Skip to content

New package: certiliamiddleware-3.9.8#60060

Open
mabasic wants to merge 1 commit intovoid-linux:masterfrom
mabasic:push-wwrszznomnyt
Open

New package: certiliamiddleware-3.9.8#60060
mabasic wants to merge 1 commit intovoid-linux:masterfrom
mabasic:push-wwrszznomnyt

Conversation

@mabasic
Copy link
Copy Markdown

@mabasic mabasic commented Apr 20, 2026

Testing the changes

  • I tested the changes in this PR: YES

New package

Local build testing

  • I built this PR locally for my native architecture, (x64-glibc)

Notes

I am sad to contribute with a proprietary program :( but the whole country needs it sadly...

There is a package on Arch AUR: https://aur.archlinux.org/packages/certiliamiddleware which is maintained by the company that makes the software. I have managed to get it running on my system by following instructions from PKGBUILD and applying void specific depends.

To get this package running correctly the user has to:

  • enable the service sudo ln -s /etc/sv/pcscd /var/service/ for the smart card reader
  • make sure not to have env variable QT_QPA_PLATFORM set, or set to xcb otherwise the signer will throw error Internal Server Error 500 on port 55555 during signing
  • start the signer program manually (I did not include any autostart)

Then depending on the browser do the following:

  • firefox based browser (any) - go to Privacy -> Security devices -> Click Load -> Add name "Certilia" with location /opt/certiliamiddleware/pkcs11/libCertiliaPkcs11.so
  • chromium based browser - uses ~/.pki/nssdb (only native, not snap/flatpak), users should add module with:
modutil -dbdir sql:/$HOME/.pki/nssdb/ -add "Certilia" -libfile /opt/certiliamiddleware/pkcs11/libCertiliaPkcs11.so

But in all my testing I haven't managed to login with a chromium browser because it crashes after I enter the PIN code twice and select the certificate.

Also, for some reason on void Chromium browser does not see any certificates in Local certificates even though "import local certificates from your operating system" is turned on. On arch it shows the certificates from usr/share/ca-certificates/trust-source/anchors. Regardless if there are certificates loaded it crashes in both cases. But on Void it would not load those certificates at all.
I have tried running update-ca-certificates on void but it detects none. I assume that this should do the same as update-ca-trust on arch?

Only firefox based browser work login and signing.

Question

I plan to write a detailed blog post regarding on how to setup this program to work. What do you think is the best way to let the user (the person who installs this software) to know what more he needs to do after installing this package?

Comment thread srcpkgs/certiliamiddleware/template Outdated
# Template file for 'certiliamiddleware'
pkgname=certiliamiddleware
version=3.9.8
revision=2
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Revision is a void-specific sequence index. You cannot use this number as a meaningful component of the upstream version. You'll need to remote the reference to $revision in distfiles, fully encode the upstream version (e.g., as 3.9.8.2) and split that as appropriate.

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fixed I think, 3.9.8-2 as version?

Comment thread srcpkgs/certiliamiddleware/template
Comment on lines +18 to +20
}

post_install() {
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There is no value in splitting off a post_install; everything should just happen in do_install.

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I was confused on what goes where and when.

do_install() {
	mkdir -p ${DESTDIR}/usr/share/ca-certificates/trust-source/anchors
	mv ${DESTDIR}/usr/share/ca-certificates/akd/* ${DESTDIR}/usr/share/ca-certificates/trust-source/anchors

	vlicense ${DESTDIR}/opt/certiliamiddleware/licenses/MiddlewareLicense LICENSE

	vcopy opt /
	vcopy usr /
}

Would this work?

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It won't work because you're trying to move things around in DESTDIR before you've populated it. Also, you're not moving the certificates the same way that they do in the Arch pkgbuild:

mv -v ${pkgdir}/usr/share/ca-certificates/akd ${pkgdir}/usr/share/ca-certificates/trust-source/anchors

Note the lack of trailing /* in the source; they want to move the directory, not its contents.

To make a directory in the DESTDIR, use vmkdir.

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I have added /* because on my arch machine after installing the package certificates are in /anchors/* not in /anchors/akd/*. Either way I could not see them in chromium in void regardless of the location, but it worked on arch...

Fixed mv -> vmkdir

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This in on arch:

mkdir -pv ${pkgdir}/usr/share/ca-certificates/trust-source
mv -v ${pkgdir}/usr/share/ca-certificates/akd ${pkgdir}/usr/share/ca-certificates/trust-source/anchors

They do not create /usr/share/ca-certificates/trust-source/anchors but /usr/share/ca-certificates/trust-source. Maybe then mv moves files from akd/* to anchors/*?

Comment thread srcpkgs/certiliamiddleware/template Outdated
}

post_install() {
mkdir -p usr/share/ca-certificates/trust-source/anchors
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is not creating the directory where you expect.

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I have no idea where is that creating the directory :)

Should I place that line like so mkdir -p ${DESTDIR}/usr/share/ca-certificates/trust-source/anchors but above the vcopy usr / line ?

@mabasic mabasic force-pushed the push-wwrszznomnyt branch from 722766b to ae09029 Compare April 20, 2026 12:17
@mabasic mabasic force-pushed the push-wwrszznomnyt branch from ae09029 to f0d5e3d Compare April 20, 2026 12:25
@tranzystorekk tranzystorekk added the new-package This PR adds a new package label Apr 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

new-package This PR adds a new package

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants