Certificate Validation failing when trying to get Endpoint Details from Malaysia SMP

[anudhij]

I am getting the below error message: Caused by: javax.xml.crypto.MarshalException: It is forbidden to use algorithm http://www.w3.org/2000/09/xmldsig#rsa-sha1 when secure validation is enabled
When trying to get the Endpoint Details from Malaysia SMP. I have received the response from the SMP & SML for the Receiver's Access Point, but the transmission is failing with the above message. What could be the reason & how do I resolve this?

[anudhij]

Sharing the stack trace below
Caused by: network.oxalis.vefa.peppol.security.lang.PeppolSecurityException: Unable to verify document signature. at network.oxalis.vefa.peppol.security.xmldsig.XmldsigVerifier.verify(XmldsigVerifier.java:52) ~[peppol-security-3.4.0.jar:na] at network.oxalis.vefa.peppol.lookup.reader.BusdoxReader.parseServiceMetadata(BusdoxReader.java:121) ~[peppol-lookup-3.4.0.jar:na] at network.oxalis.vefa.peppol.lookup.reader.MultiReader.parseServiceMetadata(MultiReader.java:67) ~[peppol-lookup-3.4.0.jar:na] at network.oxalis.vefa.peppol.lookup.LookupClient.getPotentiallySignedMetadata(LookupClient.java:139) ~[peppol-lookup-3.4.0.jar:na] at network.oxalis.vefa.peppol.lookup.LookupClient.getServiceMetadata(LookupClient.java:81) ~[peppol-lookup-3.4.0.jar:na] at network.oxalis.vefa.peppol.lookup.LookupClient.getEndpoint(LookupClient.java:168) ~[peppol-lookup-3.4.0.jar:na] at network.oxalis.outbound.lookup.CachedLookupService.load(CachedLookupService.java:79) ~[oxalis-outbound-6.4.0.jar:na] at network.oxalis.outbound.lookup.CachedLookupService.load(CachedLookupService.java:46) ~[oxalis-outbound-6.4.0.jar:na] at com.google.common.cache.LocalCache$LoadingValueReference.loadFuture(LocalCache.java:3570) ~[guava-32.0.0-jre.jar:na] at com.google.common.cache.LocalCache$Segment.loadSync(LocalCache.java:2312) ~[guava-32.0.0-jre.jar:na] at com.google.common.cache.LocalCache$Segment.lockedGetOrLoad(LocalCache.java:2189) ~[guava-32.0.0-jre.jar:na] at com.google.common.cache.LocalCache$Segment.get(LocalCache.java:2079) ~[guava-32.0.0-jre.jar:na] at com.google.common.cache.LocalCache.get(LocalCache.java:4011) ~[guava-32.0.0-jre.jar:na] at com.google.common.cache.LocalCache.getOrLoad(LocalCache.java:4034) ~[guava-32.0.0-jre.jar:na] at com.google.common.cache.LocalCache$LocalLoadingCache.get(LocalCache.java:5010) ~[guava-32.0.0-jre.jar:na] at network.oxalis.outbound.lookup.CachedLookupService.lookup(CachedLookupService.java:71) ~[oxalis-outbound-6.4.0.jar:na] ... 20 common frames omitted Caused by: javax.xml.crypto.MarshalException: It is forbidden to use algorithm http://www.w3.org/2000/09/xmldsig#rsa-sha1 when secure validation is enabled at java.xml.crypto/org.jcp.xml.dsig.internal.dom.DOMSignedInfo.<init>(DOMSignedInfo.java:155) ~[java.xml.crypto:na] at java.xml.crypto/org.jcp.xml.dsig.internal.dom.DOMXMLSignature.<init>(DOMXMLSignature.java:141) ~[java.xml.crypto:na] at java.xml.crypto/org.jcp.xml.dsig.internal.dom.DOMXMLSignatureFactory.unmarshal(DOMXMLSignatureFactory.java:193) ~[java.xml.crypto:na] at java.xml.crypto/org.jcp.xml.dsig.internal.dom.DOMXMLSignatureFactory.unmarshalXMLSignature(DOMXMLSignatureFactory.java:148) ~[java.xml.crypto:na] at network.oxalis.vefa.peppol.security.xmldsig.XmldsigVerifier.verify(XmldsigVerifier.java:45) ~[peppol-security-3.4.0.jar:na] ... 35 common frames omitted

[aaron-kumar]

@anudhij : Please refer : OxalisCommunity/Oxalis-AS4#200 . Either you can override validation with Java 17 or wait for SMP to apply 1.3 specifications