Re: [ebxmlms-general] code source modifications

[Bob K. <py...@ce...>]

See my answer inline.

Olivier Mo=EFses wrote:

> Hi all,
>
> Sorry for the crossposting, but I don't know exactly where to post=20
> this message.
>
> I developped a small application wich use ebxmlss as a reliable=20
> messaging system. I send (SMTP) messages with list of recipients to a=20
> server and the server routes the message to all recipients (with full=20
> ebxmlms).
>
> During our developpment, I saw that (apparently) ehbxmlms does'nt=20
> verify that acknowledge signature and original sended message=20
> signature, as explained in ebxml.org "Message Service Specification=20
> 2.0" 6.3.2.5 lines 1560 to 1563.=20

I think the specification part you have mentioned, it is really not=20
talking about acknowledgment's signature. It is mentioned that the=20
original message's reference should be attached to the acknowledgment=20
message's <acknowledgment>/<Reference> element, but it is not really=20
related to the signing of acknowledgment.

For this reference, Hermes will add those references if it detected that=20
the original message has a signature reference on it, however, hermes=20
doesn't do the checking on it if received an acknowledgment with=20
<acknowledgment>/<Reference>.

If you are talking about the signature, Hermes will verify the signature=20
on the message and acknowledgment.

>
>
> The only way to do this was to modify the sources
>
> My questions are :
>
> 1=B0) Am I wrong, and does ebxmlms has the right behavior (I spent time=
=20
> in sources without seeing it)=20

See my answer above.

>
>
> 2=B0) I need to install the application many times, Am I compatible wit=
h=20
> the ebxmlms licence (sorry, but I'm not sure and don't want to be=20
> outlaw).=20

Hermes is under Academic Free License. So if you follow the statement on=20
the licence (To rule mentions about redistributions), you should be=20
allowed to install the applications as many time as you like.

>
>
>
> In fact, this part of the application should be available as open=20
> source code, but for now we are concentrated on the first release and=20
> the sources are not fully documented. We plan to publish it before the=20
> end of the this year.

Great. In fact, we are really interested on how hermes is being used=20
worldwide. Therefore, if you don't mind, can sending me your product's=20
information?

>
>
> Regards,
>
> Olivier Moises
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: SF.net Giveback Program.
> Does SourceForge.net help you be more productive?  Does it
> help you create better code?   SHARE THE LOVE, and help us help
> YOU!  Click Here: http://sourceforge.net/donate/
> _______________________________________________
> ebxmlms-general mailing list
> ebx...@li...
> https://lists.sourceforge.net/lists/listinfo/ebxmlms-general
>
>