phax / phase4

phase4 - AS4 client and server for integration into existing systems. Specific support for Peppol and CEF eDelivery built-in.
Apache License 2.0
147 stars 48 forks source link

Sending Einvoice to SG ABN resulting in Invalid Certificate Error #221

Closed duke-nuke closed 6 months ago

duke-nuke commented 6 months ago

Hi

I am trying to send an einvoice to Singapore ABN , but getting below Error

Error during certificate path validation: No trusted certs found cause: Error during certificate path validation: No trusted certs found I am able to send einvoice to australia and nz ABNs i have contacted vendor they are saying i am not using SG Peppol BIS 3.0 any help would be appreciated regards Khurram
phax commented 6 months ago

Hi, this message usually has nothing to do with the SG Peppol BIS 3.0 content. The error message Error during certificate path validation: No trusted certs found indicates, that something is wrong with the certificates used. Either you are signing with the wrong certificate, or you are encrypting with the wrong certificate.

Can you please post the the following here and I will check some setup details:

duke-nuke commented 6 months ago

0195:MDADEMO0002

phax commented 6 months ago

Okay, so they are running Oxalis 5.5 in the production Network only.

duke-nuke commented 6 months ago

Are you also using the production certificate in your code? Yes Production AP Certificate ( i tried sending another Participant ID and it was success SGTSTIMDADEMO08

Do you always do an SMP lookup before sending?

Yes the logs suggest that lookup is always performed .

phax commented 6 months ago

Hmm, then I am out of ideas, if other transmissions work. When you try sending a correct Peppol SG document, does the error message change?

duke-nuke commented 6 months ago

thanks issue is resolved i was signing the message with test certificate on Production

phax commented 6 months ago

Ah okay - that makes sense and good that it causes an error. However, this should have lead to issues for the other receivers as well, you mentioned earlier.... MAybe you can ping them and let them know, that they have an issue.

Closing this issue now