How to install Estonian "ID-kaart" (smart card) in K-M
Posted by: ancientuser
Date: February 06, 2009 06:06PM

Here's how I got the Estonian "ID kaart" (smart card for personal identification) running under K-Meleon. Maybe this instruction is helpful for other smart cards as well.

I used the Estonian ID card's Mozilla support version 0.85rc (older versions should be more or less the same but library file names may vary). This is what I did (the smart card should be removed from the slot and K-Meleon and Firefox should be closed in the beginning):

1. Open K-Meleon. Go to Preferences -> Privacy & Security -> Encryption -> Manage Crypto Devices. Delete any appearances of modules with names containing "opensc-pkcs11" (for deletion, select the module and press Unload).

2. Install, if necessary, the smart card drivers. Install support for Mozilla (the latter for Estonian ID card can be downloaded from http://installer.id.ee/media/ID-kaart-firefox.exe). Let the installer configure the support for Firefox if it wants to.

3. Open K-Meleon and go to "Manage Crypto Devices" again.

Press Load and name the new module as
opensc-pkcs11

In the lower box, browse to the file C:\Windows\System32\onepin-opensc-pkcs11.dll

("Show hidden files" should be enabled in Windows Explorer to see this file, I think. As for older releases of Estonian ID-card support for Mozilla, I am not sure whether onepin-opensc-pkcs11.dll or opensc-auth-pkcs11.dll should be used. If you cannot find the file onepin-opensc-pkcs11.dll, use opensc-auth-pkcs11.dll). For other smart cards than the Estonian "ID-kaart", the respective smart card support library should be used, I guess.

Then press OK. K-Meleon should say that a new module has been installed.

4. Just in case, restart K-Meleon again. You can now try to login to some site to check whether the ID card works.

5. If you use only one smart card with K-Meleon, you can also go to the address:

about:config

and find
security.default_personal_cert

(if you do not have that entry, create a string entry with such name)

and change the value to
Select Automatically

Now K-Meleon won't ask for the certificate every time and will choose the certificate automatically.

(I do not know what happens as a result of point 5 if you are using several smart cards in the same computer.)

If something goes wrong, just delete the opensc... module in K-Meleon (Manage Cyrpto Devices) with Unload and try again.



Edited 2 time(s). Last edit at 02/06/2009 06:11PM by ancientuser.

Re: How to install Estonian "ID-kaart" (smart card) in K-M
Posted by: desga2
Date: February 06, 2009 09:25PM

Thanks for tutorial ancientuser, I remember that someone posted about this 2 years ago.

Quote
andres posted "PKCS11 well supported"
To my delight, I found out that K-Meleon supports PKCS11, specifically, the Estonian ID-card (national smart card used by for personal authentication somewhat like a passport), without any problems. Great job!

Installing it for K-Meleon is a bit tricky but not too difficult. It can be done from this page:

http://ideelabor.ee/opensource/wiki/IdKaardiTarkvara/VeebisAutentimineMozillaga

by first installing the certificates and then importing the module from C:\Windows\System32 (Mozilla support for ID-card must be installed beforehand).

I have asked the developer of Mozilla support for Estonian ID-card to add autodetection for K-Meleon in the next Mozilla support installer.

I move your tutorial to Tutorials wiki page.

K-Meleon in Spanish



Edited 3 time(s). Last edit at 02/06/2009 09:31PM by desga2.

K-Meleon forum is powered by Phorum.