Belgian eID - Revision history

PhilippeTeuwen: /* Signing in Acrobat Reader */

2014-04-18T20:58:41Z

Signing in Acrobat Reader

← Older revision		Revision as of 20:58, 18 April 2014
Line 452:		Line 452:
	Document -> Security Settings -> Digital IDs -> PKCS#11 -> Attach module ->		Document -> Security Settings -> Digital IDs -> PKCS#11 -> Attach module ->
	/usr/lib/libbeidpkcs11.so (apparently worked only with v3.5)		/usr/lib/libbeidpkcs11.so (apparently worked only with v3.5)
	do not work with acroread 9.5.1 but ~~work~~ with acroread 9.5.4		It does not work with acroread 9.5.1 but works with acroread 9.5.4

	You can use ~~https~~://signbox.eidcompany.be/ ~~(no more service ...)~~ to create a pdf to be signed.		You can use http://signbox.eidcompany.be/en/e-sign-it to create a pdf to be signed.
	<br>~~Seems~~ to work but I still find strange it prompts me twice for the PIN, once in the Acrobat interface (password) and once with the virtual pad of the beid pkcs11 library.		<br>Used to be free online service: seems to work but I still find strange it prompts me twice for the PIN, once in the Acrobat interface (password) and once with the virtual pad of the beid pkcs11 library.

	~~you~~ can use ~~this one~~ https://sign.belgium.be/ it ~~sent~~ you back a Zip file with the pdf and a signature file, not ~~realy~~ convenient ~~:( ..~~.)		You can use https://sign.belgium.be/ it sends you back a Zip file with the pdf and a signature file, not really convenient.

	Old stuff: see also https://securehomes.esat.kuleuven.be/~decockd/wiki/bin/view.cgi/EidForums/ForumEidCards0068?t=2008-04-04T18:04:26Z and try with http://itext.ugent.be/articles/eid-pdf/		Old stuff: see also https://securehomes.esat.kuleuven.be/~decockd/wiki/bin/view.cgi/EidForums/ForumEidCards0068?t=2008-04-04T18:04:26Z and try with http://itext.ugent.be/articles/eid-pdf/

Dorian: /* Signing in Acrobat Reader */

2014-04-18T20:45:56Z

Signing in Acrobat Reader

← Older revision		Revision as of 20:45, 18 April 2014
Line 452:		Line 452:
	Document -> Security Settings -> Digital IDs -> PKCS#11 -> Attach module ->		Document -> Security Settings -> Digital IDs -> PKCS#11 -> Attach module ->
	/usr/lib/libbeidpkcs11.so (apparently worked only with v3.5)		/usr/lib/libbeidpkcs11.so (apparently worked only with v3.5)
			do not work with acroread 9.5.1 but work with acroread 9.5.4

	You can use https://signbox.eidcompany.be/ to create a pdf to be signed.		You can use https://signbox.eidcompany.be/ (no more service ...) to create a pdf to be signed.
	<br>Seems to work but I still find strange it prompts me twice for the PIN, once in the Acrobat interface (password) and once with the virtual pad of the beid pkcs11 library.		<br>Seems to work but I still find strange it prompts me twice for the PIN, once in the Acrobat interface (password) and once with the virtual pad of the beid pkcs11 library.

			you can use this one https://sign.belgium.be/ it sent you back a Zip file with the pdf and a signature file, not realy convenient :( ...)

	Old stuff: see also https://securehomes.esat.kuleuven.be/~decockd/wiki/bin/view.cgi/EidForums/ForumEidCards0068?t=2008-04-04T18:04:26Z and try with http://itext.ugent.be/articles/eid-pdf/		Old stuff: see also https://securehomes.esat.kuleuven.be/~decockd/wiki/bin/view.cgi/EidForums/ForumEidCards0068?t=2008-04-04T18:04:26Z and try with http://itext.ugent.be/articles/eid-pdf/

	==Linux: Government Middleware v3.5==		==Linux: Government Middleware v3.5==
	Why upgrading?		Why upgrading?

PhilippeTeuwen: /* Officials */

2013-12-29T13:50:40Z

Officials

← Older revision		Revision as of 13:50, 29 December 2013
Line 48:		Line 48:
	* [https://www.socialsecurity.be SocialSecurity]		* [https://www.socialsecurity.be SocialSecurity]
	* [https://www.notaclick.be NotaClic], auctions! Want to buy a house à la "eBay"?		* [https://www.notaclick.be NotaClic], auctions! Want to buy a house à la "eBay"?
			* [http://www.comptesdormants.be/ Comptes dormants], dormant accounts
			* [http://www.db2p.be Assurances-groupe dormantes], dormant group insurances

	==Misc links==		==Misc links==

PhilippeTeuwen: /* Linux: Government Middleware v4.0.4 */

2013-12-29T13:45:43Z

Linux: Government Middleware v4.0.4

← Older revision		Revision as of 13:45, 29 December 2013
Line 554:		Line 554:
	wget http://eid.belgium.be/fr/binaries/eid-viewer_4%2E0%2E4r146_amd64_tcm226-178482.deb		wget http://eid.belgium.be/fr/binaries/eid-viewer_4%2E0%2E4r146_amd64_tcm226-178482.deb
	sudo dpkg -i eid-viewer_4.0.4r146_amd64_tcm226-178482.deb		sudo dpkg -i eid-viewer_4.0.4r146_amd64_tcm226-178482.deb
			For Chromium, see https://code.google.com/p/eid-mw/wiki/ChromeLinux
⚫	Test it:
			cd
			modutil -dbdir sql:.pki/nssdb/ -add "Belgium eID" -libfile /usr/lib/libbeidpkcs11.so
			# check if the library was successfully added
			modutil -dbdir sql:.pki/nssdb/ -list
		⚫	<br>Test it:
	eid-viewer		eid-viewer
	Questions?		Questions?

