Comments on: OpenID and the Belgian eID

By: karel1980

karel1980 — Thu, 18 Sep 2008 10:21:59 +0000

Quick update: Using this card reader OmniKey AG CardMan 3121 (took some time to get it to work). I don’t have to start firefox with the card already in place. I can just insert/remove the card at any time.

By: doegox

doegox — Tue, 29 Apr 2008 22:04:50 +0000

That’s because your eID is not available to the browser. No idea why but personally I’ve to plug the card before starting the browser. Yes it’s on the todo list: don’t make the certif check enforced by apache but let it come to php and do the tests there so I can display nice error msgs. And BTW I’ve currently some troubles with my Iceweasel since a recent upgrade (OCSP errors, SSL engine errors seldomly when starting the browser, nothing to do with the eID), but with Iceape it works fine. I assume you’ve also the middleware hooked to the browser (/usr/lib/libbeidpkcs11.so)

By: Xavier

Xavier — Tue, 29 Apr 2008 19:52:06 +0000

Hmmm… “id.yobi.be had received an incorrect or unexpected message. Error Code: -12227″

By: doegox

doegox — Tue, 29 Apr 2008 19:27:18 +0000

Well as I said you can try, feedback is always welcome! Plug your eID and go to http://id.yobi.be/?openid.mode=discover it will generate propositions of OpenID URLs for you, which you can try in turn…
But I won’t chase bugs on this version as I want to rewrite everything, this demo is more a proof of concept to get feedback on missing features etc.

By: Xavier

Xavier — Tue, 29 Apr 2008 10:52:34 +0000

Hello Philippe, it looks really interesting! Let me know if you need some beta testers

By: doegox

doegox — Tue, 29 Apr 2008 06:42:33 +0000

Hi, I did some experiments too, trying to build my own OpenID provider as I was reluctant to give a chance to a third party to link my real identity with all the websites I could log in.
Check at http://wiki.yobi.be/wiki/OpenID-eID.
The demo is working (at least with my card ).
One particularity is that you don’t have to register so the server is stateless.
Current code is a hack of phpMyID, should be rewritten with php-openid library…
Enjoy! Phil