Test certificate to use in AP

[Ma-nik]

Hi Philip Helger,

I am using phase4-peppol-client to invoice push into the peppol, As a first step I received the test AP certificate from peppol and load it in application.properties. When I tried to test MainPhase4PeppolSender.java in test files I got "Error during certificate path validation: No trusted certs found" error

On further debugging I found that the certificate the verified i entered in application.properties and the certificate from the SMP are different

For this test whether i have to resister my test endpoints with my verified AP certificate If yes Can you please elaborate the steps in making the test endpoints
Or if have to change the application.properties file with the certificate give in

If yes how to generate the certificate file .p12 for this

Thankyou.

[phax]

Well, OpenPeppol uses different PKIs for APs and SMP - see https://openpeppol.atlassian.net/wiki/spaces/OPMA/pages/193069072/Introduction+to+the+revised+PKI+Certificate+infrastructure+and+issuing+process for a graphical representation.

Your error indicates, that you wanted to send a message to yourself - so you run client and server on the same machine. Correct?

Is my assumption correct, that you haven't setup an SMP so far, where you register your receiving capabilities? Correct?

In this scenario, you cannot use MainPhase4PeppolSender because it expects an SMP entry and is configured that this client sends to be my test receiver (9915:helger). Instead try to use MainPhase4PeppolSenderLocalHost8080 which skips the SMP lookup and where you provide the URL and public AP certificate manually (you need to use your AP certificate public part instead of mine).

Also your error incdicates a problem with the "trust store" configuration:

org.apache.wss4j.crypto.merlin.truststore.type=jks
# For Test only use:       truststore/2018/pilot-truststore.jks
# For Production only use: truststore/2018/prod-truststore.jks
org.apache.wss4j.crypto.merlin.truststore.file=truststore/complete-truststore.jks
org.apache.wss4j.crypto.merlin.truststore.password=peppol

For initial testing, I recommend you leave the defaults as they are. This truststore is part of application and you don't need to build it. See https://github.com/phax/peppol-commons/tree/master/peppol-commons/src/main/resources/truststore

[Ma-nik]

Thankyou Philip, It Works for me But we throw when pMode is null, I just need some clarifications regarding profiles , Is there any link or doc for that. what is profile and pModes

[phax]

@Ma-nik than class StoringPeppolIncomingSBDHandlerSPI is your goto class. It is the one that is handling the incoming message.

[phax]

The file received (as SBDH) is available in 3 different representations: as the source byte array, as a generic JAXB data model and as specific Peppol SBDH representation. Usually the SBDH bytes are a good means to store them for processing in the backend system.

[Ma-nik]

Hi @phax, Thanks a lot this works for me, I received the SBD in the receiver AP
I need a clarification, what is the difference in phase4-peppol-server-webapp and phase4-server-webapp, As of now i worked with phase4-server-webapp but it seems like phase4-peppol-server-webapp also does the same job.
I am trying to build a AP and SMP to send and receive SBDs which one i have to use?

[phax]

For the use of Peppol I clearly recommend the phase4-peppol-server-webapp as it contains the Peppol specific APIs. phase4-server-webapp is a "generic AS4" solution and has no benefits of using the Peppol support.

[Ma-nik]

Thankyou Philip, I will look into it.