← All apps

SafeSign IC

A.E.T. EuropeProprietary

SafeSign IC token driver for Tessera

Extension for Tessera →Part of the ICP-Brasil digital signature collection (10 apps) →

Runs with Tessera; the install command installs it too.

First time? Set up FlatPark →
SystemProprietaryv4.5.0.0

About

SafeSign IC is the PKCS#11 driver for GD Burti (G+D StarSign) tokens and other SafeSign tokens and cards. Tessera loads it like any other driver, so browsers, PDF readers and document signers that use Tessera's tokens can sign with them.

It also adds SafeSign's Token Administration to Tessera's window, to change and unlock the PIN.

This extension installs A.E.T. Europe's official Linux packages, downloaded from the vendor at install time and checked against pinned checksums. Only their files are taken: no install script runs. SafeSign is closed source and not made or endorsed by Tessera's author.

The driver runs inside Tessera's sandbox with Tessera's permissions and has none of its own. After installing it, use Restart Tessera in Tessera's menu.

Details

Developer
A.E.T. Europe
License
Proprietary
Runtime
GNOME 51
Architectures
x86_64
Version
4.5.0.0 · 2026-11-08
Website
Homepage
Source
SafeSign IC
Packaging
flatpark/registry

Permissions

39 to review

Runs inside Tessera, with all of its permissions:

  • X11 windowing system

    Legacy display protocol; can observe input to other X11 windows

  • Network access

    Can reach the internet and local network

  • Files: xdg-run/tessera:create

  • Files: xdg-config/pkcs11:create

  • Files: ~/.var/app/org.gnome.Papers/config

  • Files: ~/.var/app/org.kde.okular/config

  • Files: ~/.var/app/org.mozilla.firefox/config/mozilla/firefox

  • Files: ~/.var/app/org.mozilla.firefox/.mozilla/firefox

  • Files: ~/.pki/nssdb

  • Files: ~/.var/app/org.chromium.Chromium/data/pki/nssdb

  • Files: ~/.var/app/com.brave.Browser/.pki/nssdb

  • Files: ~/.var/app/com.brave.Browser/data/pki/nssdb

  • Files: ~/.var/app/com.google.Chrome/.pki/nssdb

  • Files: ~/.var/app/com.google.Chrome/data/pki/nssdb

  • Files: ~/.var/app/com.microsoft.Edge/.pki/nssdb

  • Files: ~/.var/app/com.microsoft.Edge/data/pki/nssdb

  • Files: ~/.var/app/org.mozilla.thunderbird/.thunderbird

  • Files: ~/.var/app/org.mozilla.thunderbird/config/thunderbird

  • Files: ~/.var/app/org.mozilla.thunderbird_esr/.thunderbird

  • Files: ~/.var/app/org.mozilla.thunderbird_esr/config/thunderbird

  • Files: ~/.var/app/org.mozilla.Thunderbird/.thunderbird

  • Files: ~/.var/app/org.gnome.Evolution/data/pki/nssdb

  • Files: ~/.var/app/org.libreoffice.LibreOffice/config/libreoffice

  • Files: ~/.var/app/org.libreoffice.LibreOffice/data

  • Files: ~/.var/app/io.github.intoolswetrust.JSignPdf/config

  • Files: ~/.var/app/net.code_industry.MasterPDFEditor/config

  • Files: ~/.mozilla/firefox

  • Files: xdg-config/mozilla/firefox

  • Files: xdg-data/pki/nssdb

  • Files: ~/.pjeoffice-pro

  • Files: ~/.thunderbird

  • Files: xdg-config/thunderbird

  • Files: xdg-config/libreoffice

  • Files: xdg-data/flatpak/appstream:ro

  • Files: /var/lib/flatpak/appstream:ro

  • Files: xdg-data/flatpak/app:ro

  • Files: /var/lib/flatpak/app:ro

  • Files: xdg-data/flatpak/overrides:ro

  • Files: xdg-run/p11-kit/pkcs11

  • Inter-process communication

    Shares the IPC namespace with the host

  • Socket: pcsc

  • Talk to org.kde.StatusNotifierWatcher

  • Persistent storage: .config/serproid

  • Wayland display

  • GPU acceleration

Packaging

Modified

  • Changes the vendor's files

    Token Administration runs through a small launcher that puts the driver's own libraries on the library path. GDBM, which the SafeSign library needs and the runtime lacks, comes from Ubuntu 24.04's packages. The package's /etc folder and install scripts are not used.

What the levels mean →