Skip to content

Commit 8d80f33

Browse files
Update site
1 parent acd0097 commit 8d80f33

File tree

11 files changed

+48
-37
lines changed

11 files changed

+48
-37
lines changed

index.html

Lines changed: 47 additions & 36 deletions
Original file line numberDiff line numberDiff line change
@@ -127,15 +127,15 @@
127127
<div class="col-md-9" role="main">
128128

129129
<h1 id="architecture-of-id-software">ARCHITECTURE OF ID-SOFTWARE</h1>
130-
<p>Document version: 2.9<br />
131-
Software version: 25.08<br />
132-
Last updated: 9.10.2025 </p>
130+
<p>Document version: 30<br />
131+
Software version: 25.11<br />
132+
Last updated: 27.10.2025 </p>
133133
<h1 id="introduction">Introduction</h1>
134134
<p>The purpose of this document is to describe the architecture of ID-software.</p>
135135
<p><strong>ID-software</strong> is a collection of software components offering support for PKI-based functionality, i.e. operations with different cryptographic tokens (e.g. eID cards), handling digitally signed documents, file encryption/decryption and signing and authentication in web environment. The ID-software comprises end-user applications, software libraries, web components, drivers for communicating with the cryptographic tokens and other complementary components.</p>
136136
<p>Main sources for information about ID-software are <a href="https://www.id.ee/en/">www.id.ee</a>, <a href="https://github.com/open-eid">Open-EID GitHub repository</a> and <a href="https://github.com/web-eid">Web-eID GitHub repository</a>.</p>
137137
<p>This document covers description of ID-software and its components, their deployment in different environments, provided and required interfaces. The document does not include components that have reached the end of their support nor the components that have not yet been released.</p>
138-
<p>The document is based on the latest released state of the ID-software components. At the time of writing, the latest released version of ID-software is <strong>version 25.08</strong>. Latest version numbers of the various ID-software components are provided at <a href="https://www.id.ee/en/article/information-on-the-latest-software-versions/">https://www.id.ee/en/article/information-on-the-latest-software-versions/</a>.</p>
138+
<p>The document is based on the latest released state of the ID-software components. At the time of writing, the latest released version of ID-software is <strong>version 25.11</strong>. Latest version numbers of the various ID-software components are provided at <a href="https://www.id.ee/en/article/information-on-the-latest-software-versions/">https://www.id.ee/en/article/information-on-the-latest-software-versions/</a>.</p>
139139
<p>The document is targeted for:</p>
140140
<ul>
141141
<li>Owners/managers of the software;</li>
@@ -161,6 +161,13 @@ <h1 id="background">Background</h1>
161161
<li>GitHub repository for the source code, wiki documentation, beta and (optionally) production versions of binary packages: <a href="https://github.com/open-eid">https://github.com/open-eid</a> and <a href="https://github.com/web-eid">https://github.com/web-eid</a>.</li>
162162
<li>Release repository for production versions of binaries: <a href="https://www.id.ee/en/article/install-id-software/">https://www.id.ee/en/article/install-id-software/</a></li>
163163
</ul>
164+
<p>Third party actors:</p>
165+
<ul>
166+
<li>IDEMIA; </li>
167+
<li>Thales; </li>
168+
<li>SK ID Solutions (SK, <a href="https://www.skidsolutions.eu/en">https://www.skidsolutions.eu/en</a>); </li>
169+
<li>Zetes Estonia (Zetes, <a href="https://repository.eidpki.ee/">https://repository.eidpki.ee/</a>); </li>
170+
</ul>
164171
<p>ID-software components can be logically divided in the following groups:</p>
165172
<ul>
166173
<li><strong>Desktop applications</strong> for end-users;</li>
@@ -174,23 +181,23 @@ <h1 id="background">Background</h1>
174181
<table border="1" cellspacing="0" cellpadding="0">
175182
<thead>
176183
<tr>
177-
<th rowspan="2" colspan="2">Component</td>
178-
<th colspan="6">Function</td>
179-
<th rowspan="2">Owner</td>
180-
<th rowspan="2">Licence</td>
184+
<th rowspan="2" colspan="2">Component</th>
185+
<th colspan="6">Function</th>
186+
<th rowspan="2">Owner</th>
187+
<th rowspan="2">Licence</th>
181188
</tr>
182189
<tr>
183-
<th>Handling ASiC/BDOC/PADES documents</td>
184-
<th>Handling DDOC documents</td>
185-
<th>Handling CDOC documents</td>
186-
<th>Calculating RSA/ECDSA signature</td>
187-
<th>Card management operations</td>
188-
<th>Authentication</td>
190+
<th>Handling ASiC/BDOC/PADES documents</th>
191+
<th>Handling DDOC documents</th>
192+
<th>Handling CDOC documents</th>
193+
<th>Calculating RSA/ECDSA signature</th>
194+
<th>Card management operations</th>
195+
<th>Authentication</th>
189196
</tr>
190197
</thead>
191198
<tbody>
192199
<tr>
193-
<th><a href="#desktop-applications">Desktop applications</a></td>
200+
<th><a href="#desktop-applications">Desktop applications</a></th>
194201
<th>DigiDoc4</th>
195202
<td>yes (1)</td>
196203
<td>yes - validation only (1)</td>
@@ -202,7 +209,7 @@ <h1 id="background">Background</h1>
202209
<td>LGPL</td>
203210
</tr>
204211
<tr>
205-
<th rowspan="2"><a href="#mobile-applications">Mobile applications</a></td>
212+
<th rowspan="2"><a href="#mobile-applications">Mobile applications</a></th>
206213
<th>RIA DigiDoc (iOS)</th>
207214
<td>yes (1)</td>
208215
<td>yes - validation only (1)</td>
@@ -225,7 +232,7 @@ <h1 id="background">Background</h1>
225232
<td>LGPL</td>
226233
</tr>
227234
<tr>
228-
<th rowspan="4"><a href="#software-libraries">Software libraries</a></td>
235+
<th rowspan="4"><a href="#software-libraries">Software libraries</a></th>
229236
<th>DigiDoc4j (Java)</th>
230237
<td>yes (2)</td>
231238
<td>yes (1)</td>
@@ -270,7 +277,7 @@ <h1 id="background">Background</h1>
270277
<td>LGPL</td>
271278
</tr>
272279
<tr>
273-
<th rowspan="2"><a href="#web-components">Web components</a></td>
280+
<th rowspan="2"><a href="#web-components">Web components</a></th>
274281
<th>Browser signing modules</th>
275282
<td>-</td>
276283
<td>-</td>
@@ -293,16 +300,16 @@ <h1 id="background">Background</h1>
293300
<td>MIT</td>
294301
</tr>
295302
<tr>
296-
<th rowspan="3"><a href="#drivers">Driver components</a></td>
303+
<th rowspan="3"><a href="#drivers">Driver components</a></th>
297304
<th>Minidriver</th>
298305
<td>-</td>
299306
<td>-</td>
300307
<td>-</td>
301308
<td>yes</td>
302309
<td>-</td>
303310
<td>yes</td>
304-
<td>IDEMIA</td>
305-
<td>IDEMIA</td>
311+
<td>IDEMIA/Thales</td>
312+
<td>IDEMIA/Thales</td>
306313
</tr>
307314
<tr>
308315
<th>OpenSC-pkcs11</th>
@@ -374,6 +381,9 @@ <h1 id="component-model">Component model</h1>
374381
<ul>
375382
<li>Components of ID-software that are owned and operated by RIA: <u>placed in "RIA" package</u>.</li>
376383
<li>Components of ID-software that are owned and operated by SK: <u>placed in "SK" package</u>.</li>
384+
<li>Components of ID-software that are owned and operated by Zetes: <u>placed in "Zetes" package</u>.</li>
385+
<li>Components of ID-software that are owned and operated by IDEMIA: <u>placed in "IDEMIA" package</u>.</li>
386+
<li>Components of ID-software that are owned and operated by Thales: <u>placed in "Thales" package</u>.</li>
377387
</ul>
378388
<p>Other components are regarded as external to ID-software.<br />
379389
Note that not all of the external base libraries are included in the component model to avoid duplicity with other documentation – the base libraries are listed and described in the documentation of the respective ID-software components and can be accessed via the references provided.</p>
@@ -416,8 +426,8 @@ <h3 id="digidoc4">DigiDoc4</h3>
416426
</tr>
417427
<tr>
418428
<td>LDAP directory</td>
