pieterderycke / eid.owin Goto Github PK

I am trying to get this project working on my machine locally, and after installing the 4 belgian root certificates in my trusted root ca store, at least I hit a breakpoint in the "ValidateX509Certificate" method. But I don't seem te get past that.

(I am trying with my own valid belgian ID card.)

At first the chain.Build method always returned false with a status of "A certificate chain could not be built to a trusted root authority.", and ChainElements only contained one element, being my own ID certificate.

It is only after installing the specific intermediate Citizen CA certificate for my id card in my trusted root ca store that I got past that. Well, the chain.Build method still returns false with a status of "The revocation function was unable to check revocation for the certificate.", but at least now ChainElements contains 4 elements.

The problem is now with the checking of the thumbprints though:

        if (chain.ChainElements[1].Certificate.Thumbprint != "74CC6E5559FFD7C2DD0526C0C21593C56C9384F3")
            throw new Exception("Invalid Citizen CA certificate.");

        if (chain.ChainElements[2].Certificate.Thumbprint != "51CCA0710AF7733D34ACDC1945099F435C7FC59F")
            throw new Exception("Invalid Belgium Root CA certificate.");

My Citizen CA has another thumbprint, but even none of the 4 belgium root certificates that I have installed (the ones you link to in the readme file) have that second thumbprint you are checking there.

So actually I have 2 issues:

• Why do I need to install the intermediate certificate into my trusted root certificate store? Can I get it to work without that, because I think there are a lot of different intermediate certificates used for citizens. That would mean I would have to import them all?
• Where did you get those thumbprints you are checking here in the code? And don't you have to check for all the different ones issued?

Is this project still up-to-date? If so, is there some kind of manual?
I created a new mvc project, added the code to Startup.Auth.cs but i'm not sure how to continue.
I've tried the demo but all it returns is a page saying "anonymous".

I don't want to authenticate with pin. All I want, is to read the id to fill out registration fields

Can you help out?