TLS-CCA not working

[hillar]

TLDR;

We recommend using the TLS-CCA solution in e-services with strict security requirements #ref

Description: The current version of the "osx-installer" repository does not include support for TLS-CCA (TLS client certificate authentication).

What is TLS-CCA? TLS-CCA is a certificate-based authentication method that is useful for services with strict security requirements, such as e-services where state secrets are stored. This method is an alternative to Web eID, which is recommended for general personal identification with an ID-card in e-services.

Why is this important? For high-security environments, TLS-CCA is still a preferred solution. According to the security analysis by Cybernetica AS, while Web eID offers a user-friendly option, TLS-CCA is recommended for e-services with stricter security needs. The current installer package only seems to support the Web eID solution but is missing the important option for TLS-CCA.

Expected Behavior: The installer should include support for TLS-CCA, along with Web eID, to offer users the option to use TLS-CCA for personal identification with ID-cards in high-security e-services.