Arch Linux User Repository

A new version is out (10.8.1050). This version fixes my issues with SafeNet eToken 5100.

I've made a patch, and there is the link to download the Thales package.

From e254d36236a814f8d64fbc12977ef700212694ee Mon Sep 17 00:00:00 2001
From: Erwan LE DISEZ <arch@groond.net>
Date: Mon, 2 Jan 2023 14:36:03 +0100
Subject: [PATCH] release 10.8.105 R1

---
 PKGBUILD | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/PKGBUILD b/PKGBUILD
index 90e4a54..62860ee 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -1,30 +1,30 @@
 pkgbase=sac-core
 pkgname=(sac-core sac-gui)
-pkgver=10.8.28
-pkgrel=5
+pkgver=10.8.1050
+pkgrel=1
 pkgdesc='Thales/Gemalto SafeNet Authentication Client for eToken 5110/5300 & IDPrime'
 url='https://cpl.thalesgroup.com/access-management/security-applications/authentication-client-token-management'
 arch=(x86_64)
 depends=(ccid pcsclite)
 optdepends=('sac-core-legacy: Support for eToken 32K/64K (CardOS 4.2)')
 license=(custom)
-source=('https://installer.id.ee/media/etoken/Linux_SAC%2010.8.28%20GA%20Build.zip'
+source=('https://www.dropbox.com/s/q66bhnjoq0xzuas/SAC_Linux_10.8.105_R1_GA.zip?dl=0'
         eToken.conf
         safenetauthenticationclient.service)
-sha256sums=('6e1f9307b6460cc87d1b895c3edbfb99cd1778686609f30caab96ab7218821a0'
+sha256sums=('18ecac33e8a1ddb894c23423074592ffd77a272a7255b519d20992662a5c699e'
             '85b850b820610e029428e577ca0e48f6fb7b4148ae8d702ca20b191963046c6c'
             'eb8b4e105d8b75f11e4b83ca6c4a605f781f50cc0f0405a5d1deccb5580fd055')
 #validpgpkeys=('B37EBA84D2EB0C786F91EEF77F8AA801285DEE57')

-_dir="SAC 10.8.28 GA Build"
-_rn_pdf="007-013841-003-SafeNet Authentication Client_ 10.8_Linux_GA_Release Notes_Rev A.pdf"
-_ag_pdf="007-013842-002_SafeNet Authentication Client_10.8_Linux_GA_Administrator_Guide_Rev A.pdf"
-_ug_pdf="007-013843-002_SafeNet Authentication Client_10.8_Linux_GA_User_Guide_Rev A.pdf"
+_dir="SAC Linux 10.8.1050 R1 GA"
+_rn_pdf="007-013841-004-SafeNet Authentication Client_10.8_R1_Linux_GA_Release_Notes.pdf"
+_ag_pdf="007-013842-002_SafeNet Authentication Client_10.8_R1_Linux_GA_Administrator_Guide_Rev C.pdf"
+_ug_pdf="007-013843-002_SafeNet Authentication Client_10.8_R1_Linux_GA_User_Guide_Rev C.pdf"

 prepare() {
   #ar x "$_dir/Installation/withoutUI/Ubuntu-2004/safenetauthenticationclient-core_${pkgver}_amd64.deb"
-  ar x "$_dir/Installation/Standard/Ubuntu-2004/safenetauthenticationclient_${pkgver}_amd64.deb"
-  bsdtar -xf data.tar.xz
+  ar x "$_dir/Installation/Standard/Ubuntu-2204/safenetauthenticationclient_${pkgver}_amd64.deb"
+  bsdtar -xf data.tar.gz
 }

 _pick() {
-- 
2.39.0

@pirofti: Well, after seeing some updates to pcscd, I just realized that the reason AKS ifdh is no longer bundled with SAC is because all remaining supported USB tokens can be handled by the standard ccid driver. So try that instead of sac-core-legacy.

Yes, pcscd needs to be restarted to reload its IFD drivers. I'm really not sure why they are not included with SAC 10.8 even though it's supposed to support the 5110.

Once pcscd sees the device, either the 10.8 or legacy 10.0 PKCS#11 modules should work identically, even without the SACSrv daemon (I think that's only used by the GUI components).

After restarting the pcscd daemon, the device was visible. So either I installed the sac-legacy package before starting the daemon, either something else was wrong, but I did manage to see the device with this. Thank you and sorry about the noise!

Thank you for the quick reply! Sorry, forgot to mention that I also have core-legacy installed and the safenet service running. So that does not fix things.

SAC 10.8 only has partial support for 5110 and is missing the PCSC "USB card reader driver" (aks-ifdh). You'll need to have sac-core-legacy installed for that.

My Safenet 5110 device is not displayed by SACTools even though I can use it in Windows and I see it in the dmesg when plugging it in. Are there any extra steps I need to run before starting SACTools? Is there any extra documentation I should read? Thank you!

I see that libeToken.so loads libcrypto.1.1 at run-time, but it seems to be optional – the PKCS#11 module still works without. Is there some functionality that requires OpenSSL?

Missing dependency openssl-1.1

A new version is out (10.8.28). I got this PKGDBUILD to work normally by replacing the source link with the link for the previous version "https://installer.id.ee/media/etoken/older%20versions/SAC%2010.7%20Linux.zip", but I suppose it could be tested with the new version and then updated.