[QGIS-Developer] Government CAC PKI Support for web services

[Régis Haubourg]

Hi Greg,
first time I hear about PCKS11 here, maybe just because it is mostly used
and required in the US.
Doing a quick search, it seems the Qt QCA lib supports this protocol, cf.
[0]

My guess, and Alessandro knows more than I do on this front, is that this
needs to be implemented in QGIS, or maybe via a dedicated plugin. I think
that would mean also packaging the qt plugin qt-pkcs11 with your QGIS
install.

Is this a mandatory requirement or optional? If mandatory in your context,
you should probably get in touch with a developper and gather funds to have
this implemented. Maybe others have more informations than I do.

[0]
https://github.com/OpenSC/OpenSC/wiki/Creating-applications-with-smart-card-support/ba9b1848c1ce0dcc5647f8903632713adcd8fd1d#qca

Cheers

Le dim. 28 juil. 2024 à 14:09, Greg Troxel via QGIS-Developer <
qgis-developer at lists.osgeo.org> a écrit :

> "Catania, Luke A ERDC-RDE-GRL-VA CIV via QGIS-Developer"
> <qgis-developer at lists.osgeo.org> writes:
>
> > Is there support in QGIS for accessing web services (WFS, WMS, etc)
> requiring a gov't CAC?
>
> Translating this to internet standards terminology from US Government,
> the question is
>
>   Can one configure a WFS etc. in qgis, when the service has a
>   requirement to authenticate using a PCKS11 smartcard?
>
> On POSIX-like systems one would probably use https://pcsclite.apdu.fr/
>
> I suspect this comes down to what library is used for web fetches and if
> there is config support for pkcs11 in it.
> _______________________________________________
> QGIS-Developer mailing list
> QGIS-Developer at lists.osgeo.org
> List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
> Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/qgis-developer/attachments/20240728/68caf914/attachment.htm>