the library to compile, but it will still crash at runtime):
--- a/src/util/File.h
+++ b/src/util/File.h
@@ -22,6 +22,7 @@
#include "../Exception.h"
#include <stack>
+#include <ctime>
namespace digidoc
{
To install the legacy suite, run the following command:
root #
emerge --ask app-crypt/qdigidoc4
And to install the browser extension, run the following command:
root #
emerge --ask www-plugins/chrome-token-signing
Smart card reader driver
Follow the instructions provided here.
Testing
The official website has a button to test authentication and signing.
See also
- Electronic identification — the core part of e-government implementation, providing a way to identify citizens and organizations.