AS2 Sender channel micAlg validation failed with SHA-256

[martin_stampfl3]

Hi everybody,

we have a AS2 - PI - IDOC scenario where we have the problem of micAlg validation against AS2-channel (see attachment). The partner is sending with SHA-256 as configured in our communication AS2 channel. Do you have a idea why this problem occurs?

Thanks for your help

Regards Martin

[Harish · Accepted solution]

Hi Martin,

As per the error, message is not encrypted and channel is configure with SHA 256. try to remove the encryption config and test.

also test the below thread

MIC-field in MDN missing :Sender AS2 adapter | SCN

regards,

Harish

[martin_stampfl3 · Accepted solution]

Hi Harish,

thanks a lot for your reply. That was also my first guess. I spoke with our partner and have verified that the micalg really is SHA-256:

When we configure our Sender AS2-Channel with SHA-1 and without any changes on partner side, the message was successfully sent.

Regards Martin

[martin_stampfl3]

Hi everybody,

unfortunately i didn't find any solution for this problem. We tried a lot of different configurations with our partner, but nothing worked. Do you still maybe have any suggestions.

Thanks already.

Regards Martin

[Ryan-Crosby]

Hi Martin,

We had a similar issue recently with one of our partners and it was occurring for a couple of reasons.  Our scenario was outbound instead of inbound but some of the information may help you out.

1. They asked us to switch to SHA-256 so we setup our configuration but then continued to sign using SHA-1.

2. We were requesting a synchronous MDN but they were sending it asynchronously.

I see you are using Mendelson and we used that to confirm locally that PO was working just fine and that was when we were able to identify the issues with what they were doing on their end.  If you are still having trouble I would recommend setting up a fake end to end scenario with Mendelson running on a desktop and you can validate with a second fake certificate.

Regards,

Ryan Crosby