Replies: 1 comment
-
Hello, Could you help us to verify this issue? Thanks, |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
When sending documents to other access points, we can see the following security warning in our logs
No Subject DN Certificate Constraints were defined. This could be a security issue
Logged by org.apache.wss4j.common.crypto.CryptoBase
My guess that this is because we allow to send documents to any of the access points (trusted by the Peppol Authority root CA), and we don't whitelist only specific access points.
Does that make sense, or is this indicating an other issue?
Note that we are using Oxalis & Oxalis-AS4 5.0.1.
Thanks in advance,
Beta Was this translation helpful? Give feedback.
All reactions