Verification of digital signature of inbound AS2 message failed Verification failed

By maxim.shymchenko337 on Tue, 03/05/2024 - 15:26

[3:21:42 PM] [27325d47-44f5-406b-8542-6f5721e3fe04] Inbound transmission is a AS2 message [mYPartner-mycompany], raw message size: 2.83 KB.
[3:21:42 PM] [27325d47-44f5-406b-8542-6f5721e3fe04] Inbound AS2 message is not encrypted.
[3:21:42 PM] [27325d47-44f5-406b-8542-6f5721e3fe04] Inbound AS2 message is signed.
[3:21:42 PM] [27325d47-44f5-406b-8542-6f5721e3fe04] The sender used the algorithm "SHA-256" to sign the inbound AS2 message.
[3:21:42 PM] [27325d47-44f5-406b-8542-6f5721e3fe04] Using certificate "PartnerA Testing" to verify inbound AS2 message signature.
[3:21:42 PM] [27325d47-44f5-406b-8542-6f5721e3fe04] Verification of digital signature of inbound AS2 message failed Verification failed
[3:21:42 PM] [27325d47-44f5-406b-8542-6f5721e3fe04]
[3:21:42 PM] [27325d47-44f5-406b-8542-6f5721e3fe04] Signature certificate information:
[3:21:42 PM] [27325d47-44f5-406b-8542-6f5721e3fe04] Serial number (DEC): 1989011508237000828
[3:21:42 PM] [27325d47-44f5-406b-8542-6f5721e3fe04] Issuer: C=US,ST=New York,L=New York,O=PartnerA,OU=QA,CN=PartnerA Testing
[3:21:42 PM] [27325d47-44f5-406b-8542-6f5721e3fe04]
[3:21:42 PM] [27325d47-44f5-406b-8542-6f5721e3fe04] Verification certificate information:
[3:21:42 PM] [27325d47-44f5-406b-8542-6f5721e3fe04] Serial number (DEC): 1989011508237000828
[3:21:42 PM] [27325d47-44f5-406b-8542-6f5721e3fe04] Serial number (HEX): 1B9A636DB2A1607C
[3:21:42 PM] [27325d47-44f5-406b-8542-6f5721e3fe04] Finger print (SHA-1): 37:8D:95:67:BD:A7:5B:C0:AC:39:1B:E2:31:D0:63:B6:E0:0F:3F:04
[3:21:42 PM] [27325d47-44f5-406b-8542-6f5721e3fe04] Valid from: 3/5/24
[3:21:42 PM] [27325d47-44f5-406b-8542-6f5721e3fe04] Valid to: 2/12/32
[3:21:42 PM] [27325d47-44f5-406b-8542-6f5721e3fe04] Issuer: CN=PartnerA Testing, OU=QA, O=PartnerA, L=New York, ST=New York, C=US
[3:21:42 PM] [27325d47-44f5-406b-8542-6f5721e3fe04] Generating outbound MDN, setting message id to "mendelson_opensource_AS2-COMMUN-1709648502163-16@mycompanyAS2_AS2Ident".
[3:21:46 PM] [mendelson_opensource_AS2-COMMUN-1709648502163-16@mycompanyAS2_AS2Ident] Outbound MDN has not been signed.
[3:21:46 PM] [mendelson_opensource_AS2-COMMUN-1709648502163-16@mycompanyAS2_AS2Ident] Outbound MDN created for AS2 message "27325d47-44f5-406b-8542-6f5721e3fe04", state set to [processed/error: authentication-failed].
[3:21:46 PM] [27325d47-44f5-406b-8542-6f5721e3fe04] Outbound MDN details: Error verifying the senders digital signature: Verification failed
[3:21:46 PM] [27325d47-44f5-406b-8542-6f5721e3fe04]
[3:21:46 PM] [27325d47-44f5-406b-8542-6f5721e3fe04] Signature certificate information:
[3:21:46 PM] [27325d47-44f5-406b-8542-6f5721e3fe04] Serial number (DEC): 1989011508237000828
[3:21:46 PM] [27325d47-44f5-406b-8542-6f5721e3fe04] Issuer: C=US,ST=New York,L=New York,O=PartnerA,OU=QA,CN=PartnerA Testing
[3:21:46 PM] [27325d47-44f5-406b-8542-6f5721e3fe04]
[3:21:46 PM] [27325d47-44f5-406b-8542-6f5721e3fe04] Verification certificate information:
[3:21:46 PM] [27325d47-44f5-406b-8542-6f5721e3fe04] Serial number (DEC): 1989011508237000828
[3:21:46 PM] [27325d47-44f5-406b-8542-6f5721e3fe04] Serial number (HEX): 1B9A636DB2A1607C
[3:21:46 PM] [27325d47-44f5-406b-8542-6f5721e3fe04] Finger print (SHA-1): 37:8D:95:67:BD:A7:5B:C0:AC:39:1B:E2:31:D0:63:B6:E0:0F:3F:04
[3:21:46 PM] [27325d47-44f5-406b-8542-6f5721e3fe04] Valid from: 3/5/24
[3:21:46 PM] [27325d47-44f5-406b-8542-6f5721e3fe04] Valid to: 2/12/32
[3:21:46 PM] [27325d47-44f5-406b-8542-6f5721e3fe04] Issuer: CN=PartnerA Testing, OU=QA, O=PartnerA, L=New York, ST=New York, C=US.
[3:21:46 PM] [mendelson_opensource_AS2-COMMUN-1709648502163-16@mycompanyAS2_AS2Ident] Synchronous MDN sent as answer to message 27325d47-44f5-406b-8542-6f5721e3fe04.

Whats is wrong? I have self-signed certificate of my partner.

Forum
AS2

Comments

Submitted by maxim.shymchenko337 on Tue, 03/05/2024 - 15:29

My partner send this http data:
POST / HTTP/1.1
Host: 192.168.110.91:500
AS2-Version: 1.2
AS2-From: AS2Ident
AS2-To: mycompanyAS2
Subject: Test
Date: Tue, 05 Mar 2024 15:21:40 GMT
From: sender@as2.server.com
Disposition-Notification-To: sender@as2.server.com
Message-ID: f7767392-438e-4e83-bceb-79d480823204
Recipient-Address: http://192.168.110.91:500/
MIME-Version: 1.0
EDIINT-Features: multiple-attachments
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha256; boundary="STARTBOUND_79b2c35f-3317-47ea-9933-9f7957fbbc8d_ENDBOUND"
Content-Length: 2895

--STARTBOUND_79b2c35f-3317-47ea-9933-9f7957fbbc8d_ENDBOUND
Content-Type: application/EDIFACT
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename=edi.dat

dGVzdA==
--STARTBOUND_79b2c35f-3317-47ea-9933-9f7957fbbc8d_ENDBOUND
Content-Type: application/pkcs7-signature; name=smime.p7s; smime-type=signed-data
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename=smime.p7s
Content-Description: S/MIME Cryptographic Signature

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
--STARTBOUND_79b2c35f-3317-47ea-9933-9f7957fbbc8d_ENDBOUND--