[Bug 593561] New: irisbox fails, eID-belgium 2.6 is now unsupported, upgrade to 3.5.x is recommended
http://bugzilla.novell.com/show_bug.cgi?id=593561 http://bugzilla.novell.com/show_bug.cgi?id=593561#c0 Summary: irisbox fails, eID-belgium 2.6 is now unsupported, upgrade to 3.5.x is recommended Classification: openSUSE Product: openSUSE 11.2 Version: Final Platform: x86-64 OS/Version: openSUSE 11.2 Status: NEW Severity: Normal Priority: P5 - None Component: Other AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: novell@lietar.eu QAContact: qa@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.2) Gecko/20100317 SUSE/3.6.2-1.2 Firefox/3.6.2 The page http://eid.belgium.be/fr/ states that the version 2.6 of the eid middleware is not supported as from 01/01/2010. In my config (FF3.6, ...), the page http://irisbox.irisnet.be/vip/portal/intro_fr.htm returns that the needed software to read the card was not found. I don't know to what point one is related with the other. I am able to access my ID card through eIDconfig-belgium. Reproducible: Always Steps to Reproduce: 1. 2. 3. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=593561 http://bugzilla.novell.com/show_bug.cgi?id=593561#c yang xiaoyu <xyyang@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |xyyang@novell.com AssignedTo|bnc-team-screening@forge.pr |sbrabec@novell.com |ovo.novell.com | -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=593561 http://bugzilla.novell.com/show_bug.cgi?id=593561#c1 Jean Cayron <jean.cayron@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jean.cayron@gmail.com --- Comment #1 from Jean Cayron <jean.cayron@gmail.com> 2010-06-29 11:51:27 UTC --- Yes please, update the version, also for the upcoming oS 11.3 Code is there: http://code.google.com/p/eid-mw/ -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=593561 http://bugzilla.novell.com/show_bug.cgi?id=593561#c2 Stanislav Brabec <sbrabec@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |novell@lietar.eu --- Comment #2 from Stanislav Brabec <sbrabec@novell.com> 2010-06-30 19:56:23 CEST --- I just succeeded with compilation of the source code from comment #1, r384 from svn and I'll submit it soon to the OBS. But the package looks different from the previous: - There are different binaries (just beid-askpin, more seem to appear in the current version, but it does not compile yet). - There are some different libraries. - There are no bundled certificates. That is why I guess that the package will require some customization (very probably pre-configuration and installation of certificates). I don't have access to eID and I don't speak French. Can you tell me where should I get up-to-date certificates? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=593561 http://bugzilla.novell.com/show_bug.cgi?id=593561#c3 Patrick Smart <novell@lietar.eu> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW InfoProvider|novell@lietar.eu | --- Comment #3 from Patrick Smart <novell@lietar.eu> 2010-06-30 22:20:23 UTC --- I suppose this should provide you with the needed info: http://repository.eid.belgium.be/EN/Index.htm -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=593561 https://bugzilla.novell.com/show_bug.cgi?id=593561#c4 --- Comment #4 from Jean Cayron <jean.cayron@gmail.com> 2010-12-13 21:44:42 UTC --- Any news here? The version shipped with oS starts to be very old. Oo and Firefox are not supported anymore... There are the contacts: http://eid.belgium.be/fr/Contact/ and the project's home: http://code.google.com/p/eid-mw/ -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=593561 https://bugzilla.novell.com/show_bug.cgi?id=593561#c5 Stanislav Brabec <sbrabec@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium Status|NEW |ASSIGNED --- Comment #5 from Stanislav Brabec <sbrabec@novell.com> 2010-12-14 13:56:01 CET --- I have a preliminary package of svn version 634 that compiled in 11.3. But I packaging still needs update (use correct directories, package certificates etc.). It is available here: https://build.opensuse.org/package/show?package=eID-belgium&project=home%3Asbrabec%3Abranches%3Asecurity http://download.opensuse.org/repositories/home:/sbrabec:/branches:/security/... -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=593561 https://bugzilla.novell.com/show_bug.cgi?id=593561#c6 Stanislav Brabec <sbrabec@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO InfoProvider| |fcrozat@novell.com --- Comment #6 from Stanislav Brabec <sbrabec@novell.com> 2011-01-21 17:40:57 CET --- Frederic, could you test the new eID-belgium snapshot? I have absolutely no idea, whether the browser plugin works, whether libbeidpkcs11 is an pcsc-lite module and whether some certificates needs to be installed. