AS4Encryptor - Symetric Key Change

[piotr-dajlido]

Referring to com.helger.phase4.messaging.crypto.AS4Encryptor:

I would like to impact the symmetric key generation type. More precisely, I have to change the generated key to KeyUtils.getKeyGenerator(AES_128_GCM);

Is ICryptoSessionKeyProvider and option? Please @phax point me in right direction and I'm sure we'll figure it out :)

[phax]

Yes exactly. In the AS4CryptParams you can set the ICryptoSessionKeyProvider. By default a random AES-128 key is generated. I guess it makes sense to a default solution for AES-128 GCM as well, so I did :) Will be part of the 3.0.1 release

[piotr-dajlido]

I don't think it might be related but :
Phase4CEFSender.builder()is throwing java.lang.ClassNotFoundException: com.helger.security.keystore.ITrustStoreDescriptor

What happend in version 3.0.0 so that this error occurs?

[phax]

Please make sure, that you are using ph-commons 11.1.10 in your code - previous versions will not work.

[piotr-dajlido]

It is there. Also the error is not deterministic. This time it is IKeyStoreAndKeyDescriptor missing, @phax is there any custom classloaders in the project?

[phax]

As I can see in your image you are e.g. using "ph-collections 11.1.8" - this should also be 11.1.10
The best way to include all the same versions for dependency submodules is via the BOM import in your pom.xml.
Example for ph-commons stuff only:

  <dependencyManagement>
    <dependencies>
      <dependency>
        <groupId>com.helger.commons</groupId>
        <artifactId>ph-commons-parent-pom</artifactId>
        <version>11.1.10</version>
        <type>pom</type>
        <scope>import</scope>
      </dependency>
    </depndencies>
  </dependencyManagement>

This ensures, that all submodules from the ph-commons project use the same version.
Alternatively you don't explicitly include this at all and only use the phase4 include - this should transitively pick the right version

[piotr-dajlido]

Had to delete entire .m2 folder but it worked, thx

[phax]

This should not be the case. Feel free to send me your pom.xml per mail (see my pom) and I can provide you with a proposal...