Arch Linux User Repository

❗Possible breaking change introduced in commit 851734d. The PKCS #11 module Atostek-ID-PKCS11.so was moved from /usr/lib/ to /usr/lib/pkcs11/, because the latter is the proper directory in Arch Linux for PKCS #11 modules. If you have configured any program with absolute paths, e.g. /usr/lib/Atostek-ID-PKCS11.so, please reconfigure accordingly.

❗Possible breaking change introduced in commit 851734d. The PKCS #11 module Atostek-ID-PKCS11.so was moved from /usr/lib/ to /usr/lib/pkcs11/, because the latter is the proper directory in Arch Linux for PKCS #11 modules. If you have configured any program with absolute paths, e.g. /usr/lib/Atostek-ID-PKCS11.so, please reconfigure accordingly.

@neonmoe, Thanks for the heads up.

I have created another AUR package (libqpdf29) that provides an older version (29) of the QPDF library that is compatible with atostekid. The package contains only the library /usr/lib/libqpdf.so.29{,.10.1} and license files. In other words, it can coexist with the current system qpdf package.

I'm getting the following error since the latest update to the qpdf package:

atostekid: error while loading shared libraries: libqpdf.so.29: cannot open shared object file: No such file or directory

Downgrading from qpdf-12.0.0-1 to qpdf-11.10.1-1 made atostekid work again. Rebuilding this package didn't seem to fix the issue. Since this is a .deb, and not built from source, maybe this needs an upstream update to fix?

In any case, the qpdf version requirement could be specified in this package's dependencies, so it'd be a bit easier to see what should be downgraded to which version to make this work.

@ewtoombs thank you for the bug report.

That issue seems to occur when installing via a non-GUI session. atostekid appears to require a GUI session even for the -installSCSCA option, which extracts the Signature Creation Service (SCS) certificate. I added error handling for that case.

The actual software seems to work fine on firefox after I add /usr/lib/Atostek-ID-PKCS11.so as a Security Device. Maybe this should also be in the post-install information.

That is a good idea. But as there are also other browsers, I'm afraid it would become a huge info dump :) Maybe this package would benefit from a page in the Arch Wiki.

It would also be nice to make /usr/lib/Atostek-ID-PKCS11.so available as a Security Device to Firefox and other browsers directly via the install script. And to do it such a way that it would be available to all users. I am not sure what would be the best way achieve that though. The official Debian package of atostekid has install scripts that do some unorthodox things. For example, they scan the home directory of the user who installs the package for all browsers and profiles and then modifies those settings. That is a bit concerning. Installing a system package should not touch a user's home directory. I avoided such behaviour in this AUR package even though it is what the upstream does.

I got a bunch of errors from the install script:

(1/2) installing atostekid                                                                                                               [###################################################################################] 100%
==> NOTE: Extracting certificate
Authorization required, but no authorization protocol specified

qt.qpa.xcb: could not connect to display :0
qt.qpa.plugin: From 6.5.0, xcb-cursor0 or libxcb-cursor0 is needed to load the Qt xcb platform plugin.
qt.qpa.plugin: Could not load the Qt platform plugin "xcb" in "" even though it was found.
This application failed to start because no Qt platform plugin could be initialized. Reinstalling the application may fix this problem.

Available platform plugins are: offscreen, minimal, linuxfb, xcb, minimalegl, vnc, eglfs, vkkhrdisplay.

/tmp/alpm_J6LZuu/.INSTALL: line 20:  5817 Aborted                 (core dumped) atostekid -installSCSCA
install: cannot stat '/tmp/tmp.UCofPRtI6z/.local/share/Atostek Oy/Atostek ID/scsca.cer': No such file or directory
==> NOTE: Trusting Atostek ID Local SCS CA
p11-kit: couldn't open and map file: /etc/atostekid/scsca.cer: Unknown error 2
p11-kit: failed to parse file: /etc/atostekid/scsca.cer
==> WARN: atostekid requires that the PC/SC Smart Card Daemon systemd service (pcscd.service) is running. Please ensure it is running before launching atostekid.
Optional dependencies for atostekid
    gnome-shell-extension-appindicator: System tray indicator extension for GNOME desktop
    libappindicator-gtk3: System tray support for desktop environments

The actual software seems to work fine on firefox after I add /usr/lib/Atostek-ID-PKCS11.so as a Security Device. Maybe this should also be in the post-install information.

I have the same device (Identiv uTrust 2700 R Smart Card Reader) and everything works on my end.

I don't have the file /usr/lib/pcsc/drivers/scmccid.bundle/Contents/Linux/libscmccid.so.5.0.35 at all on my system:

$ tree /usr/lib/pcsc/drivers/
/usr/lib/pcsc/drivers/
├── ifd-ccid.bundle
│   └── Contents
│       ├── Info.plist -> /etc/libccid_Info.plist
│       └── Linux
│           └── libccid.so
└── serial
    └── libccidtwin.so

It seems that libusb-0.1.so.4 is provided by libusb-compat:

$ pkgfile libusb-0.1.so.4
extra/libusb-compat

But I don't have that installed as everything works fine with the current libusb version.

I wonder where you got /usr/lib/pcsc/drivers/scmccid.bundle/Contents/Linux/libscmccid.so.5.0.35?

Perhaps from the scmccid AUR package? https://aur.archlinux.org/packages/scmccid

I'm getting the following error in the pcscd.service logs:

helmi 22 19:36:01 numakuro systemd[1]: Started PC/SC Smart Card Daemon.
helmi 22 19:36:01 numakuro pcscd[21230]: 00000000 ../PCSC/src/dyn_unix.c:59:DYN_LoadLibrary() /usr/lib/pcsc/drivers/scmccid.bundle/Contents/Linux/libscmccid.so.5.0.35: libusb-0.1.so.4: cannot open shared object file: No such file or directory
helmi 22 19:36:01 numakuro pcscd[21230]: 00000006 ../PCSC/src/readerfactory.c:1111:RFInitializeReader() RFLoadReader failed: 0x80100014
helmi 22 19:36:01 numakuro pcscd[21230]: 00000002 ../PCSC/src/readerfactory.c:371:RFAddReader() Identiv uTrust 2700 R Smart Card Reader [CCID Interface] (53692026234532) init failed.
helmi 22 19:36:01 numakuro pcscd[21230]: 00000002 ../PCSC/src/hotplug_libudev.c:517:HPAddDevice() Failed adding USB device: Identiv uTrust 2700 R Smart Card Reader

My system is up-to-date, and this is right after building the package, so it's just kinda odd to see a dll loading error. I have libusb-1.0.so.0.4.0 in my /usr/lib, which makes the error look like a typo somewhere (it seems to be asking for version 0.1, but I have 1.0).