View source for EID VPN/eID VPN

<div class="mw-parser-output">
= Ubuntu 20.04 =

<div class="mw-parser-output">
<div class="mw-parser-output">
<div class="mw-parser-output">
<div class="mw-parser-output">

<div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output">
<div class="mw-parser-output">
<div class="mw-parser-output">
<div class="mw-parser-output"><div class="mw-parser-output">
<div class="mw-parser-output"><div class="mw-parser-output">
<div class="mw-parser-output">
= Centos 7 =
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">yum install nss-tools nss-pam-ldapd esc pam_pkcs11 pam_krb5 opensc pcsc-lite-ccid authconfig authconfig-gtk krb5-libs krb5-workstation krb5-pkinit pcsc-lite pcsc-lite-libs gnutls-utils gnutls-devel openconnect</div> 
Uzinstalēt latvia-eid-middleware paku<br/> pārsaukt /opt/latvian-eid par /opt/latvian-eid.bak

Atspiest latvia-eid arhīvu un pārkopēt uz /opt direktoriju

pārliecināties, vai ir fails /opt/latvia-eid/lib/eidlv-pkcs11.so
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">ls -la /opt/latvia-eid/lib/eidlv-pkcs11.so</div> 
pārliecināties, vai ir /usr/lib64/eidlv-pkcs11.so fails, ja nav, tad izveidot symlink
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">ln -s /opt/latvia-eid/lib/eidlv-pkcs11.so /usr/lib64/eidlv-pkcs11.so</div> 
Izveidot pkcs11 moduļi
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">cp /usr/share/p11-kit/modules/opensc.module /etc/pkcs11/modules/opensc.module<br/> echo "module:/usr/lib64/eidlv-pkcs11.so" > /etc/pkcs11/modules/opensc.module</div> 
pārbaude
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">pcsc_scan</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">Possibly identified card (using /usr/share/pcsc/smartcard_list.txt):<br/> 3B DD 18 00 81 31 FE 45 90 4C 41 54 56 49 41 2D 65 49 44 90 00 8C<br/> &nbsp;&nbsp; &nbsp;Identity card (eID) Republic of Latvia<br/> &nbsp;&nbsp; &nbsp;[http://www.pmlp.gov.lv/lv/pakalpojumi/passes/eid.html http://www.pmlp.gov.lv/lv/pakalpojumi/passes/eid.html]</div> 
&nbsp;
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">p11tool --list-tokens</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">Token 2:<br/> &nbsp;&nbsp; &nbsp;URL: pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=User%20PIN%20%28LATVIA%20ID%29<br/> &nbsp;&nbsp; &nbsp;Label: User PIN (LATVIA ID)<br/> &nbsp;&nbsp; &nbsp;Type: Hardware token<br/> &nbsp;&nbsp; &nbsp;Flags: RNG, Requires login<br/> &nbsp;&nbsp; &nbsp;Manufacturer: Oberthur Technologies<br/> &nbsp;&nbsp; &nbsp;Model: PKCS#15<br/> &nbsp;&nbsp; &nbsp;Serial: 010011761431013F<br/> &nbsp;&nbsp; &nbsp;Module: /usr/lib/pkcs11/eidlv-pkcs11.so</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><br/> Token 3:<br/> &nbsp;&nbsp; &nbsp;URL: pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=Signature%20PIN%20%28LATVIA%20ID%29<br/> &nbsp;&nbsp; &nbsp;Label: Signature PIN (LATVIA ID)<br/> &nbsp;&nbsp; &nbsp;Type: Hardware token<br/> &nbsp;&nbsp; &nbsp;Flags: RNG, Requires login<br/> &nbsp;&nbsp; &nbsp;Manufacturer: Oberthur Technologies<br/> &nbsp;&nbsp; &nbsp;Model: PKCS#15<br/> &nbsp;&nbsp; &nbsp;Serial: 010011761431013F<br/> &nbsp;&nbsp; &nbsp;Module: /usr/lib/pkcs11/eidlv-pkcs11.so</div> 
&nbsp;
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">p11tool --list-all-certs</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">warning: no token URL was provided for this operation; the available tokens are:</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">pkcs11:model=p11-kit-trust;manufacturer=PKCS%2311%20Kit;serial=1;token=System%20Trust<br/> pkcs11:model=p11-kit-trust;manufacturer=PKCS%2311%20Kit;serial=1;token=Default%20Trust<br/> pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=User%20PIN%20%28LATVIA%20ID%29<br/> pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=Signature%20PIN%20%28LATVIA%20ID%29</div> 
Izmanto iegūto certifikātu
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">p11tool --list-all-certs 'pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=User%20PIN%20%28LATVIA%20ID%29'</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">Object 0:<br/> &nbsp;&nbsp; &nbsp;URL: pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=User%20PIN%20%28LATVIA%20ID%29;id=%a7%82%78%84%61%ce%53%39%0e%e2%34%45%6e%4a%01%bf%c6%ad%49%a1;object=Authentication%20certificate;type=cert<br/> &nbsp;&nbsp; &nbsp;Type: X.509 Certificate (RSA-2048)<br/> &nbsp;&nbsp; &nbsp;Expires: Sun Jun 20 05:02:52 2021<br/> &nbsp;&nbsp; &nbsp;Label: Authentication certificate<br/> &nbsp;&nbsp; &nbsp;ID: a7:82:78:84:61:ce:53:39:0e:e2:34:45:6e:4a:01:bf:c6:ad:49:a1<br/> &nbsp;</div> 
Atrast atrašanās vietu
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">find / -name "hipreport.sh"</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">/usr/libexec/openconnect/hipreport.sh</div> 
Atspiest magic.zip, kur saturā ir lvrtc root sertifikāts eid kartei un novietot ~/magic.pem
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">unzip magic.zip && mv magic.pem ~/magic.pem</div> 
Izpildīt komandu
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">sudo openconnect -v --dump-http-traffic --user="KASPARS BŪCENS" -c \<br/> "pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=User%20PIN%20%28LATVIA%20ID%29;id=%a7%82%78%84%61%ce%53%39%0e%e2%34%45%6e%4a%01%bf%c6%ad%49%a1;object=Authentication%20certificate;type=cert" \<br/> --protocol=gp \<br/> --os=win \<br/> --csd-wrapper="/usr/libexec/openconnect/hipreport.sh" \<br/> --cafile="/home/kasparsb/Documents/magic.pem" \<br/> vpn1.eveseliba.gov.lv</div> 
&nbsp;

