Arch Linux User Repository

@s.pantaleev Your modified PKGBUILD works for me (new Italian healthcare card). My old smartcard works using opensc-pkcs11.so from opensc only. My new smartcard needs the new 622 driver taken from the .deb package.

I couldn't get my old non-Italian card working with the new driver.

Here's the PKGBUILD I used:

pkgname=bit4id-ipki
pkgver=1.4.10.622
pkgrel=1
pkgdesc="Bit4ID Universal Middleware (Smart Card driver)"
arch=('x86_64')
license=('unknown')
url="http://www.bit4id.com/"
install=$pkgname.install
options=('!strip')

ARCH='amd64'
md5sums=('1a65703ee7298e21842041a722ee4831')

_file_name='libbit4xpki-idemia-'$ARCH'.1.4.10-622.deb'
source=('https://swdownload1.agenziaentrate.gov.it/pub/sanita/'$_file_name)

package() {
        ar -xv $_file_name || return 1
        tar -xvf data.tar.[xg]z -C $pkgdir || return 1

        # Delete the graphical "Bit4id PKI Manager" utility, etc.
        # We only retain the actual driver (usr/lib).
        rm -rf $pkgdir/usr/share
}

@s.pantaleev

/usr/lib/libbit4ipki.so and /usr/lib/libbit4p11.so.0 are missing from your Debian package. Not sure if those are necessary though.

libbit4xpki.so should be the new universal driver instead of libbit4ipki.so

libbit4p11.so.0 should be provided by opensc.

In my experience neither the old 542 driver not opensc are able to recognize the new Italian Health Card. On the contrary the 622 works with all card models, older and newer.

Look at https://sistemats1.sanita.finanze.it/portale/elenco-driver-cittadini-modalita-accesso

Test your cards and you'll see. (tell me if I'm wrong)

Your Debian package contains much more stuff in /usr/share -- some pinmanager program (which seems to bundle Python2.7 and various Python packages), some .desktop files for pinmanager.

Looks like someone has bundled a bunch of unrelated software to the actual "driver" package.

Yes, the package contain the graphic PIN utility "Bit4id PKI Manager". Maybe you can rid of /usr dir in the Arch package, /lib is just 1.8 Mb.

@spooky, I've checked that Debian package. It seems like it's much larger (30MB vs 1.3MB) and has multiple differences with the one we use right now:

1. /usr/lib/libbit4ipki.so and /usr/lib/libbit4p11.so.0 are missing from your Debian package. Not sure if those are necessary though.

2. Your Debian package contains much more stuff in /usr/share -- some pinmanager program (which seems to bundle Python2.7 and various Python packages), some .desktop files for pinmanager.

Looks like someone has bundled a bunch of unrelated software to the actual "driver" package.

https://swdownload1.agenziaentrate.gov.it/pub/sanita/libbit4xpki-idemia-amd64.1.4.10-622.deb

Just updated to a -2 build of the package, which works quite well for me.

Thanks @peshev and @ignisf!

@peshev, thanks! Seems like there's trouble even with that patch. Getting this error during the install: ldconfig: Cannot mmap file /usr/lib/libbit4ipki.so.rc. ldconfig: /usr/lib/libbit4ipki.so.conf is not an ELF file - it has the wrong magic bytes at the start.

I've introduced a couple of fixes in the PKGBUILD: 1. It doesn't actually build, since the data archive extension in the deb file changed from .tar.gz to tar.xz - that may be due to the .deb file changing, or might be due to a newer version of ar, or something else. In any case, I've modified it so that it accepts both a .tar.gz and a .tar.xz extension. 2. It doesn't work once the built package is installed. pkgbuild does symbol stripping on all binaries (executables and shared object files) by default - that seems to break libbit4xpki.so for some arcane reason. The stripped version can't see any slots for the plugged in reader, and is basically useless. The PKGBUILD patch follows: diff --git a/PKGBUILD b/PKGBUILD index 5770c2c..50fa194 100644 --- a/PKGBUILD +++ b/PKGBUILD @@ -8,6 +8,7 @@ arch=('i686' 'x86_64') license=('unknown') url="http://www.bit4id.com/" install=$pkgname.install +options=('!strip') if [ "${CARCH}" = 'x86_64' ]; then ARCH='amd64' @@ -22,5 +23,5 @@ source=('http://repository.infonotary.com/install/linux/DEBS-2016-11-01/pool/non package() { ar -xv $_file_name || return 1 - tar -xvf data.tar.gz -C $pkgdir || return 1 + tar -xvf data.tar.[xg]z -C $pkgdir || return 1 }

Thanks for the upgrade. But there seems to be a problem: ==> Download dei sorgenti in corso... -> Download di bit4id-ipki_1.4.3.303-1_amd64.deb in corso... % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 981k 100 981k 0 0 143k 0 0:00:06 0:00:06 --:--:-- 165k ==> Validazione di source file con md5sums... bit4id-ipki_1.4.3.303-1_amd64.deb ... Verificato ==> Estrazione dei sorgenti in corso... -> Estrazione di bit4id-ipki_1.4.3.303-1_amd64.deb usando bsdtar in corso... ==> Entro nell'ambiente fakeroot... ==> Avvio di package() in corso... x - debian-binary x - control.tar.gz x - data.tar.xz tar: data.tar.gz: funzione "open" non riuscita: File o directory non esistente tar: Error is not recoverable: exiting now ==> ERRORE: Si è verificato un errore in package(). L'operazione sta per essere interrotta... ==> ERRORE: Makepkg non è riuscito a compilare bit4id-ipki. ==> Riavviare la compilazione di bit4id-ipki [s/N]