Connecting "e-government" in Ubuntu

The home government takes care of the citizens and tries to provide them with the opportunity to meet personally with their own representatives as little as possible. For these purposes, a state services portal has been created, for this purpose there was a UEC project, an E-Government card (several banks issue), there are talks about electronic passports based on SIM-cards, etc. etc. To learn how to make e-government work in Ubuntu, read below.

broke off an hour from work and here he is the first post:


Digression 1: Why do I need a card?
')
Enhanced authorization on www.gosuslugi.ru , certified EDS, you can sign documents in digital format, use for login to your computer, etc. etc. (all as with ordinary smart cards).

Digression 2: receiving a card

Actually, “Electronic Government” cards, for example, were issued by VTB24, Bank Saint Petersburg for a long time (according to official data), in reality, VTB began accepting applications for them from June 17 (the card is being taken 70 working days, so my wife and I were one of the first who received them from VTB24 in St. Petersburg).

Come to the bank (I came to VTB24), tell the cashier that they have such a product, show SNILS (the same thing for pensions ), take pictures on a webcam (the photo does not get on the card, unlike UEC), fill out the questionnaire . Keep in mind, e-government card from VTB is a credit with a zero credit limit. Therefore, questions in the questionnaire such as “Tell me what kind of property you have” can not be filled.

Wait (long).

If you already have an account on gosuslugi.ru, the process of receiving a card is accelerating (not much) + you receive SMS alerts with the status of connecting your card to your account, etc. (they came to me).

After many days, come to the bank, fill out another pack of forms, a service contract for 30 (!) Years and get an envelope with a card, pincode, card reader, instructions for activating the card and a second pincode (for EDS). Make sure that you are not signed up for "possible loan" insurance.


Readers are released by Aladdin, under license, so there should be no driver problems for them

After receiving the card, you must activate (optional) on public services. Those. generate yourself a personal certificate. The card is issued for 2 years, the reissue is automatic, the EDS is issued for 1 year, the first issue can be ordered on the site no earlier than one month before the expiration date, and if you miss the deadline, then go through the quest from the very beginning.

So, the card and reader in hand, we connect!

Attempt 1. Ubuntu 13.04 64bit

When entering the card.gosuslugi.ru site happily offers to download an archive with * .msi files.
Since Windows is not within reach, I downloaded “Plugin For Linux Ubuntu”, which the site happily offers when trying to login. After installation, ANYTHING happened.

A little googling on Habra put pcscd and stuff to work with a card reader
according to instructions from here habrahabr.ru/post/72905 , having decided that the Estonian option "will go too".

Card reader earned:

  opensc-tool --list-readers
 # Detected readers (pcsc)
 Nr.  Card Features Name
 0 Yes Athena ASE IIIe [CCID Bulk Interface] 00 00 

Checked if he sees the map:

  opensc-tool -nv
 Using the reader with a card: Athena ASE IIIe [CCID Bulk Interface] 00 00
 Connecting to card reader Athena ASE IIIe [CCID Bulk Interface] 00 00 ...
 Using the card driver. Default driver for unknown cards.
 Card name: Unsupported card 

The card reader sees the card, everything is ok, but it is not supported by opensc, sailed.

  opensc-tool -a -v
 Using the reader with a card: Athena ASE IIIe [CCID Bulk Interface] 00 00
 Connecting to card reader Athena ASE IIIe [CCID Bulk Interface] 00 00 ...
 Using the card driver. Default driver for unknown cards.
 Card ATR:
 3B 6C 00 FF 80 73 C8 21 13 66 01 06 11 59 00 01; l ... s.!. F ... Y ..

When launching FF or IE from under WINE, the cryptoplugin did not work as expected either.

Attempt 2. Mac OS X 10.7.5

I took a MacBook and without much thought, downloaded the proposed drivers from the site. Of course, it was not possible to activate the card, although the card reader was identified in the system.

Attempt 3. Win7

Spitting on everything, he took the "Teschin laptop".

Under Windows 7, everything worked, all the rules. First, we put the plugin number 1 to activate, activate the card, in the process your certificate is generated and written to the card. You can also see the titles of your certificate, more precisely two - pre-installed on the card and the second - our fresh one.
NB When you fill out the form for a card issue, specify the email - it will be added to your certificate, as well as the TIN and your other data.

Then we put another plugin - to work with the card. Authorization on the site is successful - it turned out in your personal account.

Attempt 4. Mac OS X

After activating the card and writing the certificate there, authorization also worked under Mac OS X.

Attempt 5. Ubuntu 12.04 32bit LTS

With dark forebodings booted into Ubuntu 12.04 32 bit, put the plugin, a couple of dependent libraries - authorization works. Suddenly. But I live at 13.04, so we suffer further.

The final chord. Ubuntu 13.04 64bit again

According to the instructions and tips from here, I installed the latest version of 32bit FF and the compatibility library, as well as Java from here.

After that, a miracle happened and authorization earned :) [at 32 bit FF, of course]

Summary:

1. The “Electronic Government” card in conjunction with gosuslugi.ru really works under Windows, and in MacOS, and in Ubunt.

2. Without Windows, the standard software can not be activated.

3. Developers from gosuslugi.ru should take care to support 64 bit Linux.

Upd. on the third point, a message was received from the anonymus that supposedly there has long been a normal 64-bit version of the plug-in that allows both activating the card and logging in to the portal, however, for NOT technical reasons, this plug-in is available only to the chosen ones - it is not shown on the site. so the developers are rehabilitated, in a sense.