TaxOnWeb, OSX and Chrome

Aug 2015 - working

• eID viewer leads OSX to try to install Java 6, which is old and a security risk
• Sometimes need to reboot (perhaps just login again) to enable Chrome to find my card reader and card

June 2013: working

I believe that the Belgian government website went heavily with Microsoft for its electronic ID cards, and that means Belgian citizens and residents that are not Microsoft slaves have had a much tougher time using eGovernment.

And so it was for several years, but the newest version of the middleware does work with Chrome for OSX (Mountain Lion) and Tax-On-Web can be accessed.

TaxOnWeb with Ubuntu and Chrome

March 2016 / Ubuntu 15.10 - partially working

Needed to use

modutil -dbdir sql:.pki/nssdb/ -add "Belgium eID" -libfile /usr/lib/x86_64-linux-gnu/libbeidpkcs11.so.0

May 2015 - sometimes works

Ubuntu 15.04

I needed to delete all of .pki/nssb/* and use 

modutil -dbdir sql:.pki/nssdb/ -add "Belgium eID" -libfile /usr/lib/x86_64-linux-gnu/libbeidpkcs11.so

to get it working.

April 2014 - Working :-)

Ubuntu 14.10

Smartcard reader - HID Global 1021 (no longer commercialised)

Bud-gets card does not work for me.

Following the instructions from the Wiki, namely:

modutil -dbdir sql:.pki/nssdb/ -add "Belgium eID" -libfile /usr/lib/libbeidpkcs11.so
the driver was loaded and could be detected via

modutil -dbdir sql:.pki/nssdb/ -list
Card recognised by pcsc_scan, and by the eID viewer

Chrome - works, but not always ;-)

My experience is that Chrome can connect if I log out and login, but does not always work once I have been logged into my Linux account for a while (and simply restarting Chrome is not sufficient).  The error I receive on the Test site is:

Error code: ERR_SSL_PROTOCOL_ERROR

Notes
An error message as below simply means that the directory .pki/nssdb does not exist and needs to be created manually.

modutil: function failed: SEC_ERROR_BAD_DATABASE: security library: bad database.

Firefox - works :-)

---

March 24 - not working

Status: #fail
Chrome 26 (beta); Ubuntu 12.10

Either

Error 107 (net::ERR_SSL_PROTOCOL_ERROR): SSL protocol error.

Or I run - based on the official Wiki:

modutil -dbdir sql:.pki/nssdb/ -add "Belgium eID" -libfile /usr/lib/libbeidpkcs11.so
modutil -dbdir sql:.pki/nssdb/ -add "Belgium eID" -libfile /usr/lib/libbeidpkcs11.so -mechanisms FRIENDLY -force

and then Chrome segfaults on launch, and can only be started again after deleting ~/.pki/nssdb

This is what I have in ~/.pki/nssdb/pkcs11.txt when it will not start:

library=/usr/lib/libbeidpkcs11.so
name=Belgium eID
NSS=slotParams={0x00000000=[slotFlags=PublicCerts rootFlags=hasRootTrust] } 

And, another error seems to be:

~$ certutil -L -d .pki/nssdb/
certutil: function failed: The certificate/key database is in an old, unsupported format.

Links

• Official BeID site (http://eid.belgium.be/nl/je_eid_gebruiken/de_eid-middleware_installeren/linux/) 
• Test installation site
• FAQ 
• Fellow blogger
• Chromium bug report

-------------------------------------------------------------------------------------------------

June 2013 - working

There are (at least) three versions of the software on the Internet:

• From the official site (dutch)- version 4.0.2 - download the ubuntu(32bit) deb and install in the usual manner

Firefox - working
The official FAQ on Firefox is farcical - in short, Tax-on-Web is not available in Firefox 4 and above because this browser does not support the SSL connection that the Belgian state acknowledges it is is using, because it is relatively insecure (this has also received press attention)!

And it's true, when you try to connect with Firefox 4+ you get an error:

Error code: ssl_error_renegotiation_not_allowed

There is a way of forcing Firefox to work with this insecure connection method - see here or here.  Taxonweb further enforces its restrictions via a user-agent sniff, so you need a switching add-on - use any Microsoft user-agent - to be permitted to pay taxes!

