{"id":564,"date":"2012-07-15T15:15:42","date_gmt":"2012-07-15T13:15:42","guid":{"rendered":"http:\/\/mattiesworld.gotdns.org\/weblog\/?p=564"},"modified":"2012-07-15T15:27:08","modified_gmt":"2012-07-15T13:27:08","slug":"using-your-eid-on-opensuse-12-1","status":"publish","type":"post","link":"https:\/\/mattiesworld.gotdns.org\/weblog\/2012\/07\/15\/using-your-eid-on-opensuse-12-1\/","title":{"rendered":"Using your EID on opensuse 12.1"},"content":{"rendered":"<p>In Belgium you can use your EID to login onto the federal portal for using electronic services, for example, for filing tax return. Installation instructions are provided for Windows, Mac and (Ubuntu) Linux. This is what I had to do to get it working on opensuse 12.1 on a Dell Precision M4600.<\/p>\n<h1>Installation<\/h1>\n<h3>smartcard reader<\/h3>\n<p><strong><\/strong>Since the M4600 is a fairly new model, I had to upgrade my pcsc\/ccid package to the latest version. It seems the M4600 comes with a Broadcom Corp 5880 smartcard reader which is connected through USB (internally).<\/p>\n<p>Add the chipcard repo:<\/p>\n<p><code>sudo zypper ar -r http:\/\/download.opensuse.org\/repositories\/security:\/chipcard\/openSUSE_12.1\/security:chipcard.repo<\/code><\/p>\n<p>and &#8220;<em>switch system packages<\/em>&#8221; in Yast. You should have installed at least the following packages: <strong>pcsc-lite, libpcsclite1 and libpth20<\/strong>.<\/p>\n<p>Depending on your smartcard reader, you need a different pcsc plugin package. The Broadcom 5880 smartcard reader is supported through the <a href=\"http:\/\/pcsclite.alioth.debian.org\/ccid.html\" target=\"_blank\">ccid driver<\/a>. This means we have to install the <strong>pcsc-ccid<\/strong> package from the chipcard repo.<\/p>\n<h3>eid middleware<\/h3>\n<p>Add the following repo by <a href=\"http:\/\/news.opensuse.org\/2007\/08\/09\/people-of-opensuse-names-please-do-not-publish\/\" target=\"_blank\">Pascal Bleser<\/a>:<\/p>\n<p><code>sudo zypper ar -r\u00a0http:\/\/download.opensuse.org\/repositories\/home:\/pbleser:\/belgium-eid\/openSUSE_12.1\/home:pbleser:belgium-eid.repo<\/code><\/p>\n<p>and install the <strong>eid-mw<\/strong> package. I also noticed the eid-mw-firefox package in this repo, but it did not seem to work in my case, possibly because I&#8217;m using 64-bit firefox.<\/p>\n<h3>configuring firefox<\/h3>\n<ul>\n<li>Install the <a href=\"https:\/\/addons.mozilla.org\/en-US\/firefox\/addon\/belgium-eid\/\" target=\"_blank\">belgium eid firefox add-on<\/a>.<\/li>\n<li>Trust Belgium Certificate Authority:\u00a0Edit menu -&gt; Preferences -&gt; Advanced -&gt; Encryption -&gt; View Certificates -&gt; Authorities -&gt; Belgium root CA2 -&gt; Edit trust -&gt; check all checkboxes<\/li>\n<\/ul>\n<div>I&#8217;m not sure whether the firefox add-on is really needed. Afterwards I uninstalled it and it kept working.<\/div>\n<div><\/div>\n<h1>Troubleshooting<\/h1>\n<h4><em>smartcard reader<\/em><\/h4>\n<ul>\n<li>check in \/var\/log\/messages which device you have<\/li>\n<li>most devices are connected through usb protocol. Check your usb device list:<br \/>\n<code>lsusb -v<\/code><\/li>\n<li>google the device or check the device compatibility lists of the pcsc-&lt;driver&gt; packages. You can find the ccid device list <a href=\"http:\/\/anonscm.debian.org\/viewvc\/pcsclite\/trunk\/Drivers\/ccid\/README?view=markup\" target=\"_blank\">here<\/a>.<\/li>\n<li>if you have a pccard interface for your reader, check whether the device is installed with:<br \/>\n<code>pccardctl ls<\/code><\/li>\n<li>install the <strong>pcsc-tools<\/strong> and <strong>perl-pcsc<\/strong> package to have access to some smartcard reader analysis tools. Running the pcsc_scan tool should yield similar output like this:<br \/>\n<a href=\"https:\/\/mattiesworld.gotdns.org\/weblog\/wp-content\/uploads\/2012\/07\/pcsc_scan.