Thales (ex Gemalto) Client support

[fabrii]

We are trying to use web-eid for smart cards used in Uruguay.

The cards used the Gemalto Driver, that is now called Thales. The new installation path is:

C:/Program Files/Thales/Classic Client (The new client is a 64x version)

I attach the release document as reference.

Is there any possibility of adding support in this library?

--

As a side comment, we tried to move the Classic Client from Thales to Gemalto path expected by web-eid, but we get this error:

WARNING src\controller\threads/waitforcardthread.hpp:72:bool __cdecl WaitForCardThread::warnAndEmitStatusUpdate(const enum RetriableError,const class std::exception &) - Command "INSERT_CARD" retriable error "SMART_CARD_CHANGE_REQUIRED": Either authentication or signing token is missing in src\electronic-ids\pkcs11\Pkcs11ElectronicID.cpp:240:Pkcs11ElectronicID

Thank you!

[fabrii]

I think the error we are getting is due to this:

Pkcs11ElectronicID::Pkcs11ElectronicID(ElectronicID::Type type) :
    ElectronicID {{}}, module {getModule(type)}, manager {PKCS11CardManager::instance(module.path)}
{
    REQUIRE_NON_NULL(manager)

    bool seenAuthToken = false;
    bool seenSigningToken = false;

    for (const auto& token : manager->tokens()) {
        const auto certType = certificateType(token.cert);
        if (certType.isAuthentication()) {
            authToken = token;
            seenAuthToken = true;
        } else if (certType.isSigning()) {
            signingToken = token;
            seenSigningToken = true;
        }
    }
    if (!(seenAuthToken && seenSigningToken)) {
        THROW(SmartCardChangeRequiredError, "Either authentication or signing token is missing");
    }
}

In our case, it seems that the certificate is a signature certificate only, and has no authentication capabilities.

[fabrii]

We were working with 2.7.0.906.x64 and getting that error.

We tried with version 2.6.0.900.x64 and it started working. We didn’t even need to change the installation path (it worked directly with the Thales directory). Do you know what changed between these versions?

We may try more versions to know in which one stopped working.

[mrts]

Thanks for the report!

We were working with 2.7.0.906.x64 and getting that error.

We tried with version 2.6.0.900.x64 and it started working. We didn’t even need to change the installation path (it worked directly with the Thales directory). Do you know what changed between these versions?

The web-eid-app changes are here and the libelectronic-id changes are here.

Can you please compare the working version application logs with the not working version and paste the difference here? See instructions here how to enable logs.

Thanks in advance for your help! I'm sure we will get this fixed.