mendelson opensource OFTP2

Hi, I am writing my own AS2 solution. I am testing it against mendelson local server. The message is signed and encrypted by my solution "Test" and sent on http to localhost. Following is the message log: [Apr 8, 2014 3:45:44 PM] 1396952144@Test: ... [More] Incoming transmission is a AS2 message, raw message size: 4.08 KB. [Apr 8, 2014 3:45:44 PM] 1396952144@Test: AS2 message is encrypted. [Apr 8, 2014 3:45:44 PM] 1396952144@Test: The data has been decrypted using the key "Partner key". [Apr 8, 2014 3:45:44 PM] 1396952144@Test: AS2 message is signed. [Apr 8, 2014 3:45:44 PM] 1396952144@Test: The sender used the algorithm SHA1 to sign the message. [Apr 8, 2014 3:45:44 PM] 1396952144@Test: Using certificate "Test" to verify signature. [Apr 8, 2014 3:45:44 PM] 1396952144@Test: Verification of digital signature failed message-digest attribute value does not match calculated value [Apr 8, 2014 3:45:44 PM] mendelson_opensource_AS2-1396952144897-0@Partner_Test: Outgoing MDN has been signed with the algorithm "SHA1". [Apr 8, 2014 3:45:44 PM] mendelson_opensource_AS2-1396952144897-0@Partner_Test: MDN created, state set to [processed/error: authentication-failed]. [Apr 8, 2014 3:45:44 PM] 1396952144@Test: MDN details: Error verifying the senders digital signature: message-digest attribute value does not match calculated value. [Apr 8, 2014 3:45:44 PM] mendelson_opensource_AS2-1396952144897-0@Partner_Test: Synchronous MDN sent as answer to message 1396952144@Test. The way I am generating message is: 1 Create signature using SHA1 of data to be transmitted 2 Create multipart body 3 Encrypt My guess from log is that I am doing 3 and 2 correctly, but not 1. What is the correct string to use for calculating digest? I read somewhere that "whole of body part including mime header should be used. I tried various combinations of this but nothing worked. Forum: AS2 [Less]

In reply to Daniel, Hello, I just tried it on another PC in the same network. It worked with the global IP on that PC. I have deactivated anything that could block it on my PC but I can't get it working. Any other idea what could be the problem? Should I try another port maybe? Kind regards Daniel Log in or register to post comments

In reply to Identify and understanding certificates from partner Yes, the partner asked message transfer protocol to https only. Log in or register to post comments

In reply to Access local global IP Daniel, looks like an infrastructure problem (firewall?) Regards Log in or register to post comments

Hello, I've setup Mendelson as described in "definitive guide to setup in Windows" Now when I enter in my browser: http:// *My Local Ip* :8083/as2/HttpReceiver Everything is fine. But when I try to enter: http:// *My Global Ip* :8083/as2/HttpReceiver ... [More] I can't access the page. I've done a port forwarding from port 8083 from the router to port 8083 to my local PC. Can anyone help me? Kind regards Daniel Hückert Forum: AS2 [Less]

In reply to help with eclipse Ok, I think I got it to build - no errors were reported although no successes seemed obvious to me. I expected to find .jar files or something in the src folder... perhaps Im mistaken. Another mistake I could be making: ... [More] running the debugger with J2EE Preview Server... it loads up and presents a directory listing : Directory: /mec-as2-b45/ META-INF/ 0 bytes 05/04/2014 09:17:27 PM WEB-INF/ 0 bytes 05/04/2014 09:17:27 PM It looks like nothing built but no errors to console: Starting preview server on port 8080 Modules: mec-as2-b45 (/mec-as2-b45) 2014-04-05 21:23:17.024:INFO:oejs.Server:jetty-8.1.14.v20131031 2014-04-05 21:23:17.568:INFO:oejs.AbstractConnector:Started [email protected]:8080 I have a screenshot I can send... I'd also be willing to screenshot all my moves to make it easier to see where I might be going wrong. I would be happy to host them if the information I've posted here is not enough to go on... Thanks Log in or register to post comments [Less]

Hi All, Hoping someone can shed some light on getting mec-as2 project setup right in eclipse. I have been able to pull a version from the repository with cvs (from HEAD) but getting it to build is another story. Any advice greatly appreciated :) Forum: AS2

In reply to Identify and understanding certificates from partner Are you sure that the partner user https, can you please check the AS2 endpoint link privded by them before assuming that an ssl certificate is needed for this partner. Log in or register to post comments

Hi all, a new version of the community version of the mendelson OFTP2 software has been released. You could download your version at http://oftp2.mendelson-e-c.com Additional features: *There is a certificate manager included now, with the following ... [More] functionality: *Key import (from PEM, PKCS#12) *Certificate and certificate chain import from your partner (.p7b, PEM, .cer), works with additional optional certificate BASE64 encoding *Certificate and certificate chain export for your partner (.p7b, .cer, PEM) *Key export (backup purpose, PKCS#12) *Self signed key generation + integrated possibility to trust a self signed key at the mendelson CA *Key and certificate handling (rename, delete, set alias, ..) *The user interface (security tab) contains a hint now that the mendelson OFTP2 will never change a keystore password - these settings are just to work with keystores that have been edited using third party tools 3rd party software updates: *Updated the crypto API to bouncycastle 1.50 *HSQLDB 2.3.2 (database engine) Hint: The mendelson opensource OFTP2 will run fine with Java 64 bit VMs. If you have problems with the memory consumption please install a 64 bit java VM (not included), patch the VM with the "jurisdiction policy strength files" (Oracle download) and set the main memory of the JVM to 4 GB. Please have a look at the included file "readme.txt" for further information about the product. --- Thank you all for your feedback and your help Your mendelson dev team Forum: OFTP2 [Less]

In reply to Migration from opensource 2 commercial version I like this.. visit this http://opensourcesolutionexperts.com/ Log in or register to post comments