Web eID - Revision history

Drupol: /* Belgian eID cards */

2026-03-30T17:05:17Z

Belgian eID cards

← Older revision		Revision as of 17:05, 30 March 2026
Line 110:		Line 110:
	'';		'';
	};</syntaxhighlight>This script ensures the required symlink is created at system activation time and remains up to date with the correct Nix store path for <code>eid-mw</code>.		};</syntaxhighlight>This script ensures the required symlink is created at system activation time and remains up to date with the correct Nix store path for <code>eid-mw</code>.

			Alternatively, systemd can be used to create the symlink, as such:<syntaxhighlight lang="nix" line="1">
			systemd.tmpfiles.rules = [
			"L+ /usr/lib/x86_64-linux-gnu/libbeidpkcs11.so.0 - - - - ${pkgs.eid-mw}/lib/pkcs11/beidpkcs11.so"
			];
			</syntaxhighlight>
	[[Category:Hardware]]		[[Category:Hardware]]
	[[Category:Applications]]		[[Category:Applications]]
	[[Category:Web Applications]]		[[Category:Web Applications]]

Tristan: Distinguish system and home options related to Firefox

2026-01-18T15:08:11Z

Distinguish system and home options related to Firefox

← Older revision		Revision as of 15:08, 18 January 2026
Line 1:		Line 1:
	~~The~~ Web eID project enables usage of European Union electronic identity (eID) smart cards for secure authentication and digital signing of documents on the web using public-key cryptography.		eThe Web eID project enables usage of European Union electronic identity (eID) smart cards for secure authentication and digital signing of documents on the web using public-key cryptography.

	Check [https://web-eid.eu/\|web-eid.eu] for more details and an example application.		Check [https://web-eid.eu/\|web-eid.eu] for more details and an example application.
Line 19:		Line 19:

	== Firefox ==		== Firefox ==
	If ~~you're using~~ Firefox~~, and~~ <code>programs.firefox.enable = true</code> ~~to configure your firefox~~, ~~you~~ can ~~set:~~		Firefox requires an additional browser extension for Web eID to work. If Firefox is enabled with <code>programs.firefox.enable = true</code>, this can specified system-wide, as follows...

	<syntaxhighlight lang="nix">		<syntaxhighlight lang="nix">programs.firefox.nativeMessagingHosts.packages = [ pkgs.web-eid-app ];</syntaxhighlight>

			...or per user with Home Manager, as follows:<syntaxhighlight lang="nix">
	programs.firefox.nativeMessagingHosts = [ pkgs.web-eid-app ];		programs.firefox.nativeMessagingHosts = [ pkgs.web-eid-app ];
	</syntaxhighlight>		</syntaxhighlight>


	If you're building a ~~firefox~~ derivation yourself, you can override it with <code>extraNativeMessagingHosts = [ pkgs.web-eid-app ];</code>.		If you're building a Firefox derivation yourself, you can override it with <code>extraNativeMessagingHosts = [ pkgs.web-eid-app ];</code>.

	== Google Chrome / Chromium ==		== Google Chrome / Chromium ==

Tristan: Correct invalid option name

2026-01-18T13:24:38Z

Correct invalid option name

← Older revision		Revision as of 13:24, 18 January 2026
Line 22:		Line 22:

	<syntaxhighlight lang="nix">		<syntaxhighlight lang="nix">
	programs.firefox.nativeMessagingHosts~~.packages~~ = [ pkgs.web-eid-app ];		programs.firefox.nativeMessagingHosts = [ pkgs.web-eid-app ];
	</syntaxhighlight>		</syntaxhighlight>

WoutSwinkels: Add a paragraph for Belgian eID cards

2025-09-26T12:54:58Z

Add a paragraph for Belgian eID cards

← Older revision		Revision as of 12:54, 26 September 2025
Line 98:		Line 98:

	Invoke <code>setup-browser-eid</code> to configure (and whenever this gets garbage-collected), and restart your browser.		Invoke <code>setup-browser-eid</code> to configure (and whenever this gets garbage-collected), and restart your browser.

			== Belgian eID cards ==
			The Web eID browser extension, used for authentication with Belgian eID cards, requires the PKCS#11 module <code>libbeidpkcs11.so.0</code> to be available in the directory <code>/usr/lib/x86_64-linux-gnu/</code>. Since this directory does not exist by default on NixOS, the Web eID application installed on the host system will not detect or support Belgian eID cards.

