Ubuntu and Estonian ID cards

Note

This is obsolete. See instructions at http://installer.id.ee

My personal summary

Sources used

• ideelabor.ee:

  • UNIX ja ID-kaart

  • OpenSC paigaldamine UNIXi laadsetel süsteemidel

  • OpenSC ja Ubuntu (Debian) GNU/Linux

Install OpenSC and related packages

# apt-get install opensc pcscd libccid

Edit file /etc/opensc/opensc.conf and change the values for 3 parameters:

try_emulation_first = yes;
lock_login = false;
reader_drivers = pcsc, ctapi;

After editing opensc.conf you need to restart the daemon:

# /etc/init.d/pcscd restart
# service pcscd restart

Check whether OpenSC sees your card reader:

# opensc-tool --list-readers

The output should be something like:

Readers known about:
Nr.   Driver   Name
0     pcsc     OmniKey CardMan 1021 00 00

Insert an ID card into the reader and try:

# pkcs15-tool --list-certificates

The output should be something like:

X.509 Certificate [Isikutuvastus]
        Flags    : 0
        Authority: no
        Path     : 3F00EEEEAACE
        ID       : 01

X.509 Certificate [Allkirjastamine]
        Flags    : 0
        Authority: no
        Path     : 3F00EEEEDDCE
        ID       : 02

Install root certificates

Start Firefox and browse to the following page:

https://ideelabor.ee/opensource/wiki/IdKaardiTarkvara/VeebisAutentimineMozillaga

Configure PKCS # 11 Security Device

In Firefox, choose Edit / Preferences / Advanced / Security Devices.

Click “Load” to add a new module.

Choose /usr/lib/onepin-opensc-pkcs11.so as module filename.