Test ELMA updated SMP certificate and the latest Oxalis stable release 7.1.1 fails to lookup

[artjomsk]

Hi!
I'm getting error

network.oxalis.vefa.peppol.security.lang.PeppolSecurityException: Validation of subject principal(CN) failed.
at network.oxalis.vefa.peppol.security.util.DifiCertificateValidator.validate(DifiCertificateValidator.java:64)
at network.oxalis.vefa.peppol.lookup.LookupClient.getServiceMetadata(LookupClient.java:84)

on test env, After debugging I've figured out that it's because of SMP cert validation. peppol-security lib expects issuer's CN to be "PEPPOL SERVICE METADATA PUBLISHER TEST CA - G2", but the actual value is "PEPPOL SERVICE METADATA PUBLISHER TEST CA - G3".

I see that it was fixed in vefa-peppol 4.2.0, but no Oxalis stable release is available yet with the version.

Maybe you can advise some workaround before the release? For example, is it safe to use Oxalis RC releases? Or to combine vefa-peppol 4.2.0 with Oxalis 7.1.1 ? Or is it better to switch off validation by adding

security.validator.class = network.oxalis.vefa.peppol.security.util.EmptyCertificateValidator

to oxalis.conf?

[aaron-kumar]

@artjomsk Production release of Oxalis-NG v1.2.0-RC8 & Oxalis 7.2.0-RC5/ Oxalis-AS4 7.2.0-RC5 is scheduled by end of this week.