eid no longer working in Chrome

[Ivan Eulaers]

Since last week eid is no longer working with Chrome (version 57.0.2987.133 (64-bit)).

When going to https://test.eid.belgium.be the site asks for the pin code, but the throws a page 

The web page at https://test.eid.belgium.be/ might be temporarily down or it may have moved permanently to a new web address.

ERR_SSL_CLIENT_AUTH_SIGNATURE_FAILED

Any clue how this can be solved?

Regards

Ivan

[Wouter Verhelst]

Hi Ivan,

On 18-04-17 15:20, Ivan Eulaers wrote:
> Since last week eid is no longer working with Chrome
> (version 57.0.2987.133 (64-bit)).

Interesting.

> When going to https://test.eid.belgium.be the site asks for the pin
> code, but the throws a page
>

> The web page at *https://test.eid.belgium.be/* might be temporarily

> down or it may have moved permanently to a new web address.
>
> ERR_SSL_CLIENT_AUTH_SIGNATURE_FAILED

We cannot reproduce this on either Windows or Linux, but we can
reproduce this on macOS 10.12.

> Any clue how this can be solved?

Not at this time. It worked for me before Chrome 57, but apparently
something has changed; it doesn't anymore now.

We'll investigate this; hopefully it's something we can either fix or
implement a workaround for. Meanwhile, I can confirm that both Safari
and Firefox should still work.

Regards,

--
Wouter Verhelst

[Ivan Eulaers]

Tx for keeping us up-to-date.

I've switched to Firefox (on macOS 10.12) and that works.

In our team we've been using Chrome on macOS up till now and before the last update of Chrome, we didn't encounter any issues.

[Wouter Verhelst]

On 19-04-17 12:21, Ivan Eulaers wrote:
> Tx for keeping us up-to-date.

You're welcome.

This appears to be an issue in Chrome AFAICS. I've filed a bug report at
<https://bugs.chromium.org/p/chromium/issues/detail?id=712680>, but so
far we haven't had a reply yet. If you want, you can "star" the issue so
you get notifications when the bug is resolved.

> I've switched to Firefox (on macOS 10.12) and that works.

Good. Safari should work, too (it did for me last night).

> In our team we've been using Chrome on macOS up till now and before the
> last update of Chrome, we didn't encounter any issues.

Glad to hear it :-)

--
Wouter Verhelst

[Wouter Verhelst]

Hi Ivan,

In case you didn't notice yet: this turned out to be a missing bit of
functionality in our tokend, where we did not yet allow for signing with
SHA512 hashes, something that Chrome started doing. We released a new
version of the eID software as a beta release late last week, which you
can now download and test:

https://eid.belgium.be/en/future-versions-eid-software-and-eid-viewer

Thanks for reporting this; if you do notice any further problems with
that release, please do not hesitate to let us know.

Regards,

[Ivan Eulaers]

Wouter,

Thanks for the update. This works perfect on macOS 10.12 and Chrome.

Regards

Ivan

[Jeremy Lanssiers]

Can't get it to work on Chrome, running on MacOS. 

Installed latest eID software, and the Chrome add-on. 

And temporarily disabled anti-virus and web-shield. 

No result.

Should I try without firewall? 

Checkout a certificate? 

[Frederik Vernelen]

Hello Jeremy,

First I would like to mention that we have no chrome add-on, so that must be third party software.

But the issue with google chrome on macOS 10.13 is know by the chromium team, and they are working on it.

I've filed a bug report for that some time ago:

https://bugs.chromium.org/p/chromium/issues/detail?id=777805#c4

Wkr,

 Frederik

--
Je hebt dit bericht ontvangen omdat je bent geabonneerd op de groep "eID Middleware" van Google Discussiegroepen.
Als je je wilt afmelden bij deze groep en geen e-mails van de groep meer wilt ontvangen, stuur je een e-mail naar eid-mw+unsubscribe@googlegroups.com.
Als je een bericht in deze groep wilt plaatsen, stuur je een e-mail naar eid...@googlegroups.com.
Bezoek deze groep op https://groups.google.com/group/eid-mw.
Ga naar https://groups.google.com/d/optout voor meer opties.