This is an alternative to linux_cac that allows for the configuration of a Common Access Card (CAC). This script avoids bashisms to conform to the POSIX standard. The script gives the option for several different PKCS11 modules. opensc is the recommended module as it is actively maintained and supported on more systems.
- All imported certificates are the most recent from the Official DOD PKI Website.
Warning Currently snap packaged browsers do not support adding PKCS11 modules (Ex. Firefox on Ubuntu). If the script sees you are currently using a snap browser it will not continue. This can be fixed by removing that package and installing a non snap version of your browser (Install Firefox on Linux).
- Download smartcard.sh
- sudo ./smartcard.sh
- Choose the options that work best for your system.
Package Managers: (apt, pacman, yum, dnf, zypper)
Distribution | Versions | Browsers | PKCS11 Modules |
---|---|---|---|
Debian | 11 | Firefox, Chrome | opensc |
Ubuntu | 18.04 LTS | Firefox, Chrome | opensc, cackey |
20.04 LTS | Firefox, Chrome | opensc, cackey | |
22.04 LTS | Firefox(Non Snap), Chrome | opensc | |
Manjaro | 22.0+ | Firefox, Chrome | opensc |
Fedora | 37.0+ | Firefox, Chrome | opensc |
openSUSE | Tumbleweed | Firefox, Chrome | opensc, coolkey, cackey |
Code contributions are welcome! Please commit any pull requests against the main branch.
- https://public.cyber.mil/pki-pke/
- https://pubs.opengroup.org/onlinepubs/9699919799/utilities/contents.html
- https://firefox-source-docs.mozilla.org/security/nss/legacy/tools/modutil/index.html
- https://github.com/jdjaxon/linux_cac
- https://en.opensuse.org/DoD_Common_Access_Card_(CAC)_Reader
- https://wiki.archlinux.org/title/Smartcards
- https://militarycac.com/linux.htm