photo digest incorrect

[bcolpaert]

Hi,

With 2/3 of the eids we are trying to read, we are getting the error message 'Generic Error'. When we look closer, we can trace this back to an error "photo digest incorrect".

eID Applet - Copyright (C) 2008-2013 FedICT.
Copyright (C) 2014-2015 e-Contract.be BVBA.
Released under GNU LGPL version 3.0 license.
More info: https://github.com/Fedict/eid-applet
checking applet privileges...
security manager permission check for java 1.6...
checking web application trust...
running privileged code...
OS is [Windows 10]. Not Enabling PCSC library fix.
eID browser applet version: 2.0.0.FEDICT
Java version: 1.8.0_111
Java vendor: Oracle Corporation
OS: Windows 10
OS version: 10.0
OS arch: x86
Web application URL: https://eidappletqa.gent.be/eid_webapp/index.jsp
Current time: Mon Dec 12 08:56:17 CET 2016
session cookie detected
sending message: HelloMessage
current protocol state: null
protocol state transition: INIT
SSL handshake finish cipher suite: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
response message: IdentificationRequestMessage
current protocol state: INIT
protocol state transition: IDENTIFY
include address: true
include photo: true
include integrity data: false
include certificates: true
remove card: false
identity data usage: null
Detecting eID card...
Please insert your eID card...
Scanning card terminal: Broadcom Corp Contacted SmartCard 0
Scanning card terminal: Broadcom Corp Contactless SmartCard 0
Scanning card terminal: BROADCOM NFC Smartcard Reader 0
Please insert your eID card...
Please insert your eID card...
Scanning card terminal: Broadcom Corp Contacted SmartCard 0
Scanning card terminal: Broadcom Corp Contactless SmartCard 0
Scanning card terminal: BROADCOM NFC Smartcard Reader 0
eID card detected in card terminal : Broadcom Corp Contacted SmartCard 0
Reading out identity...
SSL handshake finish cipher suite: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SSL session Id mismatch
Reading identity file...
selecting file
read binary
Size identity file: 179
Read address file...
selecting file
read binary
Size address file: 121
Read photo file...
selecting file
read binary
reading authn certificate file...
selecting file
read binary
size authn cert file: 1900
reading sign certificate file...
selecting file
read binary
size non-repud cert file: 1900
reading citizen CA certificate file...
selecting file
read binary
size Cit CA cert file: 1556
reading root certificate file...
selecting file
read binary
size Root CA cert file: 1426
Transmitting identity data...
sending message: IdentityDataMessage
current protocol state: IDENTIFY
SSL handshake finish cipher suite: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
SSL session Id mismatch
HTTP response code: 500

<title>Apache Tomcat/7.0.55 - Error report</title><style></style>

HTTP Status 500 - photo digest incorrect

---

type Exception report

message photo digest incorrect

description The server encountered an internal error that prevented it from fulfilling this request.

exception

javax.servlet.ServletException: photo digest incorrect
	be.fedict.eid.applet.service.impl.handler.IdentityDataMessageHandler.handleMessage(IdentityDataMessageHandler.java:295)
	be.fedict.eid.applet.service.impl.handler.IdentityDataMessageHandler.handleMessage(IdentityDataMessageHandler.java:70)
	be.fedict.eid.applet.service.AppletServiceServlet.doPost(AppletServiceServlet.java:310)
	javax.servlet.http.HttpServlet.service(HttpServlet.java:646)
	javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
	org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)

note The full stack trace of the root cause is available in the Apache Tomcat/7.0.55 logs.

---

Apache Tomcat/7.0.55

error: error sending message to service. HTTP status code: 500 error type: java.io.IOException at be.fedict.eid.applet.Controller.sendMessage:193 at be.fedict.eid.applet.Controller.sendMessage:153 at be.fedict.eid.applet.Controller.performEidIdentificationOperation:1194 at be.fedict.eid.applet.Controller.run:326 at be.fedict.eid.applet.Applet$AppletThread$1.run:595 at java.security.AccessController.doPrivileged:-2 at be.fedict.eid.applet.Applet$AppletThread.run:591 at java.lang.Thread.run:-1 Generic Error.

Any suggestions for fixing this issue?

KR,
Bram