Bug 2283640 - Replace deprecated webextension-token-signing package with web-eid
Summary: Replace deprecated webextension-token-signing package with web-eid
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: open-eid
Version: rawhide
Hardware: x86_64
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: Germano Massullo (Thetra)
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On: 2298838
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-05-28 13:35 UTC by bugzilla
Modified: 2024-11-12 10:03 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2024-11-04 14:10:20 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description bugzilla 2024-05-28 13:35:00 UTC
Reopening for Fedora 40.

The webextension-token-signing project is now deprecated in favour of the new Web eID project.

As per project readme:
> Please note that the active development and management of the Token Signing component has ended due to the transition to the new web authentication and signing solution (Web eID).

In addition, the instructions at [1] also indicate that the "Token signing" extension must be explicitly removed.

Arun Babu Neelicattu <arun.neelicattu> has packaged the web-eid-app [2]. The spec file is located at [3]. The built packages are available on copr [4]. 

[1] https://www.id.ee/en/article/configuring-google-chrome-for-using-the-id-card/
[2] https://github.com/web-eid/web-eid-app
[3] https://github.com/abn/web-eid-rpm
[4] https://copr.fedorainfracloud.org/coprs/abn/web-eid/

Actual Results:  
No native application appears, error is displayed.

Expected Results:  
Native application appears and requested transaction is started once card is detected.

As per official documentation it is expected that web-eid is made available with the installation of the Open eID package.

> The recommended way of installing Web eID is by installing the latest Open-EID ID-software package.

See https://web-eid.eu/#usage.

Reproducible: Always

Steps to Reproduce:
1. Install open-eid package.
2. Go to https://web-eid.eu/
3. Under "Usage" section, under "Testing" subsection, press "Authenticate" 
Actual Results:  
No native application appears, error is displayed.

Expected Results:  
Native application appears and requested transaction is started once card is detected.

As per official documentation it is expected that web-eid is made available with the installation of the Open eID package.

> The recommended way of installing Web eID is by installing the latest Open-EID ID-software package.

See https://web-eid.eu/#usage.

Comment 1 Germano Massullo (Thetra) 2024-06-21 13:48:46 UTC
(In reply to simon.c.dalzell from comment #0)
> Arun Babu Neelicattu <arun.neelicattu> has packaged the
> web-eid-app [2]. The spec file is located at [3]. The built packages are
> available on copr [4]. 
> 
> [1]
> https://www.id.ee/en/article/configuring-google-chrome-for-using-the-id-card/
> [2] https://github.com/web-eid/web-eid-app
> [3] https://github.com/abn/web-eid-rpm
> [4] https://copr.fedorainfracloud.org/coprs/abn/web-eid/


Hello Arun, would you like to join open-eid maintainers by porting your RPM in official Fedora repositories?

Comment 2 Germano Massullo (Thetra) 2024-07-19 11:41:50 UTC
Package Review is welcome
https://bugzilla.redhat.com/show_bug.cgi?id=2298838

Comment 3 Arun Babu Neelicattu 2024-07-19 12:09:42 UTC
Hi Germano. Happy to help the best I can. Apologies for the delay in responding here, been busy lately.

Let me know what I can do right now to help.

Comment 4 Germano Massullo (Thetra) 2024-07-21 09:21:14 UTC
(In reply to Arun Babu Neelicattu from comment #3)
> Hi Germano. Happy to help the best I can. Apologies for the delay in
> responding here, been busy lately.
> 
> Let me know what I can do right now to help.

Hi, I am about to include your package into Fedora repositories and add you as co-maintainer. I saw that your FAS account is not in the list of official Fedora packagers. In order to be an official Fedora package maintainer you need to go through https://docs.fedoraproject.org/en-US/package-maintainers/Joining_the_Package_Maintainers/
I can be your sponsor

Comment 5 Germano Massullo (Thetra) 2024-07-21 13:40:09 UTC
Hi Dmitri, are you able to do the package review of web-eid? https://bugzilla.redhat.com/show_bug.cgi?id=2298838

Comment 6 Germano Massullo (Thetra) 2024-09-24 17:17:33 UTC
Hello Arun, you are not yet a member of Fedora packager group, so I cannot add you among web-eid admins.
This is the procedure
https://docs.fedoraproject.org/en-US/package-maintainers/Joining_the_Package_Maintainers/
I am available to sponsor you
Cheers

Comment 7 Germano Massullo (Thetra) 2024-09-24 17:51:46 UTC
Can anybody please login and leave a karma feedback?
https://bodhi.fedoraproject.org/updates/?packages=web-eid

Comment 8 Germano Massullo (Thetra) 2024-10-09 13:17:29 UTC
I also updated open-eid meta package, can you please login and leave a karma feedback? Is quite urgent
F40 https://bodhi.fedoraproject.org/updates/FEDORA-2024-4369320abd
F39 https://bodhi.fedoraproject.org/updates/FEDORA-2024-3b8ecb5149

Comment 9 Arun Babu Neelicattu 2024-11-03 16:54:52 UTC
I have left karma feedbacks for bot F40 and F41. - a bit too late I guess :(

Comment 10 Germano Massullo (Thetra) 2024-11-04 14:10:20 UTC
(In reply to Arun Babu Neelicattu from comment #9)
> I have left karma feedbacks for bot F40 and F41. - a bit too late I guess :(

Hi, yes but currently these builds reached stable branch anyways

Comment 11 Arun Babu Neelicattu 2024-11-12 01:08:46 UTC
Following up on DM conversation with Germano, one thing I noticed while building the spec file locally was that the source file in the build environment is not the same as the source defined in the spec file. Unsure if I should raise a new ticket for this one.

> $ cat sources 
> SHA512 (web-eid-2.5.0.tar.gz) = 1ab370c3553ef04145e66577c93ea25310c385409a0f23aff3b20f41cd4ce2664abf914f9c8b985b269550e24f04fbda53fcad3867db073b6f2600dfb0836f0b
> $ fedpkg sources
> Downloading web-eid-2.5.0.tar.gz from https://src.fedoraproject.org/repo/pkgs
> ######################################################################## 100.0%
> $ sha512sum web-eid-2.5.0.tar.gz 
> 1ab370c3553ef04145e66577c93ea25310c385409a0f23aff3b20f41cd4ce2664abf914f9c8b985b269550e24f04fbda53fcad3867db073b6f2600dfb0836f0b  web-eid-2.5.0.tar.gz

Source file specified as SOURCE0:
> $ curl -sL https://github.com/web-eid/web-eid-app/archive/v2.5.0/web-eid-2.5.0.tar.gz | sha512sum -
> 629f797e1d28c370480fc2b57a580c93e42eecb9fbd07a0d6c23b184f7420992a776931eb38cdbf5fca87bdc6d347f1f3ef6185990cc8a1f43ad09c8aa7071e3  -

The delta is the content inside the submodule directory lib/libelectronic-id.

> $ tar tf web-eid-2.5.0.tar.gz  | grep "lib/libelectronic-id" | wc -l
> 146
> $ curl -sL https://github.com/web-eid/web-eid-app/archive/v2.5.0/web-eid-2.5.0.tar.gz | tar -ztf - | grep "lib/libelectronic-id" | wc -l
> 1

I could not find much on what the expectation is on source trees with submodules.

Comment 12 Germano Massullo (Thetra) 2024-11-12 10:03:13 UTC
Let's continue the discussion at https://bugzilla.redhat.com/show_bug.cgi?id=2325424


Note You need to log in before you can comment on or make changes to this bug.