Menu

Authentication of the originator of the message failed

Help
2016-11-08
2016-11-16
  • Marco Marcantelli

    Hi,

     when a my partner send me an AS2 file, it doesn't arrive and in my mdn log I have :
    

    Headers:
    Date: mar, 08 nov 2016 16:10:21 +0100
    From: info@infosvil.it
    Message-ID: OPENAS2-08112016161022+0100-9906@xxxxxxxxx_xxxxxxxxx
    Subject: Your Requested MDN Response
    Mime-Version: 1.0
    Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-1;
    boundary="----=_Part_11_1472325173.1478617822488"
    AS2-To: xxxxxxxxxxxxxxx
    AS2-From: xxxxxxxxxxx
    AS2-Version: 1.1
    Server: OpenAS2 v1.3.3
    Content-Length: 2239

    Attributes:
    FINAL_RECIPIENT: rfc822; xxxxxxxxxxxx
    MIC: d8sWO63TejYzE9Cr4hMpDZoGvxk=, sha1
    REPORTING_UA: OpenAS2 v1.3.3@/192.168.0.190:10080
    ORIGINAL_MESSAGE_ID: MOKOsi8453581584481bdb1node1xxxxxxxxxxxxx@xxxxxxxx
    ORIGINAL_RECIPIENT: rfc822; edivp1189
    DISPOSITION: automatic-action/MDN-sent-automatically; processed/Error:integrity-check-failed
    Text:
    The message sent to Recipient edivp1189 on Tue, 8 Nov 2016 15:15:57 GMT with Subject Integrator Message has been received, the EDI Interchange was successfully decrypted and it's integrity was verified. Authentication of the originator of the message failed.


    And in my as2_server.log I have :

    11/08/16 16:10:21 AS2ReceiverHandler: incoming connection xxx.xxx.8.30 15614
    11/08/16 16:10:21 AS2ReceiverHandler: received 2544 bytes in 0.14 seconds at 177.466 KBps xxx.xxx.8.30 15614 [MOKOsi8453581584481bdb1node1xxxxxxxxxxxxxxx@xxxxxxxxx]
    11/08/16 16:10:21 AS2ReceiverHandler: decrypting ::: [MOKOsi8453581584481bdb1node1xxxxxxxxxx@xxxxxxx]
    11/08/16 16:10:21 BCCryptoHelper: Extracted X500 info:: PRINCIPAL : CN=as2.xxxxxxxxxxx.it, OU=IT, O=xxxxxxxxxxxxx, L=xxxxxxxxxxxxx, ST=ITALY, C=IT :: NAME : CN=as2.xxxxxxxxxxxxx.it,OU=IT,O=xxxxxxxxxxxxxx,L=xxxxxxxxxx,ST=ITALY,C=IT
    11/08/16 16:10:21 AS2ReceiverHandler: verifying signature [MOKOsi8453581584481bdb1node1xxxxxxxxxxxxx@xxxxxxxxx]
    11/08/16 16:10:21 BCCryptoHelper: Signer verification failed:: Verification failed
    11/08/16 16:10:21 AS2ReceiverHandler: Error decrypting received message.
    11/08/16 16:10:21 java.security.SignatureException: Verification failed
    at org.openas2.lib.helper.BCCryptoHelper.verify(Unknown Source)
    at org.openas2.processor.receiver.AS2ReceiverHandler.decryptAndVerify(Unknown Source)
    at org.openas2.processor.receiver.AS2ReceiverHandler.handle(Unknown Source)
    at org.openas2.processor.receiver.NetModule$ConnectionThread.run(Unknown Source)

    11/08/16 16:10:21 BCCryptoHelper: Calc MIC called with digest: sha1 ::: Incl headers? true
    11/08/16 16:10:21 BCCryptoHelper: Params for creating SMIME signed generator:: SIGN DIGEST: sha1 PUB ENCRYPT ALG: RSA X509 CERT: [0] Version: 3
    SerialNumber: 713837995
    IssuerDN: C=IT,ST=ITALY,L=xxxxxxxxxxxx,O=xxxxxxxxxx,OU=IT,CN=as2.xxxxxxxxxxxx.it
    Start Date: Sat Oct 31 16:49:30 CET 2015
    Final Date: Tue Oct 28 16:49:30 CET 2025
    SubjectDN: C=IT,ST=ITALY,L=xxxxxxxxxxxx,O=xxxxxxxxxx,OU=IT,CN=as2.xxxxxxxxxxxx.it
    Public Key: RSA Public Key
    modulus: 9eef74600aae43417f560b946db24dff7e062f5199aec1352448ac590963a7ecd5c34ecfd83ff1c1e983f4bc2c8e7988f13a3ee304079872179be1ae30ef6d3182bc425a1567b905805176f2f4c675cf1097de55a49d807cc052bd2dac1276c4b8a33cdaa8dfd871dc1995f85fe8f64324e2f0b1d97854ddf67a9e0a9871fbc54421b7c4c9c5d1fd778d3af97ddf38e0cf6625a8053bd579fb23366e3b29a6546b7ae30703c5494f60ab3a49344b0aace9d0c7cc07f236cc3a01e032211e8b58c1ef163bbf0f1d8ece6aa4e560b3d81e3e5f938c21eb257b7639371f7f04de436c2ca12fdf5acc7b74513466e3ba7bd3296f3cebc8a8e036cd56367e24a45eff
    public exponent: 10001

    Signature Algorithm: SHA1WITHRSA
    Signature: 1d874f591586b7a0b000566546cd277017c3c2a5
    584b6aeba8fb438d293b1f9cf544523b6d449718
    c444ca0bbc4055cf2655c34a1455105ecdcddd11
    4b61d77d1f24defaff7af9344a81d7797a8fe39e
    82cbfdf64b08e4b1d946d9678180924b46ccb0d8
    1a9dc93bcc78081a98b6b8deac0e6d9e67e0b747
    9842d211938e3064e9cf21703f934e0a81be28bd
    df78b9e374e62e47d91a493fd76486873266d2fe
    23d5c695efd79fbd77e819a656aa5557ad35164a
    3a1c681cc562b36aa986fdcaab3aaed99137e6bd
    fa43e86c9f1de60494eaddaa0efcec51879789e4
    ed07725318442e2b324823c32121de9a2b95b69d
    f5ae0583fbbcac83e7dbc48dd17cade5
    Extensions:
    critical(false) 2.5.29.14 value = DER Octet String[20]

    11/08/16 16:10:22 MessageParameters: Attempting filename extraction from Content-disposition: null
    11/08/16 16:10:22 AS2ReceiverHandler: sent MDN [automatic-action/MDN-sent-automatically; processed/Error:integrity-check-failed] xxx.xxx.8.30 15614 [MOKOsi8453581584481bdb1node1xxxxxxxxxxxxxxxxxxxx@xxxxxxxxxxxx]

    What's the problem ?

    Thank You
    Mark

     
  • Christopher Broderick

    You should upgrade to the latst release. There were a number of bugs and enhancements around signing and encryption that could possibly be causing this issue and the quickets solution is to ty the latest release and if that does not work then start debugging. Note that there are a number of troubleshooting tips in the latest OpenAS2HowTo that may help but most of the solutions will require the latest version of the app.
    See the changes.txt file in the latest release for all the bug fixes and enhancements since version 1.3.3

     
  • Marco Marcantelli

    Hi
    I updated openas2 server (as2vann), but now I receive an error when I try to send message to another openas2 server (as2ark). Before the upgrade everything working, now I can send messages from as2ark to as2vann but not viceversa.
    This is my partnerships.xml

        <partner name="as2vann"
                as2_id="edivp1189"
                x509_alias="as2xxxxx"
                email="info@xxxxxxxxx.it"/>
    
        <partner name="as2ark"
                as2_id="ediark1106"
                x509_alias="as2yyyyyyy"
                email="info@xxxxxxxxx.it"/>
    
