In the account security settings, click on the last button Security Devices. Select both options and hit OK.Īlso close the Certificate Manager by hitting OK once more. There select Import to import the CA we just exported (use the pem file).Ī window should appear where you can select to trust the CA to idenitfy websites and e-mail users. To import the certificate, select Manage Certificates. In Thunderbird, go to Preferences > Account Settings and select Security for an account. $ openssl x509 -inform DER -in ca.der > ca.pem $ pkcs11-tool -login -read-object -id 06 -type cert -output-file ca.der The CA is ID 06 in my case (and I suppose this will be the case on all cards, but didn't check :)).Įxport the root CA from your card and convert it to a pem: Subject: DN: C=BE, CN=Citizen CA/serialNumber=201510 Subject: DN: C=BE, CN=Luc Stroobant (Signature), SN=Stroobant, GN=Luc/serialNumber=XXXXXXXXXXXX Subject: DN: C=BE, CN=Luc Stroobant (Authentication), SN=Stroobant, GN=Luc/serialNumber=XXXXXXXXXXXXĪccess: always authenticate, sensitive, always sensitive, never extractable, local List the objects on your smartcard to find the CA object (you'll be prompted for the eID pin for every pkcs11-tool command here):Īccess: sensitive, always sensitive, never extractable, local The most secure way to get it, is probably to export it from your eID. I tried to google for a download, but couldn't find a correct and up to date version. You have to trust the root CA from Belgium to be able to sign and check signatures. Import the Belgium root CA into Thunderbird To use your Belgian eID in Thunderbird, you have to add some configuration. LibreOffice is using the Thunderbird Security Modules and Devices manager. Your eID should be in the smartcard reader while configuring and you should know your PIN. I suppose you already have the eID middleware installed, a working smartcard reader and opensc installed.
#SIGN PDF IN LINUX HOW TO#
It took me a while to figure out how to get it working, so I'll try to glue all parts together in this blog post.
#SIGN PDF IN LINUX MAC#
Or information on how to sign a PDF with eID on Windows or Mac with Adobe reader, but not on Linux. Mainly on how to use LibreOffice to sign a document, but not on how to use your Belgian eID there.
when I started looking for information on how to do that on Linux, I could only find partial info. In Belgium we have the possibility to legally sign documents with a certificate stored on our eID (smartcard). With the current Covid-19 lockdown, more and more transactions are getting handled remote.
0 kommentar(er)
