← All apps

SerproID

SerproProprietary

Serpro cloud certificate driver for Tessera

Extension for Tessera →Part of the ICP-Brasil digital signature collection (10 apps) →

Runs with Tessera; the install command installs it too.

First time? Set up FlatPark →
SystemProprietaryv2.1.6

About

SerproID makes Serpro's cloud certificate available as a token. Tessera loads it like any other driver, so browsers, PDF readers and document signers that use Tessera's tokens can sign with it; each signature is approved in the SerproID phone app.

It also adds the SerproID app to Tessera's window, to sign in and download the certificate.

This extension installs Serpro's official Linux package, downloaded at install time and checked against a pinned checksum. Only its files are taken: no install script runs, and the app's launcher is pointed at its copy inside the extension. SerproID is closed source and not made or endorsed by Tessera's author.

The driver runs inside Tessera's sandbox with Tessera's permissions and has none of its own. After installing it, use Restart Tessera in Tessera's menu.

Details

Developer
Serpro
License
Proprietary
Runtime
GNOME 51
Architectures
x86_64
Version
2.1.6 · 2026-11-08
Website
Homepage
Source
SerproID
Packaging
flatpark/registry

Permissions

39 to review

Runs inside Tessera, with all of its permissions:

  • X11 windowing system

    Legacy display protocol; can observe input to other X11 windows

  • Network access

    Can reach the internet and local network

  • Files: xdg-run/tessera:create

  • Files: xdg-config/pkcs11:create

  • Files: ~/.var/app/org.gnome.Papers/config

  • Files: ~/.var/app/org.kde.okular/config

  • Files: ~/.var/app/org.mozilla.firefox/config/mozilla/firefox

  • Files: ~/.var/app/org.mozilla.firefox/.mozilla/firefox

  • Files: ~/.pki/nssdb

  • Files: ~/.var/app/org.chromium.Chromium/data/pki/nssdb

  • Files: ~/.var/app/com.brave.Browser/.pki/nssdb

  • Files: ~/.var/app/com.brave.Browser/data/pki/nssdb

  • Files: ~/.var/app/com.google.Chrome/.pki/nssdb

  • Files: ~/.var/app/com.google.Chrome/data/pki/nssdb

  • Files: ~/.var/app/com.microsoft.Edge/.pki/nssdb

  • Files: ~/.var/app/com.microsoft.Edge/data/pki/nssdb

  • Files: ~/.var/app/org.mozilla.thunderbird/.thunderbird

  • Files: ~/.var/app/org.mozilla.thunderbird/config/thunderbird

  • Files: ~/.var/app/org.mozilla.thunderbird_esr/.thunderbird

  • Files: ~/.var/app/org.mozilla.thunderbird_esr/config/thunderbird

  • Files: ~/.var/app/org.mozilla.Thunderbird/.thunderbird

  • Files: ~/.var/app/org.gnome.Evolution/data/pki/nssdb

  • Files: ~/.var/app/org.libreoffice.LibreOffice/config/libreoffice

  • Files: ~/.var/app/org.libreoffice.LibreOffice/data

  • Files: ~/.var/app/io.github.intoolswetrust.JSignPdf/config

  • Files: ~/.var/app/net.code_industry.MasterPDFEditor/config

  • Files: ~/.mozilla/firefox

  • Files: xdg-config/mozilla/firefox

  • Files: xdg-data/pki/nssdb

  • Files: ~/.pjeoffice-pro

  • Files: ~/.thunderbird

  • Files: xdg-config/thunderbird

  • Files: xdg-config/libreoffice

  • Files: xdg-data/flatpak/appstream:ro

  • Files: /var/lib/flatpak/appstream:ro

  • Files: xdg-data/flatpak/app:ro

  • Files: /var/lib/flatpak/app:ro

  • Files: xdg-data/flatpak/overrides:ro

  • Files: xdg-run/p11-kit/pkcs11

  • Inter-process communication

    Shares the IPC namespace with the host

  • Socket: pcsc

  • Talk to org.kde.StatusNotifierWatcher

  • Persistent storage: .config/serproid

  • Wayland display

  • GPU acceleration

Packaging

Modified

  • Changes the vendor's files

    The SerproID app's launcher and configuration name its install folder (/usr/share/serproid-desktop); they are pointed at its copy inside the extension. The package's /etc folder and install scripts are not used.

  • Injects code into the app

    The process that serves the driver preloads libgcc_s.so.1 (LD_PRELOAD in driver.toml), the runtime's own copy: the vendor's library needs its stack unwinder but does not link it. No code of the package's own is added.

What the levels mean →