419-
<td>Directory of active certificates issued by SK (as the CA in Estonia). The directory is used by DigiDoc4 for finding authentication certificate (and the respective public key) of the recipient of the encrypted document. See also <a href="https://www.skidsolutions.eu/en/repository/ldap/">https://www.skidsolutions.eu/en/repository/ldap/</a>.</td>
420-
<td>SK</td>
429+
<td>Directory of active certificates issued by SK and Zetes (as the CA in Estonia). The directory is used by DigiDoc4 for finding authentication certificate (and the respective public key) of the recipient of the encrypted document. See also <a href="https://www.skidsolutions.eu/en/repository/ldap/">https://www.skidsolutions.eu/en/repository/ldap/</a>.</td>
430+
<td>SK/Zetes</td>
421431
</tr>
422432
<tr>
423433
<td>Central configuration repository</td>
@@ -452,7 +462,7 @@ <h3 id="digidoc4">DigiDoc4</h3>
452462
<tr>
453463
<td>OCSP service</td>
454464
<td>Described in chap. <a href="#_comp_libraries">Software libraries</a>.</td>
455-
<td>SK</td>
465+
<td>SK/Zetes</td>
456466
</tr>
457467
<tr>
458468
<td>Decryption service</td>
@@ -462,7 +472,7 @@ <h3 id="digidoc4">DigiDoc4</h3>
462472
<tr>
463473
<td>Minidriver</td>
464474
<td>Used via CNG interface in Windows environment only. Described in chap. <a href="#_comp_drivers">Drivers</a>.</td>
465-
<td>IDEMIA</td>
475+
<td>IDEMIA/Thales</td>
466476
</tr>
467477
<tr>
468478
<td>ID-Updater</td>
@@ -554,7 +564,7 @@ <h3 id="ria-digidoc">RIA DigiDoc</h3>
554564
<tr>
555565
<td>LDAP directory</td>
556566
<td>Described in chap. <a href="#_DigiDoc4">DigiDoc4</a>.</td>
557-
<td>SK</td>
567+
<td>SK/Zetes</td>
558568
</tr>
559569
<tr>
560570
<td>Central configuration repository</td>
@@ -589,7 +599,7 @@ <h3 id="ria-digidoc">RIA DigiDoc</h3>
589599
<tr>
590600
<td>OCSP service</td>
591601
<td>Described in chap. <a href="#_comp_libraries">Software libraries</a>.</td>
592-
<td>SK</td>
602+
<td>SK/Zetes</td>
593603
</tr>
594604
<tr>
595605
<td>Decryption service</td>
@@ -709,8 +719,8 @@ <h2 id="software-libraries">Software libraries</h2>
709719
</tr>
710720
<tr>
711721
<td>OCSP service</td>
712-
<td><a href="https://tools.ietf.org/html/rfc6960">RFC6960</a> based OCSP service. Also offered by SK for Estonian and a number of foreign certificates (see <a href="http://www.skidsolutions.eu/en/">www.skidsolutions.eu/en</a>).</td>
713-
<td>SK</td>
722+
<td><a href="https://tools.ietf.org/html/rfc6960">RFC6960</a> based OCSP service. Also offered by SK and Zetes for Estonian and a number of foreign certificates (see <a href="http://www.skidsolutions.eu/en/">www.skidsolutions.eu/en</a>).</td>
723+
<td>SK/Zetes</td>
714724
</tr>
715725
</tbody>
716726
</table>
@@ -995,7 +1005,7 @@ <h3 id="web-authentication-components">Web authentication components</h3>
9951005
<tr>
9961006
<td>Minidriver</td>
9971007
<td>Described in chap. <a href="#_comp_drivers">Drivers</a>.</td>
998-
<td>IDEMIA</td>
1008+
<td>IDEMIA/Thales</td>
9991009
</tr>
10001010
</tbody>
10011011
</table>
@@ -1026,7 +1036,7 @@ <h2 id="drivers">Drivers</h2>
10261036
<tr>
10271037
<td>Minidriver</td>
10281038
<td>Used as a default driver for accessing Estonian eID-cards via CNG interface for signature creation in web browser environment in case of Windows platform. Used as a default driver for authentication with eID card in browser environment in case of Windows platform.</td>
1029-
<td>IDEMIA</td>
1039+
<td>IDEMIA/Thales</td>
10301040
</tr>
10311041
<tr>
10321042
<td>EstEID CTK Tokend</td>
@@ -1169,7 +1179,7 @@ <h3 id="windows-updating-mechanism">Windows updating mechanism</h3>
11691179
</tr>
11701180
<tr>
11711181
<td>Windows Store</td>
1172-
<td>See <a href="https://microsoftedge.microsoft.com/addons/detail/gnmckgbandlkacikdndelhfghdejfido">https://microsoftedge.microsoft.com/addons/detail/gnmckgbandlkacikdndelhfghdejfido</a>.</td>
1182+