Then all you need to do accept the certificate and permit access to card dialogues, and enter your PIN code.

Chrome - working

1. Follow http://code.google.com/p/eid-mw/wiki/ChromeLinux
2. Install a user-agent switcher from the Chrome store, and switch to Firefox (IE does not work)

TaxOnWeb with Linux - bud-gets card reader

May 2014 - card reader is not being detected

Budgets USB card reader from FNAC not working with Linux, despite Linux being listed as a supported OS on the packaging!

The device is nominally detected by the USB bus:

$ lsusb
Bus 002 Device 014: ID 048d:1365 Integrated Technology Express, Inc. 

And in full detail

$ lsusb -s 002 -v
Bus 002 Device 002: ID 048d:1365 Integrated Technology Express, Inc.
Couldn't open device, some information will be missing
Device Descriptor:
  bLength                18
  bDescriptorType         1
  bcdUSB               2.00
  bDeviceClass            0 (Defined at Interface level)
  bDeviceSubClass         0
  bDeviceProtocol         0
  bMaxPacketSize0        64
  idVendor           0x048d Integrated Technology Express, Inc.
  idProduct          0x1365
  bcdDevice            1.00
  iManufacturer           1
  iProduct                2
  iSerial                 3
  bNumConfigurations      1
  Configuration Descriptor:
    bLength                 9
    bDescriptorType         2
    wTotalLength           93
    bNumInterfaces          1
    bConfigurationValue     1
    iConfiguration          4
    bmAttributes         0x80
      (Bus Powered)
    MaxPower              500mA
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        0
      bAlternateSetting       0
      bNumEndpoints           3
      bInterfaceClass        11 Chip/SmartCard
      bInterfaceSubClass      0
      bInterfaceProtocol      0
      iInterface              6
      ChipCard Interface Descriptor:
        bLength                54
        bDescriptorType        33
        bcdCCID              1.10  (Warning: Only accurate for version 1.0)
        nMaxSlotIndex           0
        bVoltageSupport         7  5.0V 3.0V 1.8V
        dwProtocols             3  T=0 T=1
        dwDefaultClock       3750
        dwMaxiumumClock      7500
        bNumClockSupported      0
        dwDataRate          10080 bps
        dwMaxDataRate      312500 bps
        bNumDataRatesSupp.      0
        dwMaxIFSD             254
        dwSyncProtocols  00000000
        dwMechanical     00000000
        dwFeatures       00010030
          Auto clock change
          Auto baud rate change
          TPDU level exchange
        dwMaxCCIDMsgLen       271
        bClassGetResponse      00
        bClassEnvelope         00
        wlcdLayout           none
        bPINSupport             0
        bMaxCCIDBusySlots       1
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x81  EP 1 IN
        bmAttributes            3
          Transfer Type            Interrupt
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0040  1x 64 bytes
        bInterval              16
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x02  EP 2 OUT
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval              16
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x83  EP 3 IN
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval              16

But pcsc_scan does not find anything, and thus the card cannot be found with the eID viewer, nor used with a browser.

TaxOnWeb on Ubuntu

Deprecated: See this post

Installing Belgian e-ID middleware and reader

There are (at least) three versions of the software on the Internet:

• From the official site (dutch)- version 4.0.2 - download the ubuntu(32bit) deb and install in the usual manner

Firefox - working
The official FAQ on Firefox is farcical - in short, Tax-on-Web is not available in Firefox 4 and above because this browser does not support the SSL connection that the Belgian state acknowledges it is is using, because it is relatively insecure (this has also received press attention)!

And it's true, when you try to connect with Firefox 4+ you get an error:

Error code: ssl_error_renegotiation_not_allowed

There is a way of forcing Firefox to work with this insecure connection method - see here or here.  Taxonweb further enforces its restrictions via a user-agent sniff, so you need a switching add-on - use any Microsoft user-agent - to be permitted to pay taxes!

Then all you need to do accept the certificate and permit access to card dialogues, an denter your PIN code.

Chrome - working

1. Follow http://code.google.com/p/eid-mw/wiki/ChromeLinux
2. Install a user-agent switcher from the Chrome store, and switch to Firefox (IE does not work)