Incorrect X25519 URI used for key agreement
The constant ALGO_ID_KEYAGREEMENT_X25519 defined in EncryptedKeyPartHandlerX25519 uses an incorrect URI:
http://w3.org/2021/04/xmldsig-more#x25519
The URI is missing the required www. prefix.
According to RFC 9231, Section 2.7.1, the correct URI is:
http://www.w3.org/2021/04/xmldsig-more#x25519
This causes receiving AS4 systems to reject messages with an UNSUPPORTED_ALGORITHM error during decryption.
- Read more about Incorrect X25519 URI used for key agreement
- 1 comment
- Log in or register to post comments