mendelson AS4 2022 b278 released

1
min read
A- A+
read
mendelson AS4

Support for AS4 Profile BDEW 1.0

  • Added the profile BDEW AS4 v1.0 (Bundesverband der Energie- und Wasserwirtschaft) with all required presettings to the product
  • Added functionality to perform elliptic curve cryptography (ECC) to the product
  • Added the functionality to the certificate manager to generate EC keys of a selectable named curve as the BDEW AS4 profile requires key/certificates on the curve "BrainpoolP256r1"
  • Added the information about the name of the named curve of EC keys/certificates
  • Added the symmetric key transport method ECDH-ES (http://www.w3.org/2009/xmlenc11#ECDH-ES) with keywrap kw-aes128 as this is a requirement of the AS4 Profile BDEW
  • Disable the webservice BSR R5621 (Basic Security Profile Rule) as this does not allow ECDH-ES
  • OAUTH2 plugin: Added PKCE (RFC 7636: Proof Key for Code Exchange) for better security
  • Fixed an issue in the partner management: It was impossible to delete the first partner in the partner tree
Tags