Giters

holodeck-b2b / Holodeck-B2B

Holodeck B2B is an AS4 system-to-system messaging solution that implements the OASIS specifications for ebMS3 and it's AS4 profile. For more information visit the project website

Home Page:http://holodeck-b2b.org

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Processing of a received message with more than 30 attachments fails

sfieten opened this issue · comments

commented

When Holodeck B2B receives a message that has 30 attachments or more the processing fails in org.holodeckb2b.msgproc.RESPONDER_IN_FLOW.ProcessWSSHeaders logging the following error message:
Failed signature validation: Missing message ID;A maxiumum of 30 references per Manifest are allowed with secure validation. Caused by: MarshalException;A maxiumum of 30 references per Manifest are allowed with secure validation

commented

As indicated in the error message logged this is due to the XML Signature Secure Validation Mode being enabled when the signature of the message is verified. In this mode the number of ds:Reference elements in a XML Signature is limited to 30.
This validation mode and limit are hard coded in the security libraries used by Holodeck B2B, therefore it requires a code change in Holodeck B2B to remove this limit.