public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

eid-mw: 4.1.19 -> 4.4.1

Browse Source 
Urgent version bump as tax season is coming and 4.1.19 is not compatible
with firefox anymore.

eid-viewer was merged upstream with eid-mw, so it is included here now.
This commit is contained in:
Bernard Fortz 2018-05-05 21:00:06 +02:00
parent 0c4f72c377
commit d84a06feca
1 changed files with 21 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

35
pkgs/tools/security/eid-mw/default.nix
View File

@ -2,7 +2,8 @@
, autoreconfHook, pkgconfig , autoreconfHook, pkgconfig
, gtk3, nssTools, pcsclite , gtk3, nssTools, pcsclite
, libxml2, libproxy , libxml2, libproxy
, openssl, curl }: , openssl, curl
, makeWrapper }:
stdenv.mkDerivation rec { stdenv.mkDerivation rec {
name = "eid-mw-${version}"; name = "eid-mw-${version}";
@ -15,7 +16,7 @@ stdenv.mkDerivation rec {
owner = "Fedict"; owner = "Fedict";
}; };
nativeBuildInputs = [ autoreconfHook pkgconfig ]; nativeBuildInputs = [ autoreconfHook pkgconfig makeWrapper ];
buildInputs = [ gtk3 pcsclite libxml2 libproxy curl openssl ]; buildInputs = [ gtk3 pcsclite libxml2 libproxy curl openssl ];
preConfigure = '' preConfigure = ''
mkdir openssl mkdir openssl
@ -31,39 +32,45 @@ stdenv.mkDerivation rec {
configureFlags = [ "--enable-dialogs=yes" ]; configureFlags = [ "--enable-dialogs=yes" ];
enableParallelBuilding = true;
doCheck = true;
postInstall = '' postInstall = ''
install -D ${./eid-nssdb.in} $out/bin/eid-nssdb install -D ${./eid-nssdb.in} $out/bin/eid-nssdb
substituteInPlace $out/bin/eid-nssdb \ substituteInPlace $out/bin/eid-nssdb \
--replace "modutil" "${nssTools}/bin/modutil" --replace "modutil" "${nssTools}/bin/modutil"
# Only provides a useless "about-eid-mw.desktop" that segfaults anyway: rm $out/bin/about-eid-mw
rm -r $out/share/applications $out/bin/about-eid-mw wrapProgram $out/bin/eid-viewer --prefix XDG_DATA_DIRS : "$out/share/gsettings-schemas/$name"
''; '';
enableParallelBuilding = true;
doCheck = true;
meta = with stdenv.lib; { meta = with stdenv.lib; {
description = "Belgian electronic identity card (eID) middleware"; description = "Belgian electronic identity card (eID) middleware";
homepage = http://eid.belgium.be/en/using_your_eid/installing_the_eid_software/linux/; homepage = http://eid.belgium.be/en/using_your_eid/installing_the_eid_software/linux/;
license = licenses.lgpl3; license = licenses.lgpl3;
longDescription = '' longDescription = ''
Allows user authentication and digital signatures with Belgian ID cards. Allows user authentication and digital signatures with Belgian ID cards.
Also requires a running pcscd service and compatible card reader. Also requires a running pcscd service and compatible card reader.
eid-viewer is also installed.
**TO FIX:**
The procedure below did not work for me, I had to install the .so directly in firefox as instructed at
https://eid.belgium.be/en/log-eid#7507
and specify
/run/current-system/sw/lib/libbeidpkcs11.so
as the path to the module.
This package only installs the libraries. To use eIDs in Firefox or
Chromium, the eID Belgium add-on must be installed.
This package only installs the libraries. To use eIDs in NSS-compatible This package only installs the libraries. To use eIDs in NSS-compatible
browsers like Chrom{e,ium} or Firefox, each user must first execute: browsers like Chrom{e,ium} or Firefox, each user must first execute:
~$ eid-nssdb add ~$ eid-nssdb add
(Running the script once as root with the --system option enables eID (Running the script once as root with the --system option enables eID
support for all users, but will *not* work when using Chrom{e,ium}!) support for all users, but will *not* work when using Chrom{e,ium}!)
Before uninstalling this package, it is a very good idea to run Before uninstalling this package, it is a very good idea to run
~$ eid-nssdb [--system] remove ~$ eid-nssdb [--system] remove
and remove all ~/.pki and/or /etc/pki directories no longer needed. and remove all ~/.pki and/or /etc/pki directories no longer needed.
''; '';
platforms = platforms.linux; platforms = platforms.linux;