Kaspars: 1 revision imported

2026-04-16T08:41:32Z

1 revision imported

← Older revision		Revision as of 10:41, 16 April 2026
(No difference)

Kaspars at 10:51, 13 March 2021

2021-03-13T10:51:46Z

New page

<div class="mw-parser-output">
= Ubuntu 20.04 =

<div class="mw-parser-output">
<div class="mw-parser-output">
<div class="mw-parser-output">
<div class="mw-parser-output">

<div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output">
<div class="mw-parser-output">
<div class="mw-parser-output">
<div class="mw-parser-output"><div class="mw-parser-output">
<div class="mw-parser-output"><div class="mw-parser-output">
<div class="mw-parser-output">
= Centos 7 =
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">yum install nss-tools nss-pam-ldapd esc pam_pkcs11 pam_krb5 opensc pcsc-lite-ccid authconfig authconfig-gtk krb5-libs krb5-workstation krb5-pkinit pcsc-lite pcsc-lite-libs gnutls-utils gnutls-devel openconnect</div>
Uzinstalēt latvia-eid-middleware paku<br/> pārsaukt /opt/latvian-eid par /opt/latvian-eid.bak

Atspiest latvia-eid arhīvu un pārkopēt uz /opt direktoriju

pārliecināties, vai ir fails /opt/latvia-eid/lib/eidlv-pkcs11.so
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">ls -la /opt/latvia-eid/lib/eidlv-pkcs11.so</div>
pārliecināties, vai ir /usr/lib64/eidlv-pkcs11.so fails, ja nav, tad izveidot symlink
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">ln -s /opt/latvia-eid/lib/eidlv-pkcs11.so /usr/lib64/eidlv-pkcs11.so</div>
Izveidot pkcs11 moduļi
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">cp /usr/share/p11-kit/modules/opensc.module /etc/pkcs11/modules/opensc.module<br/> echo "module:/usr/lib64/eidlv-pkcs11.so" > /etc/pkcs11/modules/opensc.module</div>
pārbaude
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">pcsc_scan</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">Possibly identified card (using /usr/share/pcsc/smartcard_list.txt):<br/> 3B DD 18 00 81 31 FE 45 90 4C 41 54 56 49 41 2D 65 49 44 90 00 8C<br/>     Identity card (eID) Republic of Latvia<br/>     [http://www.pmlp.gov.lv/lv/pakalpojumi/passes/eid.html http://www.pmlp.gov.lv/lv/pakalpojumi/passes/eid.html]</div>
 
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">p11tool --list-tokens</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">Token 2:<br/>     URL: pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=User%20PIN%20%28LATVIA%20ID%29<br/>     Label: User PIN (LATVIA ID)<br/>     Type: Hardware token<br/>     Flags: RNG, Requires login<br/>     Manufacturer: Oberthur Technologies<br/>     Model: PKCS#15<br/>     Serial: 010011761431013F<br/>     Module: /usr/lib/pkcs11/eidlv-pkcs11.so</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><br/> Token 3:<br/>     URL: pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=Signature%20PIN%20%28LATVIA%20ID%29<br/>     Label: Signature PIN (LATVIA ID)<br/>     Type: Hardware token<br/>     Flags: RNG, Requires login<br/>     Manufacturer: Oberthur Technologies<br/>     Model: PKCS#15<br/>     Serial: 010011761431013F<br/>     Module: /usr/lib/pkcs11/eidlv-pkcs11.so</div>
 
