Confirmed working configuration

[xvdessel]

I can confirm that this setup works:
Fedora 38 (kernel 6.6.6)
eid-mw 5.1.15
pcsc-lite 1.9.9
VASCO Digipass 905 Smart reader
Google chrome 120

Regards,
Xavier

[roelderickx]

@jovanbulck confirmed his setup:

• Ubuntu 22
• Alcor Micro AU9540 reader built-in a HP EliteBook 840 14 inch G9 Notebook PC

[equaeghe]

I can confirm that this code works to get itsme activated.

System details:

• up-to-date stable Gentoo
• Python 3.12.6
• pcsc-lite 2.0.1
• Firefox 131.0
• Smartcard reader: AU9540 built-in to Lenovo T14

I installed the missing dependency nativemessaging-ng in a venv, as it would not be installed through Gentoo's native package manager. I then ran the instructions in that venv. For some reason, I had to install requests there as well, even though I had it installed, but I got a ‘not found’ error.

I got

• Connective signing extension 1.0.5

I used it for activating itsme for a new phone (I guess I used a borrowed a Windows system previously). That worked by insisting, i.e., trying a second time, as the first time, there occurred an error when reading data from my eID.

[berenddeschouwer]

Works

• Fedora 41 beta
• Firefox 131.0.3
• eid 5.1.18
• Connective signing extension 1.0.5
• Smartcard reader: Intopic CR-35 "Generic USB2.0-CRW [Smart Card Reader Interface] 00" (usb id 0bda:0169)

First attempt failed, second attempt succeeded.

[marnux]

Confirmed working (for what i need it)

• Debian Sid
• Firefox 128.5.0 Extended support release
• eid 5.1.18
• Connective signing extension 1.0.5
• Reader: VASCO DIGIPASS 870 0 card reader

I installed the dependencies in the Debian python3 stack, as there was an issue compiling pyscard, as no headers found, in the virtual env. That allowed the first part of the setup. For the nativemessaging-ng, i then needed to create a virtual env to get that manifest installed.

Thank you very much for this piece of software. It's a life saver.

[roelderickx]

It is not super urgent, but when I find the time I'll document the use of the virtual env, which is the preferred way of installing the manifest. I created #31 for follow up.

[marnux]

I think i made the full venv setup work on Debian Sid, by installing libpcsclite-dev package, to get the smartcard related header files. That way it seemed to compile the wheel for pyscard correctly.

[EricLafortune]

Works flawlessly (without the virtual env) on:

• Linux Mint 21.1
• Firefox 133.0.3
• Connective signing extension 1.0.5
• Reader: Advanced Card Systems, ACR39U

Thanks!

[lucascool12]

Works perfectly, thanks!

• NixOS 24.11
• Firefox 135.0.1
• Connective signing extension 1.0.5
• Reader: VASCO digipas 905

NixOS specific things

Instead of providing a global python interpreter, I opted for creating a derivation with the needed dependencies for the connective-backend.py file. And then I changed the path in the ~/.mozilla/native-messaging-hosts/com.connective.signer.json to the result of the build of the provided derivation (nix-build connective-plugin-linux.nix). I hope this helps any future NixOS users.

connective-backend.py derivation

let
  pkgs = import <nixpkgs> {};
  connective-plugin-linux = {
    stdenv,
    fetchFromGitHub,
    python3,
  }:
  stdenv.mkDerivation {
    name = "connective-plugin-linux";
    version = "2025-03-06";
    pyproject = false;

    src = fetchFromGitHub {
      owner = "roelderickx";
      repo = "connective-plugin-linux";
      rev = "e5438e66b4161419d1e27bbe6bf636c397304de2";
      hash = "sha256-wtclPqccLh/UE5tdloO48AtKgaTi8zNN4NIIqpN+6/U=";
    };

    propagatedBuildInputs = [
      (python3.withPackages (pythonPackages: with pythonPackages; [
        tkinter
        pyscard
        requests
      ]))
    ];

    installPhase = ''
      mkdir -p $out/bin
      install -Dm755 connective-backend.py $out/bin/
    '';
  };
in pkgs.callPackage connective-plugin-linux {}

[kirmaha]

Hurray, I could run your beautiful script:

• Debian Stable 13 (trixie) x86_64
• Firefox ESR 140.5.0
• Connective signing extension 1.0.5
• Reader: ACS ACR38U-CFC-BLI
• Usecase: reactivate Itsme (on a new phone) with a Belgian ID

# Needed during install process (after `sudo apt-get install libpcsclite-dev python3-pyscard python3-tk`):
sudo apt install python3.13-venv

# Create and enter venv:
python3 -m venv venv-nm (defaults in ~/)
source venv-nm/bin/activate

# Download the code repo as .zip, then unzip, then cd to the unzipped repository and install requirements
cd ~/Downloads/connective-plugin-linux-main
python3 -m pip install requests
pip install -r optional-requirements.txt

# Run script, then link it to the backend
python get_connective_plugin.py
nativemessaging-ng install firefox

[installe]

I confirm that this works for Debian GNU/Linux 12.12.
I did have to install the following additional packages:

python3-tk
python3-pyscard

I expressed my anger at itsme support for not supporting Linux, I've told them about your repository, told them they ought to compensate you for your work, and build a tutorial or debian package around it.

[roelderickx]

I expressed my anger at itsme support for not supporting Linux, I've told them about your repository, told them they ought to compensate you for your work, and build a tutorial or debian package around it.

It is not an Itsme issue but instead a Connective limitation. They decided Linux support is unnecessary but in fact they should provide support, not me. And maybe they should pay me, but to be honest this project came to exist out of frustration, not greed.

That being said, Itsme is defective in the same way since they are limited to smartphones. Apparently we all agreed a private company is allowed to store our identities, but then at least I'd expect something useful in return. Being able to log in or sign documents using a PC for example. It shouldn't be too hard to implement, because ironically that's exactly what happens when you sign up for Itsme. If you look at it that way it's unclear what problem they were trying to solve in the first place.

Then it is rather inappropriate how they brag about their significant user base once in a while, while all I hear from those users is that they were forced into using Itsme. To me it's very clear the added value isn't there for the user but in stead for the enterprises relying on Itsme. I'm afraid you have the answer to their we-dont-care-about-linux mindset there. In fact they don't care about you at all, no matter what system you use.