			To resolve this, you can create a symlink from the Nix store version of <code>beidpkcs11.so</code>, provided by the <code>eid-mw</code> package, into <code>/usr/lib/x86_64-linux-gnu/</code>:<syntaxhighlight lang="nix">system.activationScripts.web-eid-app = {
			text = ''
			mkdir -p /usr/lib/x86_64-linux-gnu
			ln -sf ${pkgs.eid-mw}/lib/pkcs11/beidpkcs11.so /usr/lib/x86_64-linux-gnu/libbeidpkcs11.so.0
			'';
			};</syntaxhighlight>This script ensures the required symlink is created at system activation time and remains up to date with the correct Nix store path for <code>eid-mw</code>.
	[[Category:Hardware]]		[[Category:Hardware]]
	[[Category:Applications]]		[[Category:Applications]]
	[[Category:Web Applications]]		[[Category:Web Applications]]

Mizule: replace deprecated option

2025-08-29T13:37:16Z

replace deprecated option

← Older revision		Revision as of 13:37, 29 August 2025
Line 22:		Line 22:

	<syntaxhighlight lang="nix">		<syntaxhighlight lang="nix">
	programs.firefox.nativeMessagingHosts.~~euwebid~~ = ~~true~~;		programs.firefox.nativeMessagingHosts.packages = [ pkgs.web-eid-app ];
	</syntaxhighlight>		</syntaxhighlight>

Shelvacu: Remove unnecessary `with pkgs;`

2024-06-29T21:36:43Z

Remove unnecessary `with pkgs;`

← Older revision		Revision as of 21:36, 29 June 2024
Line 80:		Line 80:

	<syntaxhighlight lang="nix">		<syntaxhighlight lang="nix">
	environment.systemPackages = ~~with pkgs;~~ [		environment.systemPackages = [
	# Wrapper script to tell to Chrome/Chromium to use p11-kit-proxy to load		# Wrapper script to tell to Chrome/Chromium to use p11-kit-proxy to load
	# security devices, so they can be used for TLS client auth.		# security devices, so they can be used for TLS client auth.

Klinger: Category:Hardware Category:Applications Category:Web Applications

2024-04-24T20:37:43Z

Category:Hardware Category:Applications Category:Web Applications

← Older revision		Revision as of 20:37, 24 April 2024
Line 98:		Line 98:

	Invoke <code>setup-browser-eid</code> to configure (and whenever this gets garbage-collected), and restart your browser.		Invoke <code>setup-browser-eid</code> to configure (and whenever this gets garbage-collected), and restart your browser.
			[[Category:Hardware]]
			[[Category:Applications]]
			[[Category:Web Applications]]

imported>Flokli at 14:54, 22 April 2023

2023-04-22T14:54:36Z

← Older revision		Revision as of 14:54, 22 April 2023
Line 87:		Line 87:
	#		#
	# https://bugs.chromium.org/p/chromium/issues/detail?id=16387		# https://bugs.chromium.org/p/chromium/issues/detail?id=16387
	#
	~~# Firefox users can just set~~
	~~# extraPolicies.SecurityDevices.p11-kit-proxy "${pkgs.p11-kit}/lib/p11-kit-proxy.so";~~
	~~# when overriding the firefox derivation.~~
	(pkgs.writeShellScriptBin "setup-browser-eid" ''		(pkgs.writeShellScriptBin "setup-browser-eid" ''
	NSSDB="''${HOME}/.pki/nssdb"		NSSDB="''${HOME}/.pki/nssdb"

imported>Flokli at 14:50, 22 April 2023

2023-04-22T14:50:34Z

← Older revision		Revision as of 14:50, 22 April 2023
Line 19:		Line 19:

	== Firefox ==		== Firefox ==
	If you're using Firefox, and <code>programs.firefox.enable = true</code> to configure your firefox, you can set <~~code~~>programs.firefox.nativeMessagingHosts.euwebid = true;</~~code~~>.		If you're using Firefox, and <code>programs.firefox.enable = true</code> to configure your firefox, you can set:

			<syntaxhighlight lang="nix">
			programs.firefox.nativeMessagingHosts.euwebid = true;
			</syntaxhighlight>


	If you're building a firefox derivation yourself, you can override it with <code>extraNativeMessagingHosts = [ pkgs.web-eid-app ];</code>.		If you're building a firefox derivation yourself, you can override it with <code>extraNativeMessagingHosts = [ pkgs.web-eid-app ];</code>.

imported>Flokli at 14:46, 22 April 2023

2023-04-22T14:46:52Z

@@ Line 19: / Line 19: @@
 == Firefox ==
-If you're using Firefox, and  <code>programs.firefox.enable = true</code> to configure your firefox, you can set <code>ic|programs.firefox.nativeMessagingHosts.euwebid = true}</code>.
+If you're using Firefox, and  <code>programs.firefox.enable = true</code> to configure your firefox, you can set <code>programs.firefox.nativeMessagingHosts.euwebid = true;</code>.
 If you're building a firefox derivation yourself, you can override it with <code>extraNativeMessagingHosts = [ pkgs.web-eid-app ];</code>.
@@ Line 46: / Line 46: @@
 == PKCS#11 ==
-Note some websites still use PKCS#11 instead of Web eID. This requires different configuration.
+Note some websites still use PKCS#11 instead of Web eID (for Estonian ID cards). This requires different configuration.