Peppol PKI Migration 2025 #334
phax
announced in
Announcements and Migrations
Replies: 1 comment 1 reply
-
|
Hi Philip, Thank you for your great work. |
Beta Was this translation helpful? Give feedback.
1 reply
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
So, OpenPeppol officially released the details on the PKI migration: https://openpeppol.atlassian.net/wiki/x/A4Aa7Q
What does that effectively mean for phase4 users:
truststore/2018/pilot-truststore.jks(typeJKS)truststore/2025/ap-test-truststore.p12(typePKCS12)truststore/2018/prod-truststore.jks(typeJKS)truststore/2025/ap-prod-truststore.p12(typePKCS12)Note 1: The "2025" default truststores contain both the G2 as well as the G3 CAs. Once the G2 certificates are no longer usable, they will be automatically removed when you update to a later version of phoss SMP.
Note 2: If you are using
truststore/2018/complete-truststore.jks- this is considered insecure. No such truststore exists for the G3 PKI. Please choose one of the above ones, depending on the network stage you are using.Note 3: Don't forget to update the truststore type configuration property as well and use
PKCS12Note 4: The password for all mentioned predefined truststores is
peppol(case-sensitive)Beta Was this translation helpful? Give feedback.
All reactions