Web eID

Resources (Web eID)

Web eID

id.ee » Web eID

Web eID project

Resources (Open eID)

Open eID project

The Web eID is a suite of browser extension, native application, and JavaScript library that provides a way to perform cryptographic operations (authentication, signing) using smart cards on the Web. One of the purposes of the project is to replace the legacy architecture of the Open eID project .

Installation

Overlay

Gentoo is not officially supported by the Web eID project , and there are no packages in the official Gentoo repository. However, there is an official community-driven overlay in the Open eID project. To enable the overlay, first it is necessary to install dev-vcs/git and app-eselect/eselect-repository:

root #emerge --ask dev-vcs/git app-eselect/eselect-repository

The overlay can then be enabled as follows:

root #eselect repository add esteid git https://github.com/open-eid/gentoo.git

And the Gentoo ebuild repository needs to updated:

root #emerge --sync

As all packages in the overlay are masked with the amd64 keyword, they need to be unmasked (see /etc/portage/package.accept_keywords for more information):

FILE /etc/portage/package.accept_keywords

*/*::esteid ~amd64

Package

Note
This section assumes that the overlay described above is enabled.

Web eID

To install the Web eID package, run the following command:

root #emerge --ask www-plugins/web-eid

Important
The compilation of the package may fail due to the lack of Qt5Svg. In this case, downgrade the dev-qt/qtsvg package:

root #emerge --ask --oneshot dev-qt/qtsvg:5

DigiDoc4

Portage package

Important
As of 2025-01-17, qdigidoc4 compiles but crashes at runtime due to libdigidocpp on musl-based systems, musl libc users should use the Flatpak package as a workaround.

As of 2024-05-07, dev-cpp/libcutl incorrectly defines dependencies, so the dependency needs to be installed manually:

root #emerge --ask dev-libs/boost

As of 2024-05-07, dev-libs/libdigidocpp requires the following patch on a musl-based system (the patch will force the library to compile, but it will still crash at runtime):

FILE /etc/portage/patches/dev-libs/libdigidocpp-3.16.0/ctime.patch

--- a/src/util/File.h
+++ b/src/util/File.h
@@ -22,6 +22,7 @@
 #include "../Exception.h"

 #include <stack>
+#include <ctime>

 namespace digidoc
 {

To install DigiDoc4, run the following command:

root #emerge --ask app-crypt/qdigidoc4

Flatpak package

Warning
Despite the name of the package, it is maintained by a third party . Audit the manifest before installing.

Install DigiDoc4 using Flatpak:

user $flatpak remote-add --user --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo

user $flatpak install --user flathub ee.ria.qdigidoc4

To run DigiDoc4 use the following command:

user $flatpak run --user ee.ria.qdigidoc4

Important
The package comes with the libpcsclite.so.1 library, which will communicate with the pcscd daemon (which runs outside of Flatpak, on the host system) via its socket . As stated by the author of PCSC-Lite, PCSC-Lite was not designed with the virtual environment in mind . Thus, libpcsclite.so.1 in the package and the daemon on the host system may be compiled with different versions of the communication protocol, and communication between them will not be possible. This problem can be tracked in the system log on the host system:

Jan 16 20:21:22 akemi ../pcsc-lite-2.3.0/src/winscard_svc.c:404:ContextThread() Communication protocol mismatch!
Jan 16 20:21:22 akemi ../pcsc-lite-2.3.0/src/winscard_svc.c:406:ContextThread() Client protocol is 4:4
Jan 16 20:21:22 akemi ../pcsc-lite-2.3.0/src/winscard_svc.c:408:ContextThread() Server protocol is 4:5

To resolve this issue, the PCSC-Lite version on the host system needs to be downgraded. See bug #946163. The version used in the flatpak package can be found in this file. Version matching does not have to be one-to-one, as different versions of PCSC-Lite may use the same protocol. The downgrade can be done by masking:

FILE /etc/portage/package.mask

>sys-apps/pcsc-lite-2.0.1-r1

root #emerge --ask sys-apps/pcsc-lite

Smart card reader driver

Follow the instructions provided here.

Testing

The official website has a button to test authentication and signing.

See also

• Electronic identification — the core part of e-government implementation, providing a way to identify citizens and organizations.