Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Bug#1037036: ITP: autogram -- eIDAS-compliant document signing tool

1 view
Skip to first unread message

Andrej Shadura

unread,
Jun 2, 2023, 7:40:05 AM6/2/23
to
Package: wnpp
Severity: wishlist
Owner: Andrej Shadura <andr...@debian.org>
X-Debbugs-Cc: debian...@lists.debian.org, team+...@tracker.debian.org

* Package name : autogram
Version : 1.99.10
Upstream Contact: Jakub Ďuraš, Slovensko.Digital et al.
* URL : https://github.com/slovensko-digital/autogram
* License : EUPL 1.2
Programming Lang: Java
Description : eIDAS-compliant document signing tool

Autogram is a cross-platform (Windows, MacOS, Linux) desktop JavaFX
application to sign documents accordancing to the eIDAS standard.
The user can use it to sign files directly, or the application can be
easily integrated into your own (web) information system using the
HTTP API.

Gioele Barabucci

unread,
Jun 2, 2023, 2:30:05 PM6/2/23
to
On 02/06/23 13:28, Andrej Shadura wrote:
> Description : eIDAS-compliant document signing tool
>
> Autogram is a cross-platform (Windows, MacOS, Linux) desktop JavaFX
> application to sign documents accordancing to the eIDAS standard.
> The user can use it to sign files directly, or the application can be
> easily integrated into your own (web) information system using the
> HTTP API.

The documentation hints at the fact that this application works only in
conjunction with Slovenian eIDs.

This (current?) limitation should be mentioned in the short and long
descriptions.

Regards,

--
Gioele Barabucci

Gioele Barabucci

unread,
Jun 2, 2023, 2:50:05 PM6/2/23
to
On 02/06/23 20:25, Andrej Shadura wrote:
>> The documentation hints at the fact that this application works only in
>> conjunction with Slovenian eIDs.
>
> It's Slovak, not Slovenian.

Yes, right. Common lapsus lingue, isn't it? :)

>> This (current?) limitation should be mentioned in the short and long
>> descriptions.
>
> It does in fact work with anything, as long as has a PKCS #11 provider.

The README on GitHub says:

> Momentálne podporujeme na Slovensku bežne používané karty
> a ich ovládače:
>
> * občiansky preukaz (eID klient)
> * I.CA SecureStore
> * MONET+ ProID+Q
> * Gemalto IDPrime 940
>
> Doplniť ďalšie je pomerne ľahké pokiaľ používajú PKCS#11.

I read this as "Support for other kinds of eIDs is _possible and easy_
as long as they support PKCS#11, but _not automatic_". Am I reading this
wrong?

Regards,

--
Gioele Barabucci

Andrej Shadura

unread,
Jun 2, 2023, 3:00:05 PM6/2/23
to
Hi,

On Fri, 2 Jun 2023, at 20:13, Gioele Barabucci wrote:
> On 02/06/23 13:28, Andrej Shadura wrote:
>> Description : eIDAS-compliant document signing tool
>>
>> Autogram is a cross-platform (Windows, MacOS, Linux) desktop JavaFX
>> application to sign documents accordancing to the eIDAS standard.
>> The user can use it to sign files directly, or the application can be
>> easily integrated into your own (web) information system using the
>> HTTP API.
>
> The documentation hints at the fact that this application works only in
> conjunction with Slovenian eIDs.

It's Slovak, not Slovenian.

> This (current?) limitation should be mentioned in the short and long
> descriptions.

It does in fact work with anything, as long as has a PKCS #11 provider.

--
Cheers,
Andrej

Andrej Shadura

unread,
Jun 4, 2023, 5:00:06 AM6/4/23
to
Hi,
Well, I suspect they want to be on the safe side, but OTOH I have not verified it. Given that some of the Autogram’s dependencies are still not in Debian, I reckon this can either be solved upstream by the time the package is ready, or I can add a disclaimer to the package description.

--
Cheers,
Andrej
0 new messages