You are not logged in.

#1 2021-06-24 10:49

hchiper
Member
From: Belgium
Registered: 2020-07-28
Posts: 357

Authentication error with Belgian eID (SEC_ERROR_PKCS11_GENERAL_ERROR)

Hi,


I am using Q4OS 3.14.2-n1 with Plasma 5.14.5 and Firefox 89.0.2.
When I try to authenticate on official Belgian sites with a Vasco Digipass 905 card reader, I get this error message:

Échec de la connexion sécurisée

Une erreur est survenue pendant une connexion à certif.iamfas.belgium.be. Un module PKCS #11 a renvoyé CKR_GENERAL_ERROR, indiquant qu’une erreur irrécupérable est survenue.

Code d’erreur : SEC_ERROR_PKCS11_GENERAL_ERROR

    La page que vous essayez de consulter ne peut pas être affichée car l’authenticité des données reçues ne peut être vérifiée.
    Veuillez contacter les propriétaires du site web pour les informer de ce problème.

Note that I can read the eID content using eid-viewer. Only the authentication on official websites fails

I have been in contact for several days with the official Belgian support but no solution has been found.
Their conclusion is that Q4OS is not official Debian and is therefore not supported.

I just had a try on a virtual Debian 10 machine hosted by Virtualbox on a Windows 10 computer and... everything worked fine!
With a virtual Q4OS virtual machine on the same host I get the error message.

I did the same on all Linux machines:
- download eid-archive_2021.1_all_0.deb from https://eid.belgium.be
- $ sudo apt install ./eid-archive_2021.1_all_0.deb
- $ sudo apt update
- $ sudo apt install eid-mw eid-viewer
- install the "eID Belgique" plugin into Firefox

Any help or advice would be much appreciated.


Laurent


Q4OS machines: [Samsung R519 - Pentium T4200 2.0 GHz - 4 GB RAM - 500 GB SSD] & [Sony Vaio - Pentium P6000 1.87 GHz - 8 GB RAM - 500 GB SSD]

Offline

#2 2021-06-24 11:27

q4osteam
Q4OS Team
Registered: 2015-12-06
Posts: 4,223
Website

Re: Authentication error with Belgian eID (SEC_ERROR_PKCS11_GENERAL_ERROR)

Do you have "opensc" package installed ?
$ sudo apt install opensc

Offline

#3 2021-06-24 12:55

hchiper
Member
From: Belgium
Registered: 2020-07-28
Posts: 357

Re: Authentication error with Belgian eID (SEC_ERROR_PKCS11_GENERAL_ERROR)

Thanks Q4OS Team.
No, "opensc" was not installed.
On the Debian VM, "opensc" was also not installed and the authentication was successful.
Nevertheless, I installed "opensc" on my Q4OS machine, but the same error message is still there.


Q4OS machines: [Samsung R519 - Pentium T4200 2.0 GHz - 4 GB RAM - 500 GB SSD] & [Sony Vaio - Pentium P6000 1.87 GHz - 8 GB RAM - 500 GB SSD]

Offline

#4 2021-06-24 13:24

q4osteam
Q4OS Team
Registered: 2015-12-06
Posts: 4,223
Website

Re: Authentication error with Belgian eID (SEC_ERROR_PKCS11_GENERAL_ERROR)

Which way did you install Firefox on Debian and Q4OS ?

Offline

#5 2021-06-24 14:51

hchiper
Member
From: Belgium
Registered: 2020-07-28
Posts: 357

Re: Authentication error with Belgian eID (SEC_ERROR_PKCS11_GENERAL_ERROR)

On my main Q4OS machine, I have downloaded firefox-89.0.1.tar.bz2 from mozilla.org, unzipped to /opt/firefox.
I added a symbolic to /opt/firefox/firefox (executable) into /usr/bin and a shortcut into Plasma start menu.
Since that moment, Firefox has updated itself to 89.0.2

On my two VM, I am not sure (long time ago):
- Debian 10 VM (with auth success): FF was probably installed along with Debian itself; it is firefox-esr-68.2
- Q4OS VM (with auth error): FF was probably installed from the software center; it is firefox-esr-78.11

Debian VM is 10.2 version.

Last edited by hchiper (2021-06-24 14:52)


Q4OS machines: [Samsung R519 - Pentium T4200 2.0 GHz - 4 GB RAM - 500 GB SSD] & [Sony Vaio - Pentium P6000 1.87 GHz - 8 GB RAM - 500 GB SSD]

Offline

#6 2021-06-25 07:10

hchiper
Member
From: Belgium
Registered: 2020-07-28
Posts: 357

Re: Authentication error with Belgian eID (SEC_ERROR_PKCS11_GENERAL_ERROR)

I have now uninstalled that latest version of Firefox and installed the esr version instead:

$ sudo apt install firefox-esr

It is version 78.11.0esr (64 bits). The error is still there.


Q4OS machines: [Samsung R519 - Pentium T4200 2.0 GHz - 4 GB RAM - 500 GB SSD] & [Sony Vaio - Pentium P6000 1.87 GHz - 8 GB RAM - 500 GB SSD]

Offline

Board footer

Powered by FluxBB