search

holodeck-b2b / Holodeck-B2B

Holodeck B2B is an AS4 system-to-system messaging solution that implements the OASIS specifications for ebMS3 and it's AS4 profile. For more information visit the project website
http://holodeck-b2b.org
GNU General Public License v3.0
71 stars 36 forks source link

Generated Content-Id can result in signature failure #99

Closed sfieten closed 4 years ago

sfieten commented 5 years ago

The Content-Id generated by HB2B for a payload contains spaces if the MessageId of the message does so. This results in an invalid Content-Id but also in failure when executing WS-Security signing.

sfieten commented 5 years ago

Note that a MessageId containing spaces is invalid in itself and therefore not be used by back-end systems anyway.