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=593561 https://bugzilla.novell.com/show_bug.cgi?id=593561#c7 Frederic Crozat <fcrozat@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |ASSIGNED CC| |fcrozat@novell.com InfoProvider|fcrozat@novell.com | --- Comment #7 from Frederic Crozat <fcrozat@novell.com> 2011-01-21 16:50:45 UTC --- I don't live in Belgium but in France, so I won't be able to test it :( -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=593561 https://bugzilla.novell.com/show_bug.cgi?id=593561#c8 Stanislav Brabec <sbrabec@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO InfoProvider| |pascal.bleser@opensuse.org --- Comment #8 from Stanislav Brabec <sbrabec@novell.com> 2011-01-24 16:21:03 CET --- Sorry Frederic, I wanted to ask Pascal Bleser. Could you test my new eID-belgium (in 11.3 or Factory)? See comment 6. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=593561 https://bugzilla.novell.com/show_bug.cgi?id=593561#c9 --- Comment #9 from Jean Cayron <jean.cayron@gmail.com> 2011-04-13 09:49:36 UTC --- Stanislas, As Pascal does not seem to have tested it, do you want me to test it on 11.4? There is no package for 11.4, should I use the factory one? Can I install the package even as it status is on broken? What parts should I test especially? I can first see if it reads my ID card and if it works in Firefox. It becomes urgent since there's no more package for it in OSS and that the fiscal declaration is for June. If it doesn't work, I'll have to use a live CD with Ubuntu or Fedora... ;-) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=593561 https://bugzilla.novell.com/show_bug.cgi?id=593561#c10 Stanislav Brabec <sbrabec@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- InfoProvider|pascal.bleser@opensuse.org |jean.cayron@gmail.com --- Comment #10 from Stanislav Brabec <sbrabec@novell.com> 2011-04-13 14:34:55 CEST --- Yes, your input would be welcome. I have no way to test it, I don't know details about certificates. 11.4 package does not exist - I did not port the old version to the new wxWidgets packages intentionally. Factory one is the old version and most probably does not work. I will build the package mentioned above (comment 5) for 11.4. I also can try to upgrade it to the lastest upstream snapshot. It will appear here: http://download.opensuse.org/repositories/home:/sbrabec:/branches:/security/... I am afraid that the package may be incomplete and may require to install additional certificates, files or so. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=593561 https://bugzilla.novell.com/show_bug.cgi?id=593561#c11 --- Comment #11 from Jean Cayron <jean.cayron@gmail.com> 2011-04-15 06:56:08 UTC --- I've tested the package. The install goes without any problem. First problem: the package contains only the libs and not the gui "viewer". Nevertheless, it should be usable in Firefox. To make it work in Firefox, you've got to install an addon: https://addons.mozilla.org/fr/firefox/addon/belgium-eid/ but it still didn't work. I think, I missed an aditional step taht is described in the install manual (as showed here: https://static.addons.mozilla.net/img/uploads/previews/full/39/39333.png?mod...) Informations about the certificates is also available here: http://repository.eid.belgium.be/EN/Index.htm I'll try it and will give you the result. I'll test also in LibreOffice. But one major thing missing is the viewer GUI. Sorry not to be able to help you more, I'm not a technician. Nevertheless, I took also contact with the helpdesk of the service developping that eid. If we got stucked, I'll ask them their help (they use to provide an openSUSE version but they don't anymore). -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=593561 