Clarify the LGPL situation with OpenSC usage in Spanish eID software

[martin]

The SpanishEid-s DNI and Ceres appear to be using code derived from OpenSC, which is covered with LGPL. The source code for the software does not seem to be available.

This ticket is created to keep track of the investigation.

See  this post on opensc-devel for more information

[martin]

Apparently, the situation is not that black and white as it is with #204. A more detailed observation of the binaries provided by Spanish Mint and Spanish Police is on the mailing list:  https://www.opensc-project.org/pipermail/opensc-devel/2010-March/013819.html

[martin]

e-mail has been sent to the contacts on web-pages of both DNIe and Ceres.

[martin]

At least some of the source code is available, as noted in  this post on the mailing list.

[RedDwarf]

What is missing is

ifd_modulus ifd_private_exponent ifd_public_exponent C_CV_CA_CS_AUT_cert C_CV_IFDuser_AUT_cert

*Data* referenced from trusted_channel_card.c that can be obtained from the static library from  http://www.dnielectronico.es/descargas/PKCS11_para_Sistemas_Unix/1.4.7.Ubuntu_Karmic_64/Ubuntu_Karmic_opensc-dnie_1.4.7-2_amd64.tar

With such data the driver can be compiled and, in some really quick tests, seems to work just fine.

The driver indeed copied some code from opensc. The source package doesn't indicates the license.

[rickyepoderi]

I just wanted to say that now the downloaded src.zip published by DNIe has a license file that claims to be GPLv3 and any code file do the same (download it from the following link  http://www.dnielectronico.es/descargas/codigo_fuente.html and check yourself). And I corroborate what reddwarf said, some variables are missing but doing some objdump over the distributed object file I completed the trusted_channel_card.c and it seems to work without problems (I have used it inside firefox and thunderbird with no issues). All this information is inside this thread  http://www.kriptopolis.org/disponibles-fuentes-pkcs11 but in Spanish of course. ;-)

I am not an expert in licenses but... would it be possible to include this code inside OpenSC? This will save us (Spanish people) a lot of time.

TIA

[RedDwarf]

At  http://forja.cenatic.es/docman/?group_id=160 now there are the missing keys and a document: "APDU Commands".

It's in spanish. If the documents are useful we could help with the translation.

[fjfnaranjo]

Hi.

I'm ready to work in this topic to solve the Spanish problem with OpenSC, even coding a new driver if neccesary to avoid LGPL conflicts, but I need some information first:

It this post actually valid? I am using a OpenCT driver with a real eID Spanish card with OpenSC for Debian Squeeze. I can get information using pcks15-tool dump option, so I need to know if the issue is solved or someone is working on it now.

[jonsito]

The current status (at April 23 2011) is:

Spanish Dirección General de la Policía (DGP) has published their DNIe card code under GPLv3 License [1] This code is no longer mantained

The Fabrica Nacional de moneda y timbre has released their Ceres card code, but no license provided. Code is clear to be derivate from OpenSC. But until FNMT clarifies their license status local IP laws applies.[2].

There is a new project OpenDNIe [3] released under LGPL. current status is working, and mantained

So, at least for Ceres card, this ticket is still active

[1]  http://www.dnielectronico.es/descargas/codigo_fuente.html

[2]  http://www.cert.fnmt.es/content/pages_std/docs/OpenSC-Ceres_Fuentes_Compilacion.zip

[3]  http://opendnie.cenatic.es