        <partnership name="as2vann-to-as2ark">
                <sender name="as2vann"/>
                <receiver name="as2ark"/>
                <attribute name="protocol" value="as2"/>
                <attribute name="content_transfer_encoding" value="binary"/>
                <attribute name="compression_type" value="ZLIB"/>
                <attribute name="subject" value="From as2vann to as2ark"/>
                <attribute name="as2_url" value="http://as2.xxxxxxx.it:80"/>
                <attribute name="as2_mdn_to" value="info@xxxxxxxx.it"/>
                <attribute name="as2_mdn_options" value="signed-receipt-protocol=optional, pkcs7-signature; signed-receipt-micalg=optional, SHA1"/>
                <attribute name="encrypt" value="3DES"/>
                <attribute name="sign" value="SHA1"/>
                <attribute name="resend_max_retries" value="1"/>
                <attribute name="prevent_canonicalization_for_mic" value="false"/>
                <attribute name="no_set_transfer_encoding_for_signing" value="false"/>
                <attribute name="no_set_transfer_encoding_for_encryption" value="false"/>
                <attribute name="rename_digest_to_old_name" value="false"/>
                <attribute name="remove_cms_algorithm_protection_attrib" value="false"/>
        </partnership>
    
        <partnership name="as2ark-to-as2vann">
                <sender name="as2ark"/>
                <receiver name="as2vann"/>
                <attribute name="protocol" value="as2"/>
                <attribute name="content_transfer_encoding" value="binary"/>
                <attribute name="subject" value="From as2ark to as2vann"/>
                <attribute name="as2_url" value="http://localhost:10080"/>
                <attribute name="as2_mdn_to" value="info@xxxxxxxxx.it"/>
                <attribute name="as2_mdn_options" value="signed-receipt-protocol=optional, pkcs7-signature; signed-receipt-micalg=optional, SHA1"/>
                <attribute name="encrypt" value="3DES"/>
                <attribute name="sign" value="SHA1"/>
        </partnership>
    

    This is the log :
    OpenAS2 v2.1.3
    Starting Server...
    Loading configuration...
    Registering Session to Command Processor...
    Starting Active Modules...
    OpenAS2 V2.1.3 Started
    11/11/16 14:10:11 OpenAS2Server: - OpenAS2 Started - V2.1.3
    Loading Command Processor...[Thread[Thread-3,5,main], Thread[Thread-4,5,main]]
    Loading Command Processor...[Thread[Thread-3,5,main], Thread[Thread-4,5,main]]
    11/11/16 14:11:31 DirectoryPollingModule: processing /u/as2_server_new/bin/../config/../data/toas2ark/prova11.txt
    11/11/16 14:11:31 MessageBuilderModule: file assigned to message /u/as2_server_new/bin/../config/../data/toas2ark/prova11.txt [OPENAS2-11112016141131+0100-5038@edivp1189_ediark1106]
    11/11/16 14:11:31 MessageBuilderModule: PARTNERSHIP parms: {as2_mdn_options=signed-receipt-protocol=optional, pkcs7-signature; signed-receipt-micalg=optional, SHA1, subject=From as2vann to as2ark, compression_type=ZLIB, remove_cms_algorithm_protection_attrib=false, sign=SHA1, prevent_canonicalization_for_mic=false, no_set_transfer_encoding_for_encryption=false, resend_max_retries=1, content_transfer_encoding=binary, protocol=as2, as2_mdn_to=info@infosvil.it, no_set_transfer_encoding_for_signing=false, encrypt=3DES, as2_url=http://as2.yyyyyyyy.it:80, rename_digest_to_old_name=false} [OPENAS2-11112016141131+0100-5038@edivp1189_ediark1106]
    11/11/16 14:11:31 MessageBuilderModule: RESEND COUNT extracted from config: 1 [OPENAS2-11112016141131+0100-5038@edivp1189_ediark1106]
    11/11/16 14:11:31 MessageBuilderModule: Message object in directory polling module. Content-Disposition: Attachment; filename="prova11.txt"
    Content-Type : application/EDI-X12
    HEADERS : ;;Content-Disposition::Attachment; filename="prova11.txt"
    Content-Disposition in MSG getData() MIMEPART: application/EDI-X12 [OPENAS2-11112016141131+0100-5038@edivp1189_ediark1106]
    11/11/16 14:11:31 DefaultProcessor: Processor searching for module handler for action: send
    11/11/16 14:11:31 AS2SenderModule: message sender invoked [OPENAS2-11112016141131+0100-5038@edivp1189_ediark1106]
    11/11/16 14:11:31 AS2SenderModule: Retry count from options: {retries=1, IS_RESEND=N, DIRECTION=SEND}
    11/11/16 14:11:31 AS2SenderModule: Compression type from config: ZLIB
    11/11/16 14:11:31 AS2SenderModule: Compressing outbound message before signing...
    11/11/16 14:11:31 BCCryptoHelper: Compressed MIME msg AFTER COMPRESSION Content-Type:application/pkcs7-mime; name="smime.p7z"; smime-type=compressed-data
    11/11/16 14:11:31 BCCryptoHelper: Compressed MIME msg AFTER COMPRESSION Content-Disposition:attachment
    11/11/16 14:11:31 BCCryptoHelper: Calc MIC called with digest: SHA1 ::: Incl headers? true ::: Prevent canonicalization: false ::: Encoding: binary
    11/11/16 14:11:31 BCCryptoHelper: Calculating MIC on MIMEPART Headers:
    Content-Description::S/MIME Compressed Message
    11/11/16 14:11:31 AS2SenderModule: Params for creating signed body part:: DATA: javax.mail.internet.MimeBodyPart@6007eb5e
    SIGN DIGEST: SHA1
    CERT ALG NAME EXTRACTED: SHA1WITHRSA
    CERT PUB KEY ALG NAME EXTRACTED: RSA [OPENAS2-11112016141131+0100-5038@edivp1189_ediark1106]
    11/11/16 14:11:31 BCCryptoHelper: Params for creating SMIME signed generator:: SIGN DIGEST: SHA1 PUB ENCRYPT ALG: RSA X509 CERT: [0] Version: 3
    SerialNumber: 713837995
    IssuerDN: C=IT,ST=ITALY,L=xxxxxxx,O=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx,OU=IT,CN=as2.xxxxxxxxxxxxx.it
    Start Date: Sat Oct 31 16:49:30 CET 2015
    Final Date: Tue Oct 28 16:49:30 CET 2025
    SubjectDN: C=IT,ST=ITALY,L=xxxxxxx,O=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx,OU=IT,CN=as2.xxxxxxxxxxxxx.it
    Public Key: RSA Public Key
    modulus: 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
    public exponent: 10001

