Oct
28
2022
Support for AS4 Profile BDEW 1.0
<ul>
<li>Added the profile BDEW AS4 v1.0 (Bundesverband der Energie- und Wasserwirtschaft) with all required presettings to the product</li>
<li>Added functionality to perform elliptic curve cryptography (ECC) to the product</li>
<li>Added the functionality to the certificate manager to generate EC keys of a selectable named curve as the BDEW AS4 profile requires key/certificates on the curve "BrainpoolP256r1"</li>
<li>Added the information about the name of the named curve of EC keys/certificates</li>
<li>Added the symmetric key transport method ECDH-ES (http://www.w3.org/2009/xmlenc11#ECDH-ES) with keywrap kw-aes128 as this is a requirement of the AS4 Profile BDEW</li>
<li>Disable the webservice BSR R5621 (Basic Security Profile Rule) as this does not allow ECDH-ES
<li>OAUTH2 plugin: Added PKCE (RFC 7636: Proof Key for Code Exchange) for better security</li>
<li>Fixed an issue in the partner management: It was impossible to delete the first partner in the partner tree</li>
</ul>