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-570\" title=\"pcsc_scan\" src=\"https:\/\/mattiesworld.gotdns.org\/weblog\/wp-content\/uploads\/2012\/07\/pcsc_scan.png\" alt=\"\" width=\"540\" height=\"354\" srcset=\"https:\/\/mattiesworld.gotdns.org\/weblog\/wp-content\/uploads\/2012\/07\/pcsc_scan.png 540w, https:\/\/mattiesworld.gotdns.org\/weblog\/wp-content\/uploads\/2012\/07\/pcsc_scan-300x196.png 300w, https:\/\/mattiesworld.gotdns.org\/weblog\/wp-content\/uploads\/2012\/07\/pcsc_scan-457x300.png 457w\" sizes=\"auto, (max-width: 540px) 100vw, 540px\" \/><\/a><\/li>\n<li>If you get a segfault when loading the pcsc-ccid driver, for example:<br \/>\n<code>pcscd[3228]: segfault at 0 ip 00007f98bec38121 sp 00007fff2e806208 error 4 in libc-2.14.1.so[7f98bebb8000+187000]<\/code><br \/>\ncheck whether you updated your portable thread library with the one in the chipcard repo (package name is\u00a0<strong>libpth20<\/strong>)<\/li>\n<li>be sure to be using all the packages from the chipcard repo by using the &#8220;switch system packages&#8221;.<\/li>\n<li>firmware upgrade as suggested <a href=\"http:\/\/lists.drizzle.com\/pipermail\/muscle\/2011-April\/008889.html\" target=\"_blank\">here<\/a>, was not necessary. Read the whole thread to find out why a ccid upgrade was actually necessary.<\/li>\n<\/ul>\n<h4><em>eid middleware<\/em><\/h4>\n<p>The government created an application <strong><a href=\"http:\/\/eid.belgium.be\/nl\/binaries\/eid-viewer-4.0.4-146_tcm227-178503.jar\" target=\"_blank\">eid-viewer<\/a><\/strong>\u00a0which you can use to read some public data from your EID. It&#8217;s a java-based app so you need a java JRE to run it:<\/p>\n<p><code>java -jar\u00a0eid-viewer-4.0.4-146_tcm227-178503.jar<\/code><\/p>\n<p>You can obtain it from <a href=\"http:\/\/eid.belgium.be\/nl\/je_eid_gebruiken\/de_eid-middleware_installeren\/linux\/\" target=\"_blank\">this page<\/a> under the catory &#8220;other&#8221;.<\/p>\n<h4><em>firefox<\/em><\/h4>\n<p>Although I installed this add-on, I don&#8217;t believe it is needed. I did have trouble the first time I signed in: it succeeded, but redirected me to a page where I would again need to choose whether I wanted to sign on with EID or password. I closed firefox, and tried again, this time it just worked. You can surf to <a href=\"http:\/\/www.test.eid.belgium.be\/\" target=\"_blank\">this test page<\/a> to test whether everything is configured correctly.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In Belgium you can use your EID to login onto the federal portal for using electronic services, for example, for filing tax return. Installation instructions are provided for Windows, Mac and (Ubuntu) Linux. This is what I had to do to get it working on opensuse 12.1 on a Dell Precision M4600. Installation smartcard reader &hellip; <a href=\"https:\/\/mattiesworld.gotdns.org\/weblog\/2012\/07\/15\/using-your-eid-on-opensuse-12-1\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Using your EID on opensuse 12.1<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8,4,10],"tags":[],"class_list":["post-564","post","type-post","status-publish","format-standard","hentry","category-hardware","category-linux","category-tweaking"],"_links":{"self":[{"href":"https:\/\/mattiesworld.gotdns.org\/weblog\/wp-json\/wp\/v2\/posts\/564","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mattiesworld.gotdns.org\/weblog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mattiesworld.gotdns.org\/weblog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mattiesworld.gotdns.org\/weblog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mattiesworld.gotdns.org\/weblog\/wp-json\/wp\/v2\/comments?post=564"}],"version-history":[{"count":11,"href":"https:\/\/mattiesworld.gotdns.org\/weblog\/wp-json\/wp\/v2\/posts\/564\/revisions"}],"predecessor-version":[{"id":577,"href":"https:\/\/mattiesworld.gotdns.org\/weblog\/wp-json\/wp\/v2\/posts\/564\/revisions\/577"}],"wp:attachment":[{"href":"https:\/\/mattiesworld.gotdns.org\/weblog\/wp-json\/wp\/v2\/media?parent=564"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mattiesworld.gotdns.org\/weblog\/wp-json\/wp\/v2\/categories?post=564"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mattiesworld.gotdns.org\/weblog\/wp-json\/wp\/v2\/tags?post=564"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}