Arch Linux User Repository

Version 3.9.4 fixes libxml2 problem - if you used libxml2-legacy workaround, it's not needed anymore. CA certificates are now properly installed. pcscd service will be enabled and started as a part of installation.

This update adds support for new Certilia and eID cards (AKD eID 2.0) shipped since May 2025. Old Middleware versions won't support new cards.

Version 3.9.4 fixes libxml2 problem - if you used libxml2-legacy workaround, it's not needed anymore. CA certificates are now properly installed. pcscd service will be enabled and started as a part of installation.

This update adds support for new Certilia and eID cards (AKD eID 2.0) shipped since May 2025. Old Middleware versions won't support new cards.

Have just tried it and the crash is gone with 3.7.8.1-1 Thank you

@maxrd2 https://websign.certilia.com

Where could I properly test the signature process online? The only thing I've found is not working (webpotpis.id.hr)

Today's update fixes segfaults in certain cases and restores the missing HRIDCA certificate. If you get conflicts due to previously installed obsolete eidmiddleware package or you added the certificate manually, remove old packages and remove the following files if necessary:

/etc/ssl/certs/HRIDCA.pem
/usr/lib/akd/certiliamiddleware/certificates/HRIDCA.pem
/usr/share/ca-certificates/akd/HRIDCA.crt

@maxrd2 Please try with the new version (3.7.8.1). If the issue persist, can you provide more details about your installation:
- card reader model
- which card (eID or Certilia commercial card)
- OpenSSL version
- is ccid package from official repository or ccid-git
- browser and its version

Thanks

@certilia Sorry not sure why I didn't get the notification. The Signer app segafults when trying to do an online signature at https://esign.certilia.com/epotpis?token=xxxxx. After selecting a signing certificate the Signer app crashes.

(gdb) run
Starting program: /usr/lib/akd/certiliamiddleware/Signer 
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/usr/lib/libthread_db.so.1".
[New Thread 0x7ffff2a006c0 (LWP 89166)]
[New Thread 0x7ffff20006c0 (LWP 89167)]
[New Thread 0x7ffff16006c0 (LWP 89168)]
[New Thread 0x7ffff0c006c0 (LWP 89169)]
[New Thread 0x7fffebe006c0 (LWP 89170)]
[New Thread 0x7fffeb4006c0 (LWP 89171)]
[New Thread 0x7fffeaa006c0 (LWP 89172)]
[New Thread 0x7fffea0006c0 (LWP 89173)]
[New Thread 0x7fffe96006c0 (LWP 89174)]
[New Thread 0x7fffe8c006c0 (LWP 89175)]
[New Thread 0x7fffe6c006c0 (LWP 89180)]
[New Thread 0x7fffe62006c0 (LWP 89184)]
[Thread 0x7fffe62006c0 (LWP 89184) exited]
[New Thread 0x7fffe62006c0 (LWP 89186)]
[Thread 0x7fffe62006c0 (LWP 89186) exited]
[New Thread 0x7fffe62006c0 (LWP 89187)]

Thread 15 "Signer" received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fffe62006c0 (LWP 89187)]
__GI__IO_fread (buf=0x7fffd4032a10, size=1, count=8, fp=0x0) at iofread.c:37
37        _IO_acquire_lock (fp);
(gdb) bt
#0  __GI__IO_fread (buf=0x7fffd4032a10, size=1, count=8, fp=0x0) at iofread.c:37
#1  0x00000000004d939c in ?? ()
#2  0x00000000004d82dc in ?? ()
#3  0x0000000000567855 in ?? ()
#4  0x0000000000567c42 in ?? ()
#5  0x0000000000567cf8 in ?? ()
#6  0x0000000000420d2f in ?? ()
#7  0x00000000004235c4 in ?? ()
#8  0x0000000000419df3 in ?? ()
#9  0x000000000041b172 in ?? ()
#10 0x000000000041b873 in ?? ()
#11 0x00007ffff66e1ecd in std::execute_native_thread_routine_compat (__p=<optimized out>) at /usr/src/debug/gcc/gcc/libstdc++-v3/src/c++11/thread.cc:118
#12 0x00007ffff64a339d in start_thread (arg=<optimized out>) at pthread_create.c:447
#13 0x00007ffff652849c in __GI___clone3 () at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:78
(gdb) cont
Continuing.
[Thread 0x7fffe62006c0 (LWP 89187) exited]
[Thread 0x7fffe6c006c0 (LWP 89180) exited]
[Thread 0x7fffe8c006c0 (LWP 89175) exited]
[Thread 0x7fffe96006c0 (LWP 89174) exited]
[Thread 0x7fffea0006c0 (LWP 89173) exited]
[Thread 0x7fffeaa006c0 (LWP 89172) exited]
[Thread 0x7fffeb4006c0 (LWP 89171) exited]
[Thread 0x7fffebe006c0 (LWP 89170) exited]
[Thread 0x7ffff0c006c0 (LWP 89169) exited]
[Thread 0x7ffff16006c0 (LWP 89168) exited]
[Thread 0x7ffff20006c0 (LWP 89167) exited]
[Thread 0x7ffff2a006c0 (LWP 89166) exited]

Program terminated with signal SIGSEGV, Segmentation fault.
The program no longer exists.
(gdb) 

AKD's certificates expired on Sep 23 so 3.7.1 no longer works. Current version is 3.7.4 and deb sum is 83652c9baacb1273b2542c0da7fb4be64f825b0075e536c01b18cca1949f2ecdf05fe3504bd9c9105d17f17180d24d0d3cc85b39af4ffd2abdc5f2df8368c7b8

Could you bump it please?

@maxrd2 Can you provide more details about when the application crashes? On start, during the signing process or elsewhere? We couldn't reproduce the issue on two Arch machines updated within past few days.

Signer application crashes with current Arch linux:

Thread 14 "Signer" received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fffe7dce6c0 (LWP 3173107)]
__GI__IO_fread (buf=0x7fffdc02f470, size=1, count=8, fp=0x0) at iofread.c:37
37        _IO_acquire_lock (fp);
(gdb) bt
#0  __GI__IO_fread (buf=0x7fffdc02f470, size=1, count=8, fp=0x0) at iofread.c:37
#1  0x00000000004d965c in ?? ()
#2  0x00000000004d859c in ?? ()
#3  0x0000000000567b15 in ?? ()
#4  0x0000000000567f02 in ?? ()
#5  0x0000000000567fb8 in ?? ()
#6  0x00000000004214bc in ?? ()
#7  0x00000000004238b4 in ?? ()
#8  0x000000000041a583 in ?? ()
#9  0x000000000041b902 in ?? ()
#10 0x000000000041c003 in ?? ()
#11 0x00007ffff66e1aec in std::execute_native_thread_routine_compat (__p=<optimized out>) at /usr/src/debug/gcc/gcc/libstdc++-v3/src/c++11/thread.cc:118
#12 0x00007ffff649d44b in start_thread (arg=<optimized out>) at pthread_create.c:444
#13 0x00007ffff6520e40 in clone3 () at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81

Here you go. Busy times...