Peppol PKI Migration 2025: Issue with certificate

[mdcode1]

Hello,

We are testing Peppol PKI Migration 2025. We are an AP solution and we want to test
our capability of sending document with our PKI G3 delivered by Peppol.

Our solution use:
phase4 v3.2.2
peppol-commons v11.0.6

To test the migration I'm using Peppol testbed with the test suite :
PKI SUBMISSION MIGRATION TEST SUITE (G3)

This test suite contains 2 different testcases and I have two different behavior:

1st test case: G3 message submission with G2 SignalMessage reception
I send the document and I receive the answer -> the test is successful
9922:OPTBCNTRLP5001 is the receiver given by the test case.

2nd test case: G3 message submission with G3 SignalMessage reception
But I'm not able to send due to this error :
com.helger.phase4.dynamicdiscovery.Phase4SMPException: Failed to resolve SMP endpoint (iso6523-actorid-upis::9922:optbcntrlp5002, busdox-docid-qns::urn:oasis:names:specification:ubl:schema:xsd:Invoice-2::Invoice##urn:cen.eu:en16931:2017#compliant#urn:fdc:peppol.eu:2017:poacc:billing:3.0::2.1, cenbii-procid-ubl::urn:fdc:peppol.eu:2017:poacc:billing:01:1.0, peppol-transport-as4-v2_0)
caused by javax.xml.crypto.dsig.XMLSignatureException: cannot find validation key
caused by javax.xml.crypto.KeySelectorException: Failed to select public key from certificate [
[
Version: V3
Subject: CN=POP000005, OU=PEPPOL TEST SMP, O=OpenPeppol Operating Office, C=BE
.... (I cut on purpose the rest of the certificate logged by the stacktrace)
]

9922:OPTBCNTRLP5002 is the receiver given by the test case.
POP000005 is not us.

The difference between the two test cases is the receiver given by the test case

It's how I setup the wss4j truststore:
"org.apache.wss4j.crypto.merlin.load.cacerts" = "false"
"org.apache.wss4j.crypto.merlin.truststore.type" = "PKCS12"
"org.apache.wss4j.crypto.merlin.truststore.file" = "truststore/2025/smp-test-truststore.p12"
"org.apache.wss4j.crypto.merlin.truststore.password" = "peppol"

How can I solve this issue ?

Best regards,

[phax]

Hello @mdcode1
Most likely you are missing the truststore configuration of the SMP client.
Please add the following properties to your application.properties, if they are missing:

# SMP Client
smpclient.truststore.type=PKCS12
# All these truststores are predefined, and are part of the peppol-commons library
#   See https://github.com/phax/peppol-commons/tree/master/peppol-commons/src/main/resources/truststore
#
# For Test only use:       truststore/2025/smp-test-truststore.p12
# For Production only use: truststore/2025/smp-prod-truststore.p12
smpclient.truststore.path=truststore/2025/smp-test-truststore.p12
smpclient.truststore.password=peppol

[mdcode1]

Thanks, it was a issue with the SMP Client configuration.