Support for Starcos 3.4 (DGN profile)

[hi-ko]

Are there any plans to update the DGN support for their latest structure?
s. Support for DGN cards #3229

[CardContact]

We would need the specification (profile) and sample cards to do that.

We have no contract relationship with DGN. The initial implementation was done as part of
a project we did for the system integrator that provided the PKI solution to DGN.

[hi-ko]

@CardContact thanks for your feedback!

Do you mean with "system integrator" companies like SecCommerce or Secrypt offering signing solutions to work with dgn or D-Trust smart cards?

It is so annoying that there are no affordable smart cards (I know of) for qualified electronic signatures (QES) which support open signing solutions here in Germany.
I just bought the dgn card since it is with 50€/year at least not in the pricing area like d-trust or others which are totally out of scope for private people.

Now with the dgn card I realize that there are no drivers availale to do PKCS#11 based signing/encryption required by thunderbird, jsignpdf, ... 🙄

Would it help if I could convince dgn to sponsor a test smartcard and provide required specs?

I totally understand that all this is not your responsibility and maybe out of scope since you all may not be compensated for such work but I guess this is a generic problem here in non digital native Germany which may help many others ...
Perhaps we can organize funding through donations?

[CardContact]

The issue is, that the industry lobbied to establish expensive certification requirements. Smaller companies like us can not afford that investment, as it is unlikely to recover any of the money. So QES remains the playing field of large companies like G+D, ATOS or Gemalto. And they have little to no interest to do something in the Open-Source space.

We can of course have a look, if the new card can be integrated. But that requires some support from DGN. If you have contact there, feel free to ask.

[hi-ko]

The issue is, that the industry lobbied to establish expensive certification requirements.

I know, I know, I experienced this myself about 20 years ago with the toll consortium round table, then later again with the health card. There were discussions about putting a sc chip for general use on the health card, but t-system threatened to sue at the last minute

We can of course have a look, if the new card can be integrated. But that requires some support from DGN. If you have contact there, feel free to ask.

Since I'm at least a (small) customer I can open a support ticket to clearify. dgn could at least be seen as a neutral partner who does not have a conflict of interest like the others you mentioned
I will report back ...

[DenisLug]

@hi-ko: Does OpenSC work with the DGN cards now? I'm looking for a card provider for QES, but it's difficult to determine which one is compatible with OpenSC.

[hi-ko]

not that i'm a were off.