[[:File:latvia-eid-middleware-2.0.6-1-linux-centos-6.10-x86_641.rpm|File:latvia-eid-middleware-2.0.6-1-linux-centos-6.10-x86 641.rpm]]<br/> [[:File:latvia-eid.zip|File:latvia-eid.zip]]<br/> [[:File:magic.zip|File:magic.zip]] </div> </div>
<div class="mw-parser-output"><div class="mw-parser-output">&nbsp;</div> </div> </div>

<div class="mw-parser-output">
= CentOS 8 =
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">yum install nss-tools nss-pam-ldapd esc opensc pcsc-lite-ccid authconfig krb5-libs krb5-workstation krb5-pkinit pcsc-lite pcsc-lite-libs gnutls-utils gnutls-devel openconnect</div> 
Uzinstalēt latvia-eid-middleware paku<br/> pārsaukt /opt/latvian-eid par /opt/latvian-eid.bak

Atspiest latvia-eid arhīvu un pārkopēt uz /opt direktoriju

pārliecināties, vai ir fails /opt/latvia-eid/lib/eidlv-pkcs11.so
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">ls -la /opt/latvia-eid/lib/eidlv-pkcs11.so</div> 
pārliecināties, vai ir /usr/lib64/eidlv-pkcs11.so fails, ja nav, tad izveidot symlink
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">ln -s /opt/latvia-eid/lib/eidlv-pkcs11.so /usr/lib64/eidlv-pkcs11.so</div> 
Izveidot pkcs11 moduļi
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">cp /usr/share/p11-kit/modules/opensc.module /etc/pkcs11/modules/opensc.module<br/> echo "module:/usr/lib64/eidlv-pkcs11.so" > /etc/pkcs11/modules/opensc.module</div> 
pārbaude
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">pcsc_scan</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">Possibly identified card (using /usr/share/pcsc/smartcard_list.txt):<br/> 3B DD 18 00 81 31 FE 45 90 4C 41 54 56 49 41 2D 65 49 44 90 00 8C<br/> &nbsp;&nbsp; &nbsp;Identity card (eID) Republic of Latvia<br/> &nbsp;&nbsp; &nbsp;[http://www.pmlp.gov.lv/lv/pakalpojumi/passes/eid.html http://www.pmlp.gov.lv/lv/pakalpojumi/passes/eid.html]</div> 
&nbsp;
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">p11tool --list-tokens</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">Token 2:<br/> &nbsp;&nbsp; &nbsp;URL: pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=User%20PIN%20%28LATVIA%20ID%29<br/> &nbsp;&nbsp; &nbsp;Label: User PIN (LATVIA ID)<br/> &nbsp;&nbsp; &nbsp;Type: Hardware token<br/> &nbsp;&nbsp; &nbsp;Flags: RNG, Requires login<br/> &nbsp;&nbsp; &nbsp;Manufacturer: Oberthur Technologies<br/> &nbsp;&nbsp; &nbsp;Model: PKCS#15<br/> &nbsp;&nbsp; &nbsp;Serial: 010011761431013F<br/> &nbsp;&nbsp; &nbsp;Module: /usr/lib/pkcs11/eidlv-pkcs11.so</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><br/> Token 3:<br/> &nbsp;&nbsp; &nbsp;URL: pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=Signature%20PIN%20%28LATVIA%20ID%29<br/> &nbsp;&nbsp; &nbsp;Label: Signature PIN (LATVIA ID)<br/> &nbsp;&nbsp; &nbsp;Type: Hardware token<br/> &nbsp;&nbsp; &nbsp;Flags: RNG, Requires login<br/> &nbsp;&nbsp; &nbsp;Manufacturer: Oberthur Technologies<br/> &nbsp;&nbsp; &nbsp;Model: PKCS#15<br/> &nbsp;&nbsp; &nbsp;Serial: 010011761431013F<br/> &nbsp;&nbsp; &nbsp;Module: /usr/lib/pkcs11/eidlv-pkcs11.so</div> 
