Eid (on OpenBSD/arm64)
Introductiory
I am using OpenBSD on Mac Mini Pro M2 model, so there are a litle bit specific features which are not missing on an amd64 arhitecture (amd64 has a web-eid package, but not arm64).
I use pkg_add due to expensive electricity, but occasionally happen to find that some packages are absent on arm64.
In that case I use ports system while being concessed that compiled packages can conflict with packaged ones.
While this is not recommended it is the only way to get a necessary program.
Getting support of Estonian ID card
- At first add the qdigidoc4.
This theoretically allows to view and sign documents and change PIN1, PIN2.
pkg_add qdigidoc4
This automatically adds pcscd-daemon.
pcscd-daemon mediates You the USB-card reader with an ID card and eid software.
If You run qdigidoc4 first time, it complains by missing files.
On running second time it find already copied files but not yet cannot read IDcard.
Enable and start pcscd daemon and on a running system Your ID card is recognised.
(Surprise, a month ago it did not run so fluently. Did something change?)
rcctl enable pcscd && rcctl start pcscd
Use Your qdigidoc4 program
qdigidoc4
Supported Web browsers
-
Install chromium (tested), iridium, ungoogled-chromium (both untested), firefox (support have recently dissapeared).
add access to personal info: unveil.eid
-
As there are no compiled packages, do shalt compile itself:
cd /usr/ports/security/web-eid-app && make install-all
The next step is to add a Estonian ID card extension to Your browser.
-
In case of firefox go to web page and click to add a
Web eID
extension.
Additionally You must enable firefox's access to some files.
Add to /etc/firefox/unveil.main file:
# web-eid-firefox
# native messaging host
/usr/local/bin r
/usr/local/bin/web-eid rx
-
In case of chrome'.
chrome extension is on the page
Like firefox, add these lines to /etc/chromium/unveil.main file:
# web-eid-chrome
# native messaging host
/usr/local/bin r
/usr/local/bin/web-eid rx
Open Your browser, go to bank www page, log in with id card method selected.