{{tag>"smart card" chrome}}

====== Prijava na e-građanin preko e-osobne koristeći smart card čitač ======

[[https://www.google.com/chrome/|Instaliraj Chrome Browser]] mora biti Debian paket.

[[https://www.certilia.com/preuzimanja/|Instaliraj Certilia]] aplikaciju.

Aktiviraj e-osobnu preko Certilia client ako već nisi. 

Prikopčaj smart card reader s osobnom.

Zatvori sve browsere i u terminalu dodaj Certilia certifikate u Chrome store (on koristi Firefoxov store isto):

<code bash>
# install nss tools
~$ sudo apt install libnss3-tools

# provjeri trenutnu bazu
~$ modutil -dbdir sql:.pki/nssdb/ -list

# dodaj certila certove                                            
~$ modutil -dbdir sql:.pki/nssdb/ -add "eOsobnaCertilia" -libfile /opt/certiliamiddleware/pkcs11/libCertiliaPkcs11.so

# sad bi trebao biti izlistan novi modul
~$ modutil -dbdir sql:.pki/nssdb/ -list

Listing of PKCS #11 Modules
-----------------------------------------------------------
  1. NSS Internal PKCS #11 Module
	   uri: pkcs11:library-manufacturer=Mozilla%20Foundation;library-description=NSS%20Internal%20Crypto%20Services;library-version=3.98
	 slots: 2 slots attached
	status: loaded
...
  2. eOsobnaCertilia
	library name: /opt/certiliamiddleware/pkcs11/libCertiliaPkcs11.so
...
</code>

Može biti bilo koje ima za "eOsobnaCertilia".

Ako je sve prošlo ok, u Chrome URL bar upiši ''chrome:%%//%%certificate-manager''
gdje bi novi certifikat trebao biti dodan. Pitati će za identifikaciji pin, pa potpisni pin pa opet identifikacijski. 


{{ :wiki:screenshots:2025:akd_local_cert_login.png?400 |}}
{{ :wiki:screenshots:2025:akd_local_cert_login2.png?400 |}}

U "Your cerficates" bi trebao biti cert. s tvojim imenom sad.

{{ :wiki:screenshots:2025:akd_local_certs1.png?400 |}}
{{ :wiki:screenshots:2025:akd_local_certs2.png?400 |}}

Nakon unosa trebao bi proći login na https://nias.gov.hr/Authentication/Step2 preko e-Osobne.

{{ :wiki:screenshots:2025:akd_cert_popup.png?400 |}}


====== Tested on ======
  * [[https://www.amazon.com/MANHATTAN-Smart-Card-Reader-102049/dp/B077BXBN6Y|Manhattan smart card reader]]
  * e-osobna
  * Google Chrome Version 137.0.7151.103 (Official Build) (64-bit) (debian paket)
  * Ubuntu 24.04.2 LTS

====== See also ======

====== References ======
  * https://linuxkamarada.com/en/2019/09/26/setting-up-smart-card-authentication-on-google-chrome-chromium/
  * https://support.certilia.com/show/nemogucnost-prijave-na-certilia-portal-u-macos-u-i-linux-os-u-zbog-certifikata-koji-nije-valjan-ili-dostupan