Authentication errors after BusinessConnect upgrade

Authentication errors after BusinessConnect upgrade

book

Article ID: KB0070153

calendar_today

Updated On:

Products Versions
TIBCO BusinessConnect 7.4.0

Description

After upgrading to BusinessConnect 7.4.0, AS2 and other signed transactions (such as RosettaNet) that previous worked with trading partners now fail with an authentication-error or failed-to-authenticate message.  

This issue is caused by a change in the underlying Tibcrypt library, which now adds an RFC 6211 CMS Algorithm Protection attribute to the SMIME envelope to outbound signed messages.  Some older AS2 implementation can not handle this attribute, hence the error.
 

Environment

all platforms

Resolution

Add the follow property to all BC deployed interior server tra files:

java.property.com.tibco.security.smime.skipRFC6211=true

This will suppress the attribute from being added, and allow communication with these trading partners,  Other trading partners should not be impacted, as the CMS Algorithm Protection attribute is an optional attribute.

Issue/Introduction

After upgrading, BusinessConnect AS2 transactions that previous worked with trading partners now failed with an authentication-error or failed-to-authenticate