<td>See <a href="https://microsoftedge.microsoft.com/addons/detail/gnmckgbandlkacikdndelhfghdejfido">https://microsoftedge.microsoft.com/addons/detail/gnmckgbandlkacikdndelhfghdejfido</a>, <a href="https://apps.microsoft.com/detail/9pfpfk4dj1s6">https://apps.microsoft.com/detail/9pfpfk4dj1s6</a>.</td>
11731183
<td>Microsoft</td>
11741184
</tr>
11751185
<tr>
@@ -1368,7 +1378,7 @@ <h3 id="central-configuration-repositorys-interfaces">Central configuration repo
13681378
<p>See <a href="#_comp_central_conf_server_interfaces">Central configuration repository's interfaces</a>.</p>
13691379
<p><a name="_comp_external"></a></p>
13701380
<h2 id="interfaces-with-external-services">Interfaces with external services</h2>
1371-
<p>The following chapter describes interfaces that different ID-software components may have with external services. Relatsionships with the external services are depicted in different ID-software component models above.</p>
1381+
<p>The following chapter describes interfaces that different ID-software components may have with external services. Relationships with the external services are depicted in different ID-software component models above.</p>
13721382
<p><a name="_comp_central_conf_server_interfaces"></a></p>
13731383
<h4 id="central-configuration-repositorys-interfaces_1">Central configuration repository's interfaces</h4>
13741384
<ul>
@@ -1386,7 +1396,7 @@ <h4 id="central-configuration-repositorys-interfaces_1">Central configuration re
13861396
</li>
13871397
<li>Central configuration file's public key file config.pub<ul>
13881398
<li>User: central configuration client component</li>
1389-
<li>Accessible from: <a hreef="https://id.eesti.ee/config.pub">https://id.eesti.ee/config.pub</a> </li>
1399+
<li>Accessible from: <a href="https://id.eesti.ee/config.pub">https://id.eesti.ee/config.pub</a> </li>
13901400
<li>Accessible with: HTTPS protocol</li>
13911401
</ul>
13921402
</li>
@@ -1412,7 +1422,7 @@ <h4 id="ldap-directory-interface">LDAP directory interface</h4>
14121422
<ul>
14131423
<li>User: DigiDoc4, RIA DigiDoc</li>
14141424
<li>Accessible with: LDAP protocol</li>
1415-
<li>Accessible from: ldaps://esteid.ldap.sk.ee, ldaps://k3.ldap.sk.ee</li>
1425+
<li>Accessible from: ldaps://esteid.ldap.sk.ee, ldaps://k3.ldap.sk.ee, ldaps://ldap.eidpki.ee</li>
14161426
<li>Documentation: <a href="https://www.skidsolutions.eu/en/repository/ldap/">https://www.skidsolutions.eu/en/repository/ldap/</a></li>
14171427
</ul>
14181428
<p><a name="_TSL_repositories’_interfaces"></a></p>
@@ -1444,6 +1454,7 @@ <h4 id="ocsp-service-interface">OCSP service interface</h4>
14441454
<li>OCSP URL from signer certificate Authority Information Access extension.</li>
14451455
<li>SK’s OCSP service for SK issued certificates: <a href="http://ocsp.sk.ee/">http://ocsp.sk.ee/</a></li>
14461456
<li>SK’s test OCSP service: <a href="http://demo.sk.ee/ocsp">http://demo.sk.ee/ocsp</a></li>
1457+
<li>Zetes’s test OCSP service: <a href="https://ocsp-test.eidpki.ee/ui/">https://ocsp-test.eidpki.ee/ui/</a></li>
14471458
</ul>
14481459
</li>
14491460
<li>Documentation: <a href="https://tools.ietf.org/html/rfc6960">RFC6960</a></li>
@@ -1584,5 +1595,5 @@ <h4 class="modal-title" id="keyboardModalLabel">Keyboard Shortcuts</h4>
15841595

15851596
<!--
15861597
MkDocs version : 1.6.1
1587-
Build Date UTC : 2025-10-10 07:47:12.132632+00:00
1598+
Build Date UTC : 2025-11-10 13:11:54.882450+00:00
15881599
-->
9.75 KB
Loading

index_files/comp_mopp_signing.png

6.38 KB
Loading

index_files/drivers.png

-778 Bytes
Loading

index_files/sw_cnet.png

4.31 KB
Loading

index_files/sw_java.png

12.6 KB
Loading

index_files/up_macos.png

-325 Bytes
Loading

index_files/up_win.png

5.18 KB
Loading

index_files/web_auth.png

4.16 KB
Loading

search/search_index.json

Lines changed: 1 addition & 1 deletion
Large diffs are not rendered by default.

0 commit comments

Comments
 (0)