|
From: <em...@og...> - 2005-07-28 07:05:26
|
Grateful if anyone successfully configuring Hermes to adopt the digital signature could share the experience. When I performed a demo using MSH Monitor, the "Cannot receive acknowledgement" error message was logged in Error History after a message was sent with the "Require Signed Acknowledgement" selected. When I sent a message with appropriate information specified in the "Digital Signature" section in the MSH Monitor, no any result/error message was received in Send/Receive/Error History. The private key used for signing the message itself or its acknowledgement is named "pkey.p12" while the certificate of the issuing CA was "SubCA.crt". <DigitalSignature> in msh.properties.xml for both the sending Hermes and receiving Hermes was configured as follows: - <DigitalSignature> - <TrustedAnchor> - <KeyStore> <Path>/hermes</Path> <File>SubCA.crt</File> <Password></Password> </KeyStore> </TrustedAnchor> - <AckSign> - <KeyStore> <Path>/hermes</Path> <File>pkey.p12</File> <Algorithm>dsa-sha1</Algorithm> <Alias>ackkey</Alias> <Password>XXXXXXXXXXXXXXX</Password> </KeyStore> </AckSign> </DigitalSignature> |