#1029216 ausweisapp2: Connecting with Smartphone as Cardreader unpossible due to Certificate Error

Package:
ausweisapp2
Source:
ausweisapp2
Description:
Official authentication app for German ID cards and residence permits
Submitter:
Simon Spies
Date:
2023-10-23 09:42:03 UTC
Severity:
normal
#1029216#5
Date:
2023-01-19 19:22:09 UTC
From:
To:
Dear Maintainer,

I noticed that connecting with a smartphone as cardreader is currently
impossible since the app hangs up during the process. All packages on my system
are up-to-date with Debian testing. The following lines from the console output
when the error occurs hint that it is some sort of certificate problem:

default       2023.01.19 20:16:08.445 45530
...viceModel::connectToRememberedServer(ui/qml/RemoteServiceModel.cpp:205) :
Starting to pair.
ifd           2023.01.19 20:16:08.445 45530
IfdClientImpl::establishConnection(ifd/base/IfdClientImpl.cpp:156)         :
Establishing connection to remote device.
default       2023.01.19 20:16:08.446 45535
TlsChecker::hasValidCertificateKeyLength(network/TlsChecker.cpp:40)        :
Certificate is null
qt.network... 2023.01.19 20:16:08.446 45535 W (unknown:0)
: The backend "cert-only" does not support QSslKey
qt.network... 2023.01.19 20:16:08.446 45535 W (unknown:0)
: Active TLS backend does not support key creation
settings      2023.01.19 20:16:08.446 45535
...ceSettings::checkAndGenerateKey(settings/RemoteServiceSettings.cpp:182) :
Generate local keypair...
qt.network... 2023.01.19 20:16:08.685 45535 W (unknown:0)
: The backend "cert-only" does not support QSslKey
qt.network... 2023.01.19 20:16:08.685 45535 W (unknown:0)
: Active TLS backend does not support key creation
ifd           2023.01.19 20:16:08.685 45535 C
ConnectRequest::ConnectRequest(ifd/base/ConnectRequest.cpp:44)             :
Cannot get required key/certificate for tls

Thank you very much in advance.

#1029216#10
Date:
2023-10-23 09:39:09 UTC
From:
To:
Hi,

looks like your Qt uses the wrong tls backend.
The backend "cert-only" does not support QSslKey

Qt6 has multiple runtime backends for tls. The "cert-only" backend
cannot be used.
Normally there should be the "openssl" backend
(qt6/plugins/tls/libqopensslbackend.so).

Best regards
  André Klitzing