&nbsp;
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">p11tool --list-all-certs</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">warning: no token URL was provided for this operation; the available tokens are:</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">pkcs11:model=p11-kit-trust;manufacturer=PKCS%2311%20Kit;serial=1;token=System%20Trust<br/> pkcs11:model=p11-kit-trust;manufacturer=PKCS%2311%20Kit;serial=1;token=Default%20Trust<br/> pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=User%20PIN%20%28LATVIA%20ID%29<br/> pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=Signature%20PIN%20%28LATVIA%20ID%29</div> 
Izmanto iegūto certifikātu
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">p11tool --list-all-certs 'pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=User%20PIN%20%28LATVIA%20ID%29'</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">Object 0:<br/> &nbsp;&nbsp; &nbsp;URL: pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=User%20PIN%20%28LATVIA%20ID%29;id=%a7%82%78%84%61%ce%53%39%0e%e2%34%45%6e%4a%01%bf%c6%ad%49%a1;object=Authentication%20certificate;type=cert<br/> &nbsp;&nbsp; &nbsp;Type: X.509 Certificate (RSA-2048)<br/> &nbsp;&nbsp; &nbsp;Expires: Sun Jun 20 05:02:52 2021<br/> &nbsp;&nbsp; &nbsp;Label: Authentication certificate<br/> &nbsp;&nbsp; &nbsp;ID: a7:82:78:84:61:ce:53:39:0e:e2:34:45:6e:4a:01:bf:c6:ad:49:a1<br/> &nbsp;</div> 
Atrast atrašanās vietu
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">find / -name "hipreport.sh"</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">/usr/libexec/openconnect/hipreport.sh</div> 
Atspiest magic.zip, kur saturā ir lvrtc root sertifikāts eid kartei un novietot ~/magic.pem
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">unzip magic.zip && mv magic.pem ~/magic.pem</div> 
Izpildīt komandu
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">sudo openconnect -v --dump-http-traffic --user="KASPARS BŪCENS" -c \<br/> "pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=User%20PIN%20%28LATVIA%20ID%29;id=%a7%82%78%84%61%ce%53%39%0e%e2%34%45%6e%4a%01%bf%c6%ad%49%a1;object=Authentication%20certificate;type=cert" \<br/> --protocol=gp \<br/> --os=win \<br/> --csd-wrapper="/usr/libexec/openconnect/hipreport.sh" \<br/> --cafile="/home/kasparsb/Documents/magic.pem" \<br/> vpn1.eveseliba.gov.lv</div> 
&nbsp; [[:File:latvia-eid-middleware-2.0.6-1-linux-centos-6.10-x86_641.rpm|File:latvia-eid-middleware-2.0.6-1-linux-centos-6.10-x86 641.rpm]]<br/> [[:File:latvia-eid.zip|File:latvia-eid.zip]]<br/> [[:File:magic.zip|File:magic.zip]]</div> </div>
</div>