    Signature Algorithm: SHA1WITHRSA
    Signature: 1d874f591586b7a0b000566546cd277017c3c2a5
    584b6aeba8fb438d293b1f9cf544523b6d449718
    c444ca0bbc4055cf2655c34a1455105ecdcddd11
    4b61d77d1f24defaff7af9344a81d7797a8fe39e
    82cbfdf64b08e4b1d946d9678180924b46ccb0d8
    1a9dc93bcc78081a98b6b8deac0e6d9e67e0b747
    9842d211938e3064e9cf21703f934e0a81be28bd
    df78b9e374e62e47d91a493fd76486873266d2fe
    23d5c695efd79fbd77e819a656aa5557ad35164a
    3a1c681cc562b36aa986fdcaab3aaed99137e6bd
    fa43e86c9f1de60494eaddaa0efcec51879789e4
    ed07725318442e2b324823c32121de9a2b95b69d
    f5ae0583fbbcac83e7dbc48dd17cade5
    Extensions:
    critical(false) 2.5.29.14 value = DER Octet String[20]

    11/11/16 14:11:31 BCCryptoHelper: Signing on MIME part containing the following headers:
    Content-Type == application/pkcs7-mime; name="smime.p7z"; smime-type=compressed-data
    Content-Transfer-Encoding == binary
    Content-Disposition == attachment; filename="smime.p7z"
    Content-Description == S/MIME Compressed Message
    11/11/16 14:11:31 AS2SenderModule: signed data [OPENAS2-11112016141131+0100-5038@edivp1189_ediark1106]
    11/11/16 14:11:31 AS2SenderModule: Adding custom headers to outer MBP.... [OPENAS2-11112016141131+0100-5038@edivp1189_ediark1106]
    11/11/16 14:11:31 BCCryptoHelper: Encrypting on MIME part containing the following headers:
    Content-Type == multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-1;
    boundary="----=_Part_2_244657785.1478869891495"
    11/11/16 14:11:31 AS2SenderModule: encrypted data [OPENAS2-11112016141131+0100-5038@edivp1189_ediark1106]
    11/11/16 14:11:31 AS2SenderModule: Adding custom headers to outer MBP.... [OPENAS2-11112016141131+0100-5038@edivp1189_ediark1106]
    11/11/16 14:11:31 AS2SenderModule: Save Original mic & message id information into file: /u/as2_server_new/bin/../config/../data/pendinginfoMDN3/OPENAS2-11112016141131+0100-5038@edivp1189_ediark1106 [OPENAS2-11112016141131+0100-5038@edivp1189_ediark1106]
    11/11/16 14:11:31 AS2SenderModule: Pending info file written to:/u/as2_server_new/bin/../config/../data/pendinginfoMDN3/OPENAS2-11112016141131+0100-5038@edivp1189_ediark1106
    Original MIC: WUaAQ9KxcRO2d3hU4u5K9xZYT6s=, SHA1
    Retry Count: 1
    Original file name : prova11.txt
    Pending message file : /u/as2_server_new/bin/../config/../data/pendingMDN3/rova11.txt.d0f2ef97-43ce-4c1a-8dd8-1fee0573c66
    Error directory: /u/as2_server_new/bin/../config/../data/toas2ark/error
    Sent directory: null [OPENAS2-11112016141131+0100-5038@edivp1189_ediark1106]
    11/11/16 14:11:31 AS2SenderModule: Message object in sender module. Content-Disposition: Attachment; filename="prova11.txt"
    Content-Type : application/EDI-X12
