Bug#1029216: ausweisapp2: Connecting with Smartphone as Cardreader unpossible due to Certificate Error

[Simon Spies]

Package: ausweisapp2
Version: 1.26.1-1
Severity: important
X-Debbugs-Cc: s.s...@sisesp.de

Dear Maintainer,

I noticed that connecting with a smartphone as cardreader is currently
impossible since the app hangs up during the process. All packages on my system
are up-to-date with Debian testing. The following lines from the console output
when the error occurs hint that it is some sort of certificate problem:

default 2023.01.19 20:16:08.445 45530
...viceModel::connectToRememberedServer(ui/qml/RemoteServiceModel.cpp:205) :
Starting to pair.
ifd 2023.01.19 20:16:08.445 45530
IfdClientImpl::establishConnection(ifd/base/IfdClientImpl.cpp:156) :
Establishing connection to remote device.
default 2023.01.19 20:16:08.446 45535
TlsChecker::hasValidCertificateKeyLength(network/TlsChecker.cpp:40) :
Certificate is null
qt.network... 2023.01.19 20:16:08.446 45535 W (unknown:0)
: The backend "cert-only" does not support QSslKey
qt.network... 2023.01.19 20:16:08.446 45535 W (unknown:0)
: Active TLS backend does not support key creation
settings 2023.01.19 20:16:08.446 45535
...ceSettings::checkAndGenerateKey(settings/RemoteServiceSettings.cpp:182) :
Generate local keypair...
qt.network... 2023.01.19 20:16:08.685 45535 W (unknown:0)
: The backend "cert-only" does not support QSslKey
qt.network... 2023.01.19 20:16:08.685 45535 W (unknown:0)
: Active TLS backend does not support key creation
ifd 2023.01.19 20:16:08.685 45535 C
ConnectRequest::ConnectRequest(ifd/base/ConnectRequest.cpp:44) :
Cannot get required key/certificate for tls

Thank you very much in advance.


-- System Information:
Debian Release: bookworm/sid
APT prefers testing-proposed-updates
APT policy: (500, 'testing-proposed-updates'), (500, 'stable-updates'), (500, 'stable-security'), (500, 'proposed-updates'), (500, 'testing'), (500, 'stable'), (1, 'experimental'), (1, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.0.0-6-amd64 (SMP w/12 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages ausweisapp2 depends on:
ii libc6 2.36-8
ii libhttp-parser2.9 2.9.4-5
ii libpcsclite1 1.9.9-1
ii libqt6core6 6.4.2+dfsg~rc1-3
ii libqt6gui6 6.4.2+dfsg~rc1-3
ii libqt6network6 6.4.2+dfsg~rc1-3
ii libqt6qml6 6.4.2+dfsg~rc1-2
ii libqt6quick6 6.4.2+dfsg~rc1-2
ii libqt6quickcontrols2-6 6.4.2+dfsg~rc1-2
ii libqt6statemachine6 6.4.2~rc1-2
ii libqt6svg6 6.4.2~rc1-3
ii libqt6websockets6 6.4.2~rc1-3
ii libqt6widgets6 6.4.2+dfsg~rc1-3
ii libssl3 3.0.7-1
ii libstdc++6 12.2.0-14
ii libudev1 252.4-1
ii qml6-module-qt-labs-platform 6.4.2+dfsg~rc1-2
ii qml6-module-qtqml 6.4.2+dfsg~rc1-2
ii qml6-module-qtqml-models 6.4.2+dfsg~rc1-2
ii qml6-module-qtqml-statemachine 6.4.2~rc1-2
ii qml6-module-qtqml-workerscript 6.4.2+dfsg~rc1-2
ii qml6-module-qtquick-controls 6.4.2+dfsg~rc1-2
ii qml6-module-qtquick-layouts 6.4.2+dfsg~rc1-2
ii qml6-module-qtquick-templates 6.4.2+dfsg~rc1-2
ii qml6-module-qtquick-window 6.4.2+dfsg~rc1-2

Versions of packages ausweisapp2 recommends:
ii pcsc-tools 1.6.1-1
ii pcscd 1.9.9-1

ausweisapp2 suggests no packages.

-- no debconf information

[A. Klitzing]

Hi,

looks like your Qt uses the wrong tls backend.

The backend "cert-only" does not support QSslKey

Qt6 has multiple runtime backends for tls. The "cert-only" backend
cannot be used.
Normally there should be the "openssl" backend
(qt6/plugins/tls/libqopensslbackend.so).

Best regards
André Klitzing