[okular] [Bug 510008] Make Flatpak Okular sign PDFs with Belgian eID (again)

[Evert Heylen]

https://bugs.kde.org/show_bug.cgi?id=510008

Evert Heylen <evertheylen at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |evertheylen at gmail.com

--- Comment #4 from Evert Heylen <evertheylen at gmail.com> ---
I had a similar issue, but I fixed it. Here's what I did:

On the host, run:

```
mkdir -p ~/.pki/nssdb
systemctl --user enable --now p11-kit-server.socket
flatpak override -u --filesystem=xdg-run/p11-kit/pkcs11
--filesystem=~/.pki/nssdb org.kde.okular
```

Then edit the file ~/.pki/nssdb/pkcs11.txt to contain something like this (the
first part was already there, the second part is important!):

```
library=
name=NSS Internal PKCS #11 Module
parameters=configdir='sql:/home/evert/.pki/nssdb' certPrefix='' keyPrefix=''
secmod='secmod.db' flags=optimizeSpace updatedir='' updateCertPrefix='>
NSS=Flags=internal,critical trustOrder=75 cipherOrder=100
slotParams=(1={slotFlags=[ECC,RSA,DSA,DH,RC2,RC4,DES,RANDOM,SHA1,MD5,MD2,SSL,TLS,AES,Came>

library=
name=p11-kit-proxy
library=/usr/lib64/pkcs11/p11-kit-client.so
slotDescription=p11-kit-proxy
parameters=
```

Potentially, the `p11-kit-client.so` may be placed in a different directory, in
which case you'll need to edit it.

Finally, in Okular, go to "Settings" > "Configure Backends" > "PDF" >
"Certificate Database" and set it to `~/.pki/nssdb`. Restart Okular.

(Thanks in part to the instructions at
https://gist.github.com/jmpolom/cbecace9c56f6de72df9c129058caff2)

-- 
You are receiving this mail because:
You are the assignee for the bug.