    HEADERS : ;;Content-Disposition::Attachment; filename="prova11.txt"
    Content-Disposition in MSG getData() MIMEPART: application/EDI-X12 [OPENAS2-11112016141131+0100-5038@edivp1189_ediark1106]
    11/11/16 14:11:31 DefaultProcessor: Processor searching for module handler for action: track_msg
    11/11/16 14:11:31 DbTrackingModule: Tracking record successfully persisted to database: {MSG_ID=OPENAS2-11112016141131+0100-5038@edivp1189_ediark1106, STATE_MSG=Message sending started, IS_RESEND=N, SENDER_ID=edivp1189, DIRECTION=SEND, ENCRYPTION_ALGORITHM=3DES, STATE=msg_send_start, RECEIVER_ID=ediark1106, COMPRESSION=null, FILE_NAME=null, MDN_MODE=SYNC, STATUS=sending_msg, CONTENT_TRANSFER_ENCODING=null, CONTENT_TYPE=application/EDI-X12, SIGNATURE_ALGORITHM=SHA1}
    11/11/16 14:11:31 AS2SenderModule: Connecting to: http://as2.yyyyyyyy.it:80 [OPENAS2-11112016141131+0100-5038@edivp1189_ediark1106]
    11/11/16 14:11:31 AS2SenderModule: transferred 6945 bytes in 0.173 seconds at 39.209 KBps [OPENAS2-11112016141131+0100-5038@edivp1189_ediark1106]
    11/11/16 14:11:32 AS2SenderModule: Message sent. Checking if MDN will be returned... [OPENAS2-11112016141131+0100-5038@edivp1189_ediark1106]
    11/11/16 14:11:32 AS2SenderModule: Waiting for synchronous MDN response... [OPENAS2-11112016141131+0100-5038@edivp1189_ediark1106]
    11/11/16 14:11:32 AS2SenderModule: Synchronous MDN received. Start processing... [OPENAS2-11112016141131+0100-5038@edivp1189_ediark1106]
    11/11/16 14:11:32 AS2SenderModule: Unhandled error condition receiving synchronous MDN. Message and asociated files cleanup will be attempted but may be in an unknown state. [OPENAS2-11112016141131+0100-5038@edivp1189_ediark1106]
    org.openas2.partner.PartnershipNotFoundException: Partnership not found: Partnership null Sender IDs = {as2_id=null} Receiver IDs = {as2_id=null} Attributes = {}
    at org.openas2.partner.BasePartnershipFactory.getPartnership(Unknown Source)
    at org.openas2.partner.BasePartnershipFactory.updatePartnership(Unknown Source)
    at org.openas2.util.AS2Util.processMDN(Unknown Source)
    at org.openas2.processor.sender.AS2SenderModule.handle(Unknown Source)
    at org.openas2.processor.DefaultProcessor.handle(Unknown Source)
    at org.openas2.processor.receiver.MessageBuilderModule.processDocument(Unknown Source)
    at org.openas2.processor.receiver.DirectoryPollingModule.processFile(Unknown Source)
    at org.openas2.processor.receiver.DirectoryPollingModule.updateTracking(Unknown Source)
    at org.openas2.processor.receiver.DirectoryPollingModule.poll(Unknown Source)
    at org.openas2.processor.receiver.PollingModule$PollTask.run(Unknown Source)
    at java.util.TimerThread.mainLoop(Unknown Source)
    at java.util.TimerThread.run(Unknown Source)