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">p11tool --list-all-certs</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">warning: no token URL was provided for this operation; the available tokens are:</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">pkcs11:model=p11-kit-trust;manufacturer=PKCS%2311%20Kit;serial=1;token=System%20Trust<br/> pkcs11:model=p11-kit-trust;manufacturer=PKCS%2311%20Kit;serial=1;token=Default%20Trust<br/> pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=User%20PIN%20%28LATVIA%20ID%29<br/> pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=Signature%20PIN%20%28LATVIA%20ID%29</div>
Izmanto iegūto certifikātu
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">p11tool --list-all-certs 'pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=User%20PIN%20%28LATVIA%20ID%29'</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">Object 0:<br/>     URL: pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=User%20PIN%20%28LATVIA%20ID%29;id=%a7%82%78%84%61%ce%53%39%0e%e2%34%45%6e%4a%01%bf%c6%ad%49%a1;object=Authentication%20certificate;type=cert<br/>     Type: X.509 Certificate (RSA-2048)<br/>     Expires: Sun Jun 20 05:02:52 2021<br/>     Label: Authentication certificate<br/>     ID: a7:82:78:84:61:ce:53:39:0e:e2:34:45:6e:4a:01:bf:c6:ad:49:a1<br/>  </div>
Atrast atrašanās vietu
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">find / -name "hipreport.sh"</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">/usr/libexec/openconnect/hipreport.sh</div>
Atspiest magic.zip, kur saturā ir lvrtc root sertifikāts eid kartei un novietot ~/magic.pem
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">unzip magic.zip && mv magic.pem ~/magic.pem</div>
Izpildīt komandu
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">sudo openconnect -v --dump-http-traffic --user="KASPARS BŪCENS" -c \<br/> "pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=User%20PIN%20%28LATVIA%20ID%29;id=%a7%82%78%84%61%ce%53%39%0e%e2%34%45%6e%4a%01%bf%c6%ad%49%a1;object=Authentication%20certificate;type=cert" \<br/> --protocol=gp \<br/> --os=win \<br/> --csd-wrapper="/usr/libexec/openconnect/hipreport.sh" \<br/> --cafile="/home/kasparsb/Documents/magic.pem" \<br/> vpn1.eveseliba.gov.lv</div>
 

[[:File:latvia-eid-middleware-2.0.6-1-linux-centos-6.10-x86_641.rpm|File:latvia-eid-middleware-2.0.6-1-linux-centos-6.10-x86 641.rpm]]<br/> [[:File:latvia-eid.zip|File:latvia-eid.zip]]<br/> [[:File:magic.zip|File:magic.zip]] </div> </div>
<div class="mw-parser-output"><div class="mw-parser-output"> </div> </div> </div>

<div class="mw-parser-output">
= CentOS 8 =
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">yum install nss-tools nss-pam-ldapd esc opensc pcsc-lite-ccid authconfig krb5-libs krb5-workstation krb5-pkinit pcsc-lite pcsc-lite-libs gnutls-utils gnutls-devel openconnect</div>
Uzinstalēt latvia-eid-middleware paku<br/> pārsaukt /opt/latvian-eid par /opt/latvian-eid.bak

Atspiest latvia-eid arhīvu un pārkopēt uz /opt direktoriju

pārliecināties, vai ir fails /opt/latvia-eid/lib/eidlv-pkcs11.so
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">ls -la /opt/latvia-eid/lib/eidlv-pkcs11.so</div>
pārliecināties, vai ir /usr/lib64/eidlv-pkcs11.so fails, ja nav, tad izveidot symlink
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">ln -s /opt/latvia-eid/lib/eidlv-pkcs11.so /usr/lib64/eidlv-pkcs11.so</div>
Izveidot pkcs11 moduļi
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">cp /usr/share/p11-kit/modules/opensc.module /etc/pkcs11/modules/opensc.module<br/> echo "module:/usr/lib64/eidlv-pkcs11.so" > /etc/pkcs11/modules/opensc.module</div>
pārbaude
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">pcsc_scan</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">Possibly identified card (using /usr/share/pcsc/smartcard_list.txt):<br/> 3B DD 18 00 81 31 FE 45 90 4C 41 54 56 49 41 2D 65 49 44 90 00 8C<br/>     Identity card (eID) Republic of Latvia<br/>     [http://www.pmlp.gov.lv/lv/pakalpojumi/passes/eid.html http://www.pmlp.gov.lv/lv/pakalpojumi/passes/eid.html]</div>
 
