search

phax / phase4

phase4 - AS4 client and server for integration into existing systems. Specific support for Peppol and CEF eDelivery built-in.
Apache License 2.0
147 stars 48 forks source link

Not working with brainpool curve based encryption required for BDEW profile #226

Closed sbarlabanov closed 6 months ago

sbarlabanov commented 6 months ago

It is not possible to issue a valid signed and encrypted AS4 message using BDEW client with keys generated with brainpoolP256r1 EC algorithm. It looks like wss4j and xmlsec do not support brainpool curves - only NIST curves (secp256r1, secp384r1...).

brainpoolP256r1 is unfortunately the only one allowed curve for BDEW profile.

Anybody already faced that issue? Or are we doing something wrong? :(