Security

<< Click to Display Table of Contents >>

Navigation:  Reference > Partner management > AS2 >

Security

Ref_AS2_004

 

AS2 message settings

 

Encryption

Specifies whether outgoing messages should be encrypted and if so, with which encryption algorithm.

 

Signature

Specifies whether outgoing messages should be signed and if so, with which signature algorithm.

 

MDN settings

 

Request signed MDN

Defines whether a signed confirmation should be requested from the other side when sending AS2 messages.

 

Always send signed MDN

Specifies whether a signed acknowledgement should always be sent when AS2 messages are received, regardless of how the acknowledgement was requested by the other party.

 

Certificates

 

Under Certificates you can specify one or more certificates of a partner. Different purposes can be specified for each certificate. Depending on the AS2 functions used, certificates with the corresponding purpose must be specified. One certificate can be used for all purposes, or multiple certificates can be used for different purposes. If multiple certificates are specified for one purpose, !MC5 automatically uses the latest valid certificate. The currently used certificates are displayed in bold.

 

Disable domain check for HTTPS connection

With AS2, when the TLS connection to the partner is established, it is checked whether the certificate reported back by the other side contains the domain name that was "dialed" (i.e., the host name specified in the Host / URL field under Dispatch ). If the certificate does not match the specified host, then the connection is terminated. Some partners do not specify a host name, but only an IP address for their AS2 connections, or they use a certificate that does not contain the host used. In such cases, the domain check must be disabled so that an outgoing connection can be established. In this case, the certificate transmitted by the other side must then correspond exactly to the one that was stored for the partner with the purpose of TLS authentication.