Authentication error with Belgian eID (SEC_ERROR_PKCS11_GENERAL_ERROR)

hchiper · 2021-06-24 10:49

Hi,

I am using Q4OS 3.14.2-n1 with Plasma 5.14.5 and Firefox 89.0.2.
When I try to authenticate on official Belgian sites with a Vasco Digipass 905 card reader, I get this error message:

Échec de la connexion sécurisée
Une erreur est survenue pendant une connexion à certif.iamfas.belgium.be. Un module PKCS #11 a renvoyé CKR_GENERAL_ERROR, indiquant qu’une erreur irrécupérable est survenue.
Code d’erreur : SEC_ERROR_PKCS11_GENERAL_ERROR
La page que vous essayez de consulter ne peut pas être affichée car l’authenticité des données reçues ne peut être vérifiée.
Veuillez contacter les propriétaires du site web pour les informer de ce problème.

Note that I can read the eID content using eid-viewer. Only the authentication on official websites fails

I have been in contact for several days with the official Belgian support but no solution has been found.
Their conclusion is that Q4OS is not official Debian and is therefore not supported.

I just had a try on a virtual Debian 10 machine hosted by Virtualbox on a Windows 10 computer and... everything worked fine!
With a virtual Q4OS virtual machine on the same host I get the error message.

I did the same on all Linux machines:
- download eid-archive_2021.1_all_0.deb from https://eid.belgium.be
- $ sudo apt install ./eid-archive_2021.1_all_0.deb
- $ sudo apt update
- $ sudo apt install eid-mw eid-viewer
- install the "eID Belgique" plugin into Firefox

Any help or advice would be much appreciated.

Laurent

q4osteam · 2021-06-24 11:27

Do you have "opensc" package installed ?
$ sudo apt install opensc

hchiper · 2021-06-24 12:55

Thanks Q4OS Team.
No, "opensc" was not installed.
On the Debian VM, "opensc" was also not installed and the authentication was successful.
Nevertheless, I installed "opensc" on my Q4OS machine, but the same error message is still there.

q4osteam · 2021-06-24 13:24

Which way did you install Firefox on Debian and Q4OS ?

hchiper · 2021-06-24 14:51

On my main Q4OS machine, I have downloaded firefox-89.0.1.tar.bz2 from mozilla.org, unzipped to /opt/firefox.
I added a symbolic to /opt/firefox/firefox (executable) into /usr/bin and a shortcut into Plasma start menu.
Since that moment, Firefox has updated itself to 89.0.2

On my two VM, I am not sure (long time ago):
- Debian 10 VM (with auth success): FF was probably installed along with Debian itself; it is firefox-esr-68.2
- Q4OS VM (with auth error): FF was probably installed from the software center; it is firefox-esr-78.11

Debian VM is 10.2 version.

Last edited by hchiper (2021-06-24 14:52)

hchiper · 2021-06-25 07:10

I have now uninstalled that latest version of Firefox and installed the esr version instead:

$ sudo apt install firefox-esr

It is version 78.11.0esr (64 bits). The error is still there.

Q4OS Forum

#1 2021-06-24 10:49

Authentication error with Belgian eID (SEC_ERROR_PKCS11_GENERAL_ERROR)

#2 2021-06-24 11:27

Re: Authentication error with Belgian eID (SEC_ERROR_PKCS11_GENERAL_ERROR)

#3 2021-06-24 12:55

Re: Authentication error with Belgian eID (SEC_ERROR_PKCS11_GENERAL_ERROR)

#4 2021-06-24 13:24

Re: Authentication error with Belgian eID (SEC_ERROR_PKCS11_GENERAL_ERROR)

#5 2021-06-24 14:51

Re: Authentication error with Belgian eID (SEC_ERROR_PKCS11_GENERAL_ERROR)

#6 2021-06-25 07:10

Re: Authentication error with Belgian eID (SEC_ERROR_PKCS11_GENERAL_ERROR)

Board footer