reading eID's with a validity of 10 years using the old eID applet from eID Middleware 3.5 SDK together with the eID middleware 4.0.7

[Johan De Schutter]

Hello,

We are currently using the old eID applet from eID Middleware 3.5 SDK together with the eID middleware 4.0.7

This 4.0.7 still contains the beid35cardlayer.dll, beid35common.dll that is need by the old eID applet to read out the eID cards.

This setup worked without problems. But recently, there is a complaint that it is impossible to read recent eID's with a validity of 10 years.

If I enable the logging of the middelware, I can see that the applet connects to the eID card. And that is starts reading the files on the eID card.

It succeeds in reading most of the files.

But loading the file 3F00DF014031  EF(ID#RN citizen data) and 3F00DF014035 EF(ID#Photo) fails. It returns status 0x2 instead of 0x0.

File : 3F00DF014031 - status : 0x2

LoadData: File : 3F00DF014035 - status : 0x2

Is there a hack either in the Windows registry or installing the newest Middleware together with copying the eid35cardlayer.dll, beid35common.dll of the middle ware 4.0.7,

in order to read these eID's with a validity of 10 years.

Regards,

Johan De Schutter

[Frederik Vernelen]

Hello Johan,

Recent eID cards have the identity data on the card signed with a signature of a sha256 hash of that data. (same for address and photo).

This used to be a sha1 hash on older cards.

The eID Middleware 3.5 SDK will verify the signature on the data (but using a wrong hash) and conclude that the signature is incorrect.

the eid35cardlayer.dll is the old middleware's card access layer, there is no trick to replace just that part with the new middleware.

For client solutions you could have a look at our new native eID Viewer (which will soon go into testing) here:
https://github.com/Fedict/eid-mw/tree/master/plugins_tools/eid-viewer

It also has a drag and drop (dragging and dropping the photo) feature for unsafe (easy to alter) card data transfer

Wkr,

 Frederik

--
Je hebt dit bericht ontvangen omdat je bent geabonneerd op de groep "eID Middleware" van Google Discussiegroepen.
Als je je wilt afmelden bij deze groep en geen e-mails van de groep meer wilt ontvangen, stuur je een e-mail naar eid-mw+unsubscribe@googlegroups.com.
Als je een bericht in deze groep wilt plaatsen, stuur je een e-mail naar eid...@googlegroups.com.
Bezoek deze groep op https://groups.google.com/group/eid-mw.
Ga naar https://groups.google.com/d/optout voor meer opties.

[Johan De Schutter]

Frederik,

Thanks for the answer.

I have a question about the new eID Viewer.

Will this viewer be released on http://eid.belgium.be/

Is there yet an official release or maybe a not official build binary? Instead of building the binary ourself.

Is the drag and drop already present in the eID viewer of the release 4.1.18

Regards,

Johan

Op donderdag 27 oktober 2016 14:32:26 UTC+2 schreef fvernelen:

Als je je wilt afmelden bij deze groep en geen e-mails van de groep meer wilt ontvangen, stuur je een e-mail naar eid-mw+un...@googlegroups.com.

[Wouter Verhelst]

Hi Johan,

The new viewer is still in its final stages of development. We need to
finish up a few loose ends, and get everything properly translated.
That's why it hasn't been released yet. When the release happens (we're
not sure yet when that will be, but Real Soon Now), it will indeed be
released on eid.belgium.be.

Regards,

On 16-11-16 12:17, Johan De Schutter wrote:
> Frederik,
>
> Thanks for the answer.
>
> I have a question about the new eID Viewer.
>
> Will this viewer be released on http://eid.belgium.be/
>
> Is there yet an official release or maybe a not official build binary?
> Instead of building the binary ourself.
>
> Is the drag and drop already present in the eID viewer of the release 4.1.18
>
> Regards,
>
> Johan
>
> Op donderdag 27 oktober 2016 14:32:26 UTC+2 schreef fvernelen:
>
> Hello Johan,
>
> Recent eID cards have the identity data on the card signed with a
> signature of a sha256 hash of that data. (same for address and photo).
> This used to be a sha1 hash on older cards.
>
> The eID Middleware 3.5 SDK will verify the signature on the data
> (but using a wrong hash) and conclude that the signature is incorrect.
>
> the eid35cardlayer.dll is the old middleware's card access layer,
> there is no trick to replace just that part with the new middleware.
>
> For client solutions you could have a look at our new native eID
> Viewer (which will soon go into testing) here:

> https://github.com/Fedict/eid-mw/tree/master/plugins_tools/eid-viewer <https://github.com/Fedict/eid-mw/tree/master/plugins_tools/eid-viewer>

> eid-mw+un...@googlegroups.com <javascript:>.