PhilippeTeuwen: /* Thunderbird security module */

2013-04-14T20:13:35Z

Thunderbird security module

← Older revision		Revision as of 20:13, 14 April 2013
Line 428:		Line 428:

	One difficulty is that the certificate is not bound to an email address so the email client tells you sth like it's validly signed but no idea if the certificate owner corresponds to the sender email address.		One difficulty is that the certificate is not bound to an email address so the email client tells you sth like it's validly signed but no idea if the certificate owner corresponds to the sender email address.
			====Chrome/Chromium security module====
			See https://code.google.com/p/eid-mw/wiki/ChromeLinux
			apt-get install libnss3-tools
			cd # be in your homedir
			modutil -dbdir sql:.pki/nssdb/ -add "Belgium eID" -libfile /usr/lib/libbeidpkcs11.so
			Check if the library was successfully added
			modutil -dbdir sql:.pki/nssdb/ -list

	====Signing in OpenOffice====		====Signing in OpenOffice====

PhilippeTeuwen: /* TODO: Misc */

2012-11-26T22:01:59Z

TODO: Misc

← Older revision		Revision as of 22:01, 26 November 2012
Line 1,289:		Line 1,289:
	* http://www.linux.com/feature/131527		* http://www.linux.com/feature/131527
	* a [https://code.google.com/p/eid-javascript-lib/ JavaScript file] to be used with the applet from the eID middleware, making it easier to retrieve data out (and format the data) of eID- and SIS cards using the applet from the eID middleware.		* a [https://code.google.com/p/eid-javascript-lib/ JavaScript file] to be used with the applet from the eID middleware, making it easier to retrieve data out (and format the data) of eID- and SIS cards using the applet from the eID middleware.
			* http://doc.ubuntu-fr.org/tutoriel/utiliser_carte_identite_electronique_belge

PhilippeTeuwen: /* How? */

2012-08-24T19:39:42Z

How?

← Older revision		Revision as of 19:39, 24 August 2012
Line 190:		Line 190:
	** The new instructions suppressed annexes 10, 10bis & 11 amongst other things, leaving only annex 3.		** The new instructions suppressed annexes 10, 10bis & 11 amongst other things, leaving only annex 3.
	** If you refuse your certificates while ordering your card you will not have any usage certificate while I wanted to have anyway the authentication certificate.		** If you refuse your certificates while ordering your card you will not have any usage certificate while I wanted to have anyway the authentication certificate.
	** To get the municipality understanding what you want, the best is probably to refer to the instructions of the latest [http://www.ibz.rrn.fgov.be/fileadmin/user_upload/CI/eID/3%20Instructions/fr/30062010/IG_POPEID_IST_010710.pdf instructions (pdf 01/06/2010)]:		** To get the municipality understanding what you want, the best is probably to refer to the instructions of the latest [http://www.ibz.rrn.fgov.be/fileadmin/user_upload/CI/eID/3%20Instructions/fr/30062010/IG_POPEID_IST_010710.pdf instructions (pdf 01/06/2010)]
			** '''UPDATE''' new version of the instructions is [http://www.ibz.rrn.fgov.be/fileadmin/user_upload/CI/eID/3%20Instructions/fr/20120810/20120810-instructions-generales-eid.pdf here (pdf 10/08/2012)] but contains the same text in ''6.3 Activation de la carte - cas particuliers''
	Instructions générales relatives aux cartes d’identité électroniques de Belges		Instructions générales relatives aux cartes d’identité électroniques de Belges
	Version du 1er juillet 2010		Version du 1er juillet 2010

PhilippeTeuwen: /* Exploring with jcshell */

2012-07-31T10:09:02Z

Exploring with jcshell

← Older revision		Revision as of 10:09, 31 July 2012
Line 1,096:		Line 1,096:

	Trying GP211 AID:		Trying GP211 AID:
			<br>Note that it works on a card from 2010 but on older cards there is no card manager accessible with that AID.
	<pre>		<pre>
	$ jcshell		$ jcshell

PhilippeTeuwen: /* Linux: to be sorted... */

2012-07-31T09:51:54Z

Linux: to be sorted...

@@ Line 1,092: / Line 1,092: @@
 <br>Note that the first PIN prompt doesn't matter, you'll get prompted directly by the libbeidpkcs11 middleware.
 <br>Note that for repetitive Authentication signings (even after close/reopen cryptonit) it doesn't prompt me anymore for the next signatures, but well if I want to use the non-repudiation one.
 ==Linux: TODO==

PhilippeTeuwen: /* Signing in OpenOffice */

2012-07-23T18:53:42Z

Signing in OpenOffice

← Older revision		Revision as of 18:53, 23 July 2012
Line 435:		Line 435:

	This works also with the legal "signature" certificate		This works also with the legal "signature" certificate
			====Signing in LibreOffice====
			[http://test.eid.belgium.be/faq/faq_fr.htm#Comment_signer_un_document_dans_LibreOffice_.3F Official instructions (in French)]

	====Signing in Acrobat Reader====		====Signing in Acrobat Reader====