phase4-peppol-server-webapp cannot decrypt the incoming message due to X509PKIPathv1

[binaradarsha]

Hi,

When I send a SBDH doc using Phase4PeppolSender.sbdhBuilder() to phase4-peppol-server-webapp, the incoming message header includes two BinarySecurityTokens and second one has ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509PKIPathv1". Because of that decryption fails.

Is this a client side problem that second BinarySecurityToken has ValueType="...X509PKIPathv1" instead of X509v3, or a lack of functionality in phase4-peppol-server-webapp?

[phax]

Hi @binaradarsha okay, interesting. Well, that is a regression for a different profile where I thought it has no impact. I will revert the change for the Peppol profile. Please stay tuned.

[phax]

Release 2.1.5 is available at https://github.com/phax/phase4/releases/tag/phase4-parent-pom-2.1.5 and soon from Maven Central

[binaradarsha]

Thank you very much Philip. We will test when the changes are available in Maven.

[phax]

They are available now

[binaradarsha]

Hi, your fix worked properly. Couldn't update early, very sorry.

[phax]

Thanks - no worries. I confirmed it myself in the meantime :)