    11/11/16 14:11:32 DefaultProcessor: Processor searching for module handler for action: track_msg
    11/11/16 14:11:32 DbTrackingModule: Tracking record successfully persisted to database: {MSG_ID=OPENAS2-11112016141131+0100-5038@edivp1189_ediark1106, STATE_MSG=Message sending failed., IS_RESEND=N, SENDER_ID=edivp1189, DIRECTION=SEND, ENCRYPTION_ALGORITHM=3DES, STATE=msg_send_fail, RECEIVER_ID=ediark1106, MDN_ID=null, COMPRESSION=null, FILE_NAME=null, MDN_MODE=SYNC, STATUS=init_processing_mdn, CONTENT_TRANSFER_ENCODING=null, CONTENT_TYPE=application/EDI-X12, MDN_RESPONSE=null, SIGNATURE_ALGORITHM=SHA1}
    11/11/16 14:11:32 AS2Util: Deleting pendinginfo file : /u/as2_server_new/bin/../config/../data/pendinginfoMDN3/OPENAS2-11112016141131+0100-5038@edivp1189_ediark1106 [OPENAS2-11112016141131+0100-5038@edivp1189_ediark1106]
    11/11/16 14:11:32 AS2Util: deleted /u/as2_server_new/bin/../config/../data/pendinginfoMDN3/OPENAS2-11112016141131+0100-5038@edivp1189_ediark1106 [OPENAS2-11112016141131+0100-5038@edivp1189_ediark1106]
    11/11/16 14:11:32 AS2Util: deleted /u/as2_server_new/bin/../config/../data/pendingMDN3/rova11.txt.d0f2ef97-43ce-4c1a-8dd8-1fee0573c66.object [OPENAS2-11112016141131+0100-5038@edivp1189_ediark1106]
    11/11/16 14:11:32 AS2Util: Cleaning up pending file : rova11.txt.d0f2ef97-43ce-4c1a-8dd8-1fee0573c66 from pending folder : /u/as2_server_new/bin/../config/../data/pendingMDN3 [OPENAS2-11112016141131+0100-5038@edivp1189_ediark1106]
    11/11/16 14:11:32 AS2Util: moved /u/as2_server_new/bin/../config/../data/pendingMDN3/rova11.txt.d0f2ef97-43ce-4c1a-8dd8-1fee0573c66 to /u/as2_server_new/bin/../config/../data/toas2ark/error/rova11.txt.d0f2ef97-43ce-4c1a-8dd8-1fee0573c66 [OPENAS2-11112016141131+0100-5038@edivp1189_ediark1106]

     

    Last edit: Marco Marcantelli 2016-11-11
  • Christopher Broderick

    Please confirm the version of OpenAS2 is running on openark.

     
    • Marco Marcantelli

      Server: OpenAS2 v1.3.3

       
  • Christopher Broderick

    I have replicated the issue and am looking into the underlying cause. It is specific to synchronous MDN so if you want a temporary workaround, change yo asynchronous MDN. Keep in mind that 1.3.3 did not support compression so you must turn that off in the 2.1.3 version if enabled.

     
  • Marco Marcantelli

    Hi
    Thank you very much.

