Every country must make sure its citizens have secure way of identifying online and creating qualified digital signatures Estonia is a country that has managed to build digital society with everything in right place and extremely high digital eID usage so nobody is left behind. When COVID-19 virus hit then Read more…
After upgrading to new computer with Ubuntu 20.04 I managed to see such error “1 signature is unknown!”. SignatureXAdES_LTA.cpp:198 Signature validationSignatureXAdES_B.cpp:738 Unable to verify signing certificateX509CertStore.cpp:351 unable to get local issuer certificate:0OCSP.cpp:308 Certificate status: unknown Issue happens because openssl version 1.1.1f that is included in Ubuntu 20.04 LTS https://github.com/open-eid/libdigidocpp/issues/341 Building Read more…
Root CA certificates need to be added to your local trust list when working with PKI. We will examine how to add root CA certificate and optionally some intermediate certificates to the trust store. Quick solution First step of importing root certificate in Ubuntu is to make sure it is Read more…
Serbian ID card system has 5 CA certificates that need to be imported to your Apache2 configuration. All of these 5 CA certificates can be downloaded from http://ca.mup.gov.rs/sertifikati-lat.html. For some reason this site does not support https. This poses security issue as you want to be sure that the CA Read more…
Portugal national ID card certification chain is quite interesting and complex. There are 2 root certificates. ECRaizEstado.crt is signed by Baltimore CyberTrust Root, that can be downloaded from https://www.digicert.com/CACerts/BaltimoreCyberTrustRoot.crt. Serial Number: 120050507 (0x727d34b)Issuer: C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust RootValidityNot Before: Sep 9 17:40:12 2015 GMTNot After : Sep 30 17:39:11 Read more…
Lithuania ID card identification setup with Apache2 is really simple, there is one root certificate and 2+2 card signing CA certificates. there are 2 sets of card signing certificates with different validity times. It is different from many other in a sense that CRL only exists for root certificate and Read more…
Why eID client certificate authentication? This the main scenario where national ID card users that have smart card chip can be identified in the website. Certificates stored on ID cards can be used to identify people online. In simplest terms the webserver tells browser what kind of certificates it accepts Read more…