is a smartcard used for eID - electronic identification
smart cards
Smart cards can store and generate cryptographic keys in a way that makes it difficult to extract or copy them by malware or adversaries.
Thus, smart cards are good to store keys for authentication and digital signatures.
Browser will read eID the card, sign TLS handshake and and send to server.
Server verifies signature and certificate and makes required info available to your application.
The PKC11 wrapper seems to require direct access to the card reader.
zeer interessante info
{ #_IN_ZOTERO }
https://blog.pinterjann.is/smartcard-eap-tls-wifi-linux.html
https://wiki.yobi.be/index.php/Belgian_eID
https://groups.google.com/g/eid-middleware-dev/c/N9UJ9IJQUPc/m/tzynwEk-BAAJ
TODO : verwerken van deze info
Belgian eID card specs
smart card using ISO/IEC 7810 standard using the ID-1 size format, similar to credit cards.
They conform to ISO/IEC 7816 and have a 3-line machine-readable strip on the back starting with IDBEL.
zie : https://en.wikipedia.org/wiki/Belgian_identity_card
2 two certificates on the eID
- The authentication certificate is used to log into web apps, such as TaxOnWeb.
- The signature certificate is used to electronically sign documents.
Both certificates are granted under a Citizen CA or Foreigner CA/ Belgium Root CA.
installatie e-card reader
een hoop gedoe
install-BeID 2022
install-BeID 2022 - 02
[[libraries needed for eID – 1.]]
install-BeID 2022 - 03 - vbx