Skip to content

A bridge between Google Chrome and CAC Authentication via Native Messaging

License

Notifications You must be signed in to change notification settings

S4lt5/ChromeCAC

 
 

Repository files navigation

ChromeCAC

ChromeCAC makes it easy and secure to sign data with smart cards using Google Chrome.

ChromeCAC is a work in progress, and is not yet ready for use!


ChromeCAC is made up of 3 parts:

  • the chrome extension
  • the native app that communicates with the chrome extension
  • the cacbridge.js website code

Setup

At this time, setup is heavily manual. Automatic installers will be created further into development.

Server-side Setup

Regular Webpage

<head>
...
<script src="cacbridge.js"></script>
...
</head>

NodeJS

Coming soon

RequireJS

require(['cacbridge'], function (CAC) {
  console.log(CAC)
})

Client-side Setup

Chrome Extension

In Google Chrome, go to Settings -> Extensions and click Load Unpacked Extension. Load the ChromeExtension folder.

In the loaded extension's information, copy for the ID.

Follow the manifest instructions for your OS here.

In the manifest, be sure to change chrome-extension://aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/ to chrome-extension://{ID}/

Native App

Build the native app of your choice, ex: ChromeCAC.NET

Place the built EXE in the location referenced from your manifest.

Usage

Sign a payload by calling CAC.sign(...)

CAC.sign("this string will be signed", function success (signatureInfo) {

  // Signed successfully
  // Passes signatureInfo, see below
  console.log("Signature: " + data.signature)

}, function fail () {

  // Failed to sign
  console.log("Failed to sign data!")

})

Interface

SignatureInfo

A JavaScript object containing information about the signed data. This is passed to the success callback in CAC.sign

Property Type Description
signature string The signature of the signed string
publicKey string The public key used to verify the certificate
fullSig string The full signature, containing the public key and signature to be easily verified

Verifying Signatures

Examples of signature verification are coming soon to CACBridge.

About

A bridge between Google Chrome and CAC Authentication via Native Messaging

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • C# 78.1%
  • JavaScript 15.5%
  • HTML 5.4%
  • Classic ASP 1.0%