eIDAS standard can have multiple digital signature profiles. These mean how much proof is embedded into the signature metadata for later validation. Following table contains summary of supported eIDAS digital signature profiles XAdES CAdES PAdES STANDARD BASELINE STANDARD BASELINE STANDARD BASELINE XAdES-BES XAdES-B CAdES-BES CAdES-B PAdES-BES PAdES-B XAdES-EPES CAdES-EPES PAdES-EPES Read more…
Technology Here is listed some of the tools, frameworks and technologies we are working to achieve secure user identification and creating digital signatures. Apache2 web server which has great built in support for Client Certificate Authentication. This means that it will request end user to present certificate from his ID Read more…
People are often confusing eID related topics that are not one and the same. Not knowing all the facts makes them scared of their privacy. Lets clarify some questions that I have seen people to be misunderstanding. Using national eID cards or others solutions do not have significant differences from Read more…
ID cards are Smart cards with a chip or NFC. They can be connected to computers or or other devices using a reader with special apps and drivers. Governments are usually providing these drivers, aka “eID Middleware“, to work with national ID cards. Browsers, where the web signing happens, can Read more…
If you found this page then chances are that you need to replace your DigiDocService integration immediately with more modern solutions. Unfortunately it is not most trivial task and might cost you decent amount of money and headache. Most companies with expertise in the field are big and well fed Read more…
Every country must make sure its citizens have secure way of identifying online and creating qualified digital signatures Estonia is a country that has managed to build digital society with everything in right place and extremely high digital eID usage so nobody is left behind. When COVID-19 virus hit then Read more…
After upgrading to new computer with Ubuntu 20.04 I managed to see such error “1 signature is unknown!”. SignatureXAdES_LTA.cpp:198 Signature validationSignatureXAdES_B.cpp:738 Unable to verify signing certificateX509CertStore.cpp:351 unable to get local issuer certificate:0OCSP.cpp:308 Certificate status: unknown Issue happens because openssl version 1.1.1f that is included in Ubuntu 20.04 LTS https://github.com/open-eid/libdigidocpp/issues/341 Building Read more…
Root CA certificates need to be added to your local trust list when working with PKI. We will examine how to add root CA certificate and optionally some intermediate certificates to the trust store. Quick solution First step of importing root certificate in Ubuntu is to make sure it is Read more…
Serbian ID card system has 5 CA certificates that need to be imported to your Apache2 configuration. All of these 5 CA certificates can be downloaded from http://ca.mup.gov.rs/sertifikati-lat.html. For some reason this site does not support https. This poses security issue as you want to be sure that the CA Read more…
Portugal national ID card certification chain is quite interesting and complex. There are 2 root certificates. ECRaizEstado.crt is signed by Baltimore CyberTrust Root, that can be downloaded from https://www.digicert.com/CACerts/BaltimoreCyberTrustRoot.crt. Serial Number: 120050507 (0x727d34b)Issuer: C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust RootValidityNot Before: Sep 9 17:40:12 2015 GMTNot After : Sep 30 17:39:11 Read more…