https://bugzilla.novell.com/show_bug.cgi?id=593561#c12 Jean Cayron <jean.cayron@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |ASSIGNED InfoProvider|jean.cayron@gmail.com | --- Comment #12 from Jean Cayron <jean.cayron@gmail.com> 2011-04-15 15:13:20 UTC --- Even with all the certificates installed in FF as secribred in http://eid.belgium.be/fr/binaries/Firefox%20-%20FR_tcm146-99089.pdf , it gives you an error when I try to connect from https://ccff02.minfin.fgov.be/CCFF_Authentication/getFormLogin.do?supportedMethods=citizenToken,eID&authMode=1&forwardContext=/portal/auth/portal/MyMinfinPortal/datasanddocs/personal Échec de la connexion sécurisée Une erreur est survenue pendant une connexion à ccff02.minfin.fgov.be. La renégociation n'est pas autorisée sur cette interface de connexion SSL. (Code d'erreur : ssl_error_renegotiation_not_allowed) I tried as well in LibreOffice, following what's discribed in http://eid.belgium.be/fr/binaries/eID_LIN_OpenOffice_FR_tcm146-22459.pdf When I want to sign the document, it doesn't propose any certificate. In fact, if I watch the light on de card reader it blinks allways the same, everything occurs as there was no reading on the card (as it used to with old versions). I wonder if the problem is not that the driver isn't in your package installed. Are there other modules in the sources? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=593561 https://bugzilla.novell.com/show_bug.cgi?id=593561#c13 --- Comment #13 from Jean Cayron <jean.cayron@gmail.com> 2011-07-18 11:08:53 UTC --- I think I found a good solution. There is an unofficial viewer for the belgian eid that works on openSUSE. The packages are made for Fedora but they work in oS except that there is a problem in the dependencies. It's a problem with the name of the dependencies, not with its content that is provided by openSUSE. It looks for the package 'ccid' and it is called in openSUSE 'pcsc-ccid'. See here in How to install these two packages: 32bit: Run these commands on OpenSUSE 11.x: sudo zypper install pcsc-ccid java-1_6_0-openjdk wget http://eid-viewer.googlecode.com/files/eid-viewer-4.0.0-0.52.el5.i386.rpm wget http://eid-mw.googlecode.com/files/eid-mw-4.0.0-0.925.el5.i386.rpm sudo rpm -i --nodeps eid-mw-4.0.0-0.925.el5.i386.rpm eid-viewer-4.0.0-0.52.el5.i386.rpm 64bit: Run these commands on OpenSUSE 11.x: sudo zypper install pcsc-ccid java-1_6_0-openjdk wget http://eid-viewer.googlecode.com/files/eid-viewer-4.0.0-0.52.el5.x86_64.rpm wget http://eid-mw.googlecode.com/files/eid-mw-4.0.0-0.925.el5.x86_64.rpm sudo rpm -i --nodeps eid-mw-4.0.0-0.925.el5.x86_64.rpm eid-viewer-4.0.0-0.52.el5.x86_64.rpm -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=593561 https://bugzilla.novell.com/show_bug.cgi?id=593561#c14 --- Comment #14 from Jean Cayron <jean.cayron@gmail.com> 2011-07-18 11:15:17 UTC --- (sorry I hit "commit" by mistake) It would be nice to have these two packages available on 12.1, at least, with the right dependecies. The code are there: - http://code.google.com/p/eid-viewer/source/checkout - http://code.google.com/p/eid-mw/source/checkout For the certificates, you could check in the Fedora packages if there are others than in the source. I'm ready to test them if you can build it. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=593561 https://bugzilla.novell.com/show_bug.cgi?id=593561#c15 --- Comment #15 from Patrick Smart <novell@lietar.eu> 2012-04-09 16:20:09 UTC --- I tried the instructions above in 12.1. but the card reader doesn't seem to be detected by eid-viewer. It is listed in lsusb. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=593561 https://bugzilla.novell.com/show_bug.cgi?id=593561#c16 --- Comment #16 from Jean Cayron <jean.cayron@gmail.com> 2012-04-12 21:25:56 UTC --- Check in Yast > System services (Running Level) if pcscd is running. I had also to install the right drivers (to be sure: all the ones that start with pcsc : pcsc-lite/ccid...) If it still doesn't work try to start the OS with the reader already plugged-in. It still works for me (I used it today). To make it work in FF you have to open eid-viewer first, read the id card and then to open Firefox. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com