Posted in Firefox Hardware Linux

Belgian eID under Ubuntu 7.10

October 28, 2007 - 14 comments

I had almost forgotten that I was offered an eID card reader by our Federal Public Service FINANCE, a few months ago when I went up to their offices to get some info.

I decided to give it a try tonight.

The sticker on the back of the reader says “ACR38U-SPC-FDT (FW104)”.

Free Image Hosting at www.ImageShack.us

I first blindly tried to install some packages (beidgui to read my card info) but ran into several problems.

beid :

When running beidgui, it was not even listing the card reader in the options tab.

Running from the CLI, I was getting the following error message :
Error: can’t open /var/run/openct/status: No such file or directory

If I was starting beidgui using sudo, the card reader was listed correctly.

At some point I also got the following error in beidgui :
“Error : Wrong Root Certificate”

The card reader was also detected as another reader for a while.

I removed every packages and was about to give up when I finally found the answer that made things work out of the box at
http://doc.ubuntu-fr.org/materiel/acr38

Packages to install :

sudo apt-get install libacr38u libacr38ucontrol0 beid-tools pcscd libpcsclite-dev beidgui libbeid2 libbeidlibopensc2

After installing these, I was able to read my card under beid.

Firefox :

In order to access websites working with the eID, you need to load the PKCS#11 module.

Edit > Preferences > Advanced > Encryption > Security Devices > Load

Module name : “Belgium Identity Card PKCS#11″
Module filename : “/usr/lib/libbeidpkcs11.so.2″

Restart Firefox when done.

The card reader MUST be plugged before starting Firefox if you intend to access a website requiring access to your eID.

Interesting links :

http://users.pandora.be/mydotcom/howto/linux/ubuntubelpic.htm
https://www.mijndossier.rrn.fgov.be/

This last link is interesting and requires your eID, you can see a lot of stuff the government stores about you (driving licence, passport delivery, etc.).

I even found a mistake in my file, I’m living in an apartment and the previous tenant is listed in my family description… Our public services are not at the edge in every fields.

Comments

rapidoda » Blog Archive » Belgian eID under Ubuntu 7.10

October 29, 2007 - 14:33

[...] all the details here [...]

Abillebill

January 9, 2008 - 8:23

bonjour,

J’ai le même problème mais la liste de pkg que tu utilises ne résoud pas le problème .
J’ai soit un message d’access violation, soit un message d’erreur inconnue soit le programme plante lorsque je clic sur la puce …

je suis sous Ubuntu 7.10

Si tu as une idée je suis preneur

Sébastien Wains

January 9, 2008 - 13:11

Salut,
Je suis sous Linux Mint 4.0 et j’ai testé et j’ai également le souci.
J’ai testé différentes choses sans succès. Je conserve ça sur ma todo list et mettrai à jour l’article si j’arrive à trouver ce qui coince..

a+

blietaer

June 15, 2008 - 18:21

Thank for taking the time to write this
easy, fast and works great!

Thanx for all the belgian linux freaks…

you made the linux-web easier.

cheers
ben

Ghislain Thonon

June 15, 2008 - 22:40

Under 8.10, the packages installed with synaptic do not allow the card to be read (“card not present”)
After running
sudo apt-get install libacr38u libacr38ucontrol0 beid-tools pcscd libpcsclite-dev beidgui libbeid2 libbeidlibopensc2
everythong worked fine!
Thanks!
Ghislain

Sébastien Wains

June 16, 2008 - 0:08

Thanks for the feedback about Ubuntu 8.10 !

Geoffroy

September 8, 2008 - 23:35

Salut,

votre lecteur de carte fonctionne-t-il aussi avec votre administration communale? Je tente de faire une demande de document mais Firefox se grise et freeze (sous Ubuntu 8.04 32bits).
A tester : http://irisbox.irisnet.be/vip/portal/intro_fr.htm (bouton “vérifier votre configuration”), pour ma part il affiche toujours une absence du “Logiciel eID”
Après plusieurs tentatives, je jette l’éponge. Je me rendrai à mon administration communale pour obtenir ce document.

Sinon, tout le reste fonctionne (login mondossier, login mutuelle, signature mail).

Efhache84

September 12, 2008 - 18:46

Hello, just to inform you that now there is a new middleware…

Thanks Fedict (http://www.fedict.belgium.be/) for the speed -_-

More info : http://b-eid.com/forum/showthread.php?t=66 (thanks to François-Interdit)

Sébastien Wains

September 18, 2008 - 22:59

Geoffroy, pas encore testé, je vais essayer ça ce week-end !

Seb

September 21, 2008 - 13:15

Je ne suis pas de Bruxelles, mais j’ai quand même su aller jusqu’au moment où il me demande mon code PIN.. pas de problème pour ma part. Je suis sous Ubuntu 8.10.

Denis Štogl

November 25, 2008 - 17:00

I have Ubuntu 8.10, I install all without any problem, Firefox see my ACR38U-SPC-R when I put card in, LED blink on ACR38U but in Edit -> Preferences -> Advance -> Encryption -> Security Devices in status write “not present”, I have pin on that card… Do you now where is problem did I do something wrong
Tanks

Sébastien Wains

November 28, 2008 - 0:12

Denis,

I had the same problem as you lately, I guess something changed once again in the packages.. I’ll update the post if I can figure it out.

phiser

February 1, 2010 - 22:44

Your discription still works with Ubuntu 9.10 (Karmic Koala). I’ve tried the 64-bit version
and Firefox 3.5.7 is still happy with the libbeidpkcs11.so.2 shared object!
Thanks for sharing your thoughts!
Philippe

Sébastien Wains

February 1, 2010 - 22:50

Cool, thanks for the feedback Philippe ! :)

Leave Comment

Please consider visiting the partners below if you enjoyed this article :

If this post saved you time and money, please consider checking my Amazon wishlist.

Before submitting, some rules :
- Is your comment related to the article ?
- You're having a problem ? Have you checked Google, other howtos, docs, manpages ?
- You're still having the problem ? Have you raised log verbosity, checked traces, ran tcpdump ?
- Have you checked your configuratoin for typo ?
Unless your comment is providing additional info or respect the rules above, DON'T comment.
If you don't understand what you are doing, I urge you to read the documentation, I'm not your free Level 1 helpdesk guy.