    I tried to change the configurations on AS2VANN and AS2ARK, removing compression but it does not work. I removed : <attribute name="compression_type" value="ZLIB"/>

    Thank you
    Mark

     
  • Christopher Broderick

    Have you switched the comms from VANN to ARK to use ASYNC MDN?
    You need to add an attribute something like this:
    <attribute name="as2_receipt_option" value="http://as2.xxxxxxx.it:yyy"/>
    where yyy is the prot for your your ASYNC MDN listener on VANN

     
  • Christopher Broderick

    Can you provide the partnerships.xml setup on ARK for cmms with VANN

     
  • Marco Marcantelli

    Hi,
    no, I have not switched to ASYNC MDN, I only removed the compression.

    This my partnerships.xml setup on ARK :

    <partnerships>
    <partner name="as2vann" as2_id="edivp1189" x509_alias="as2vann" email="info@xxxxxxxxxxxxx.it"/>
    <partner name="as2ark" as2_id="ediark1106" x509_alias="as2ark" email="info@xxxxxxxxxxxxx.it"/>

        <partnership name="as2ark-to-as2vann">
                <sender name="as2ark"/>
                <receiver name="as2vann"/>
                <attribute name="protocol" value="as2"/>
                <attribute name="content_transfer_encoding" value="binary"/>
                <attribute name="subject" value="From as2ark to as2vann"/>
                <attribute name="as2_url" value="http://yyyyyy.xxxxxxxxxxxxx.it:80"/>
                <attribute name="as2_mdn_to" value="http://yyyyyy.xxxxxxxxxxxxx.it:80"/>
                <attribute name="as2_mdn_options" value="signed-receipt-protocol=optional, pkcs7-signature; signed-receipt-micalg=optional, SHA1"/>
                <attribute name="encrypt" value="3DES"/>
                <attribute name="sign" value="SHA1"/>
        </partnership>
    
        <partnership name="as2vann-to-as2ark">
                <sender name="as2vann"/>
                <receiver name="as2ark"/>
                <attribute name="protocol" value="as2"/>
                <attribute name="content_transfer_encoding" value="binary"/>
                <attribute name="subject" value="From as2vann to as2ark"/>
                <attribute name="as2_url" value="http://localhost:10080"/>
                <attribute name="as2_mdn_to" value="http://localhost:10081"/>
                <attribute name="as2_mdn_options" value="signed-receipt-protocol=optional, pkcs7-signature; signed-receipt-micalg=optional, SHA1"/>
                <attribute name="encrypt" value="3DES"/>
                <attribute name="sign" value="SHA1"/>
        </partnership>
    

    </partnerships>

     
  • Christopher Broderick

    The only way I was able to replicate the issue you are having is if the partnership on ARK for <partnership name="as2ark-to-as2vann"> contains the attribute <attribute name="as2_receipt_option" value="http://xxx.xxx.xxx:yyyy"/>
    The reason for this is that OpenAS2 used to look in the local partnership definition to decide if it should send an ASYNC MDN eventhough the remote partner specified a SYNC MDN so it returns HTTP response "200 OK" with no headers and closes the connection because the MDN is returned on a new connection in ASYNC mode. So the remote partner gets just "200 OK" with no headers and it gets the partneship not found exception.

    Can you confirm that if your partnership definitions on both servers do NOT have the "as2_receipt_option" you still have this error occurring?

     
  • Marco Marcantelli

    Hi,
    yes i confirm, on both servers I have NOT the "as2_receipt_option" and still I have this error. This option has never been present in my configuration and has always given error.

     Thanks
     Mark
    
     
  • Christopher Broderick

    I have created a version that will hopefully give us some insight into what is going on.
    Please download the this ALPHA version onto VANN: https://sourceforge.net/projects/openas2/files/OpenAS2Server-2.1.4ALPHA1.zip/download
    In the start_openas2.sh script uncomment the line containing this: EXTRA_PARMS="$EXTRA_PARMS -DlogRxdMdnMimeBodyParts=true"
    Make sure TRACE level logging is enabled and run the transaction that sends a file to the ARK server. There will probably be a disposition exception and just above it a log line that contains "Received MimeBodyPart for inbound MDN:" .... paste the received Mime into this discussion.