← All apps

Lacuna Web PKI

Lacuna SoftwareProprietary

Lacuna Web PKI for Tessera's tokens in Flatpak browsers

Extension for Tessera →Part of the ICP-Brasil digital signature collection (10 apps) →

Runs with Tessera; the install command installs it too.

First time? Set up FlatPark →
SystemProprietaryv2.17.0

About

Web PKI is the program behind Lacuna's browser plugin, which many sites use to sign with a digital certificate.

With this extension, the Flatpak browsers Tessera sets up (Firefox, Chromium, Google Chrome, Microsoft Edge and Brave) run the plugin's program inside their own sandbox, and it signs with Tessera's tokens through the system's p11-kit server: no distrobox, no packages installed on the system.

Tessera does not run it. After installing, restart Tessera: its Web signers section shows, for each browser, the one command that lets the browser start the program (run once in a terminal), and what to tick in the plugin's settings.

This extension installs the program from the vendor's official Linux package, downloaded at install time and checked against a pinned checksum. Only its files are taken: no install script runs. Lacuna Web PKI is closed source and not made or endorsed by Tessera's author.

Details

Developer
Lacuna Software
License
Proprietary
Runtime
GNOME 51
Architectures
x86_64
Version
2.17.0 · 2026-11-09
Website
Homepage
Source
Lacuna Web PKI
Packaging
flatpark/registry

Permissions

39 to review

Runs inside Tessera, with all of its permissions:

  • X11 windowing system

    Legacy display protocol; can observe input to other X11 windows

  • Network access

    Can reach the internet and local network

  • Files: xdg-run/tessera:create

  • Files: xdg-config/pkcs11:create

  • Files: ~/.var/app/org.gnome.Papers/config

  • Files: ~/.var/app/org.kde.okular/config

  • Files: ~/.var/app/org.mozilla.firefox/config/mozilla/firefox

  • Files: ~/.var/app/org.mozilla.firefox/.mozilla/firefox

  • Files: ~/.pki/nssdb

  • Files: ~/.var/app/org.chromium.Chromium/data/pki/nssdb

  • Files: ~/.var/app/com.brave.Browser/.pki/nssdb

  • Files: ~/.var/app/com.brave.Browser/data/pki/nssdb

  • Files: ~/.var/app/com.google.Chrome/.pki/nssdb

  • Files: ~/.var/app/com.google.Chrome/data/pki/nssdb

  • Files: ~/.var/app/com.microsoft.Edge/.pki/nssdb

  • Files: ~/.var/app/com.microsoft.Edge/data/pki/nssdb

  • Files: ~/.var/app/org.mozilla.thunderbird/.thunderbird

  • Files: ~/.var/app/org.mozilla.thunderbird/config/thunderbird

  • Files: ~/.var/app/org.mozilla.thunderbird_esr/.thunderbird

  • Files: ~/.var/app/org.mozilla.thunderbird_esr/config/thunderbird

  • Files: ~/.var/app/org.mozilla.Thunderbird/.thunderbird

  • Files: ~/.var/app/org.gnome.Evolution/data/pki/nssdb

  • Files: ~/.var/app/org.libreoffice.LibreOffice/config/libreoffice

  • Files: ~/.var/app/org.libreoffice.LibreOffice/data

  • Files: ~/.var/app/io.github.intoolswetrust.JSignPdf/config

  • Files: ~/.var/app/net.code_industry.MasterPDFEditor/config

  • Files: ~/.mozilla/firefox

  • Files: xdg-config/mozilla/firefox

  • Files: xdg-data/pki/nssdb

  • Files: ~/.pjeoffice-pro

  • Files: ~/.thunderbird

  • Files: xdg-config/thunderbird

  • Files: xdg-config/libreoffice

  • Files: xdg-data/flatpak/appstream:ro

  • Files: /var/lib/flatpak/appstream:ro

  • Files: xdg-data/flatpak/app:ro

  • Files: /var/lib/flatpak/app:ro

  • Files: xdg-data/flatpak/overrides:ro

  • Files: xdg-run/p11-kit/pkcs11

  • Inter-process communication

    Shares the IPC namespace with the host

  • Socket: pcsc

  • Talk to org.kde.StatusNotifierWatcher

  • Persistent storage: .config/serproid

  • Wayland display

  • GPU acceleration

Packaging

Unmodified

Runs the vendor's build as shipped — nothing added or changed.

What the levels mean →