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">p11tool --list-tokens</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">Token 2:<br/>     URL: pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=User%20PIN%20%28LATVIA%20ID%29<br/>     Label: User PIN (LATVIA ID)<br/>     Type: Hardware token<br/>     Flags: RNG, Requires login<br/>     Manufacturer: Oberthur Technologies<br/>     Model: PKCS#15<br/>     Serial: 010011761431013F<br/>     Module: /usr/lib/pkcs11/eidlv-pkcs11.so</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><br/> Token 3:<br/>     URL: pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=Signature%20PIN%20%28LATVIA%20ID%29<br/>     Label: Signature PIN (LATVIA ID)<br/>     Type: Hardware token<br/>     Flags: RNG, Requires login<br/>     Manufacturer: Oberthur Technologies<br/>     Model: PKCS#15<br/>     Serial: 010011761431013F<br/>     Module: /usr/lib/pkcs11/eidlv-pkcs11.so</div>
 
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">p11tool --list-all-certs</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">warning: no token URL was provided for this operation; the available tokens are:</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">pkcs11:model=p11-kit-trust;manufacturer=PKCS%2311%20Kit;serial=1;token=System%20Trust<br/> pkcs11:model=p11-kit-trust;manufacturer=PKCS%2311%20Kit;serial=1;token=Default%20Trust<br/> pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=User%20PIN%20%28LATVIA%20ID%29<br/> pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=Signature%20PIN%20%28LATVIA%20ID%29</div>
Izmanto iegūto certifikātu
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">p11tool --list-all-certs 'pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=User%20PIN%20%28LATVIA%20ID%29'</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">Object 0:<br/>     URL: pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=User%20PIN%20%28LATVIA%20ID%29;id=%a7%82%78%84%61%ce%53%39%0e%e2%34%45%6e%4a%01%bf%c6%ad%49%a1;object=Authentication%20certificate;type=cert<br/>     Type: X.509 Certificate (RSA-2048)<br/>     Expires: Sun Jun 20 05:02:52 2021<br/>     Label: Authentication certificate<br/>     ID: a7:82:78:84:61:ce:53:39:0e:e2:34:45:6e:4a:01:bf:c6:ad:49:a1<br/>  </div>
Atrast atrašanās vietu
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">find / -name "hipreport.sh"</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">/usr/libexec/openconnect/hipreport.sh</div>
Atspiest magic.zip, kur saturā ir lvrtc root sertifikāts eid kartei un novietot ~/magic.pem
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">unzip magic.zip && mv magic.pem ~/magic.pem</div>
Izpildīt komandu
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">sudo openconnect -v --dump-http-traffic --user="KASPARS BŪCENS" -c \<br/> "pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=User%20PIN%20%28LATVIA%20ID%29;id=%a7%82%78%84%61%ce%53%39%0e%e2%34%45%6e%4a%01%bf%c6%ad%49%a1;object=Authentication%20certificate;type=cert" \<br/> --protocol=gp \<br/> --os=win \<br/> --csd-wrapper="/usr/libexec/openconnect/hipreport.sh" \<br/> --cafile="/home/kasparsb/Documents/magic.pem" \<br/> vpn1.eveseliba.gov.lv</div>
  [[:File:latvia-eid-middleware-2.0.6-1-linux-centos-6.10-x86_641.rpm|File:latvia-eid-middleware-2.0.6-1-linux-centos-6.10-x86 641.rpm]]<br/> [[:File:latvia-eid.zip|File:latvia-eid.zip]]<br/> [[:File:magic.zip|File:magic.zip]]</div> </div>
</div>

EID VPN/eID VPN - Revision history

Kaspars: 1 revision imported

Kaspars at 10:51, 13 March 2021