> Als je een bericht in deze groep wilt plaatsen, stuur je een

> e-mail naar eid...@googlegroups.com <javascript:>.

> Bezoek deze groep op https://groups.google.com/group/eid-mw

> <https://groups.google.com/group/eid-mw>.
> Ga naar https://groups.google.com/d/optout

> <https://groups.google.com/d/optout> voor meer opties.
>
>

> --
> Je hebt dit bericht ontvangen omdat je bent geabonneerd op de groep "eID
> Middleware" van Google Discussiegroepen.
> Als je je wilt afmelden bij deze groep en geen e-mails van de groep meer
> wilt ontvangen, stuur je een e-mail naar
> eid-mw+un...@googlegroups.com

> <mailto:eid-mw+un...@googlegroups.com>.

> Als je een bericht in deze groep wilt plaatsen, stuur je een e-mail naar

> eid...@googlegroups.com <mailto:eid...@googlegroups.com>.

> Bezoek deze groep op https://groups.google.com/group/eid-mw.
> Ga naar https://groups.google.com/d/optout voor meer opties.

--
Wouter Verhelst

[Johan De Schutter]

Thanks.

I checked the release notes at https://downloads.services.belgium.be/eid/RN4118.pdf

In Middleware 4.1.4 there is a note "Drag-and-drop functionality added to easily allow using identity information from other applications".

Is the drag and drop of 4.1.4 (and later) the same (same data and same data formats) as the drag and drop in the new eID viewer.

What is to be expected by the drop target? Is it an xml, json, csv, plain text? 

Do you have an example of a HTLM drop target that excepts drag and drop of the eid Viewer?

Regards,

Johan

Op woensdag 16 november 2016 12:20:16 UTC+1 schreef Wouter Verhelst:

[Wouter Verhelst]

Hi Johan,

Yes, that's the exact same thing. It is the XML format that the viewer
also uses when saving data. The plan is to have the same functionality
retained in the new viewer as well.

An HTML example can be found at
https://github.com/Fedict/eid-viewer/tree/master/xml

Regards,

On 16-11-16 15:46, Johan De Schutter wrote:
> Thanks.
>
> I checked the release notes
> at https://downloads.services.belgium.be/eid/RN4118.pdf
>
> In Middleware 4.1.4 there is a note "Drag-and-drop functionality added
> to easily allow using identity information from other applications".
>
> Is the drag and drop of 4.1.4 (and later) the same (same data and same
> data formats) as the drag and drop in the new eID viewer.
>
> What is to be expected by the drop target? Is it an xml, json, csv,
> plain text?
>
> Do you have an example of a HTLM drop target that excepts drag and drop
> of the eid Viewer?
>
> Regards,
>
> Johan
>
>
> Op woensdag 16 november 2016 12:20:16 UTC+1 schreef Wouter Verhelst:
>
> Hi Johan,
>
> The new viewer is still in its final stages of development. We need to
> finish up a few loose ends, and get everything properly translated.
> That's why it hasn't been released yet. When the release happens (we're
> not sure yet when that will be, but Real Soon Now), it will indeed be

> released on eid.belgium.be <http://eid.belgium.be>.

> > eid-mw+un...@googlegroups.com <javascript:>
> > <mailto:eid-mw+un...@googlegroups.com <javascript:>>.

> > Als je een bericht in deze groep wilt plaatsen, stuur je een
> e-mail naar
> > eid...@googlegroups.com <javascript:>

> <mailto:eid...@googlegroups.com <javascript:>>.

> > Bezoek deze groep op https://groups.google.com/group/eid-mw
> <https://groups.google.com/group/eid-mw>.
> > Ga naar https://groups.google.com/d/optout
> <https://groups.google.com/d/optout> voor meer opties.
>
> --

> Wouter Verhelst

[Johan De Schutter]

Thanks. Good to know that drag and drop is already available.

Many browsers drop support of applets. And also Oracle will depreciate applets in JDK 9.

Is the eid Viewer the replacement for this?

Or is Fedict working on other solutions? Maybe browser plugins / addons for Internet Explorer and Firefox.

There is already a Chrome extension: https://www.e-contract.be/#/support#chrome

Regards,

Johan

Op woensdag 16 november 2016 15:55:11 UTC+1 schreef Wouter Verhelst:

[Wouter Verhelst]

Hi Johan,

Sorry about the delay here. You're not the first one to ask about this,
but there was no official statement regarding the situation. I've asked
internally to get that resolved; that's resulted in
https://github.com/Fedict/eid-applet/blob/develop/DEPRECATION.md

Regards,

[Johan De Schutter]

Thanks for the reply.

Regards,

Johan De Schutter

Op donderdag 1 december 2016 12:56:50 UTC+1 schreef Wouter Verhelst: