SendRegning/sr-peppol — Issue #4: Problems with pre-installed PEPPOL certificates
Author: steinarcook
Created: 2011-11-30 07:49:26+00:00
State: open

However, I am not successful in passing messages between them -- which I thought would be a perfect test scenario.
The reason seems to be the certificates.

You state in yesterday's presentation that the webapp comes pre-installed with a trust-store.
But doesn't that mean that I can only send messages to the webapp if I am in possession of the private key of the certificate in the pre-loaded trust-store?

Details about my scenario
For your information, I have tried the following scenario:
- I have created a keystore containing a single self-signed certificate with a private key.
- This is referenced from the oxales-web.properties file and seems to be loaded nicely by the webapp.
Property definition: oxalis.keystore=c:/tmp/peppol/keystore.jks
- I also use it in the command-line tool when sending a document message
Standalone command: java -jar oxalis.jar -k c:/tmp/peppol/keystore.jks -p=peppol -d CENBII-Order-maximal.xml -c CH1 -r 9909:976098897 -s 9909:976098897 -u https://localhost:8443/oxalis/accesspointService

But since the webapp uses a different truststore, this shouldn't work -- and indeed it doesn't: It fails with an OCSP validation error.

What do you suggest? What would be a valid test-scenario using the standalone client and the webapp?