AS2 Connector Release Notes - Mule 4

Support Category: Premium

Anypoint Connector for AS2 (Applicability Statement 2) is a specification about how to transport data securely and reliably over the internet. Security is achieved by using digital certificates and encryption.

Mule runtime engine (Mule) supports the AS2 protocol through the Anypoint Connector for AS2 (AS2 Connector). AS2 Connector enables trading partners to transmit and receive AS2 messages with EDI-X12, EDIFACT, XML, or binary payloads.

6.7.1

March 26, 2024

What’s New

The following libraries are upgraded to address reported security vulnerabilities:

  • The bcprov-jdk18on library is upgraded to version 1.77.

  • The bcpkix-jdk18on library is upgraded to version 1.77.

Compatibility

Software Version

Mule

4.3.0 and later

OpenJDK

8, 11, and 17

Fixed Issues

Issue Resolution ID

The connector now returns the correct MDN error when the payload is encoded using Base64, as defined in RFC 4648.

W-15099775

6.7.0

February 5, 2024

What’s New

  • This connector is now compatible with Java 17.

  • You can now configure the AS2 Listener to use a different keystore entry for the MDN signature than the one used for decryption.

    To use this feature, select Use different Alias for MDN Signature and complete the Alias For MDN Signature and Private Key Password fields.

    For more information, see the Listener Config section in the AS2 Connector Reference.

Compatibility

Software Version

Mule

4.3.0 and later

OpenJDK

8, 11 and 17

Fixed Issues

Issue Resolution ID

The cryptographic operations now comply with the FIPS 140-2 requirements.

W-14243186

Adjusted the logs to remove sensitive date.

W-14931729

6.6.0

June 22, 2023

What’s New

  • You can now configure the Send with Sync Mdn operation to use a different certificate for MDN signature validation than the one used for encryption.

    To use this feature, select Use different Alias for MDN Signature Validation and complete the x509 Alias For MDN Signature field.

    For more information, see the Send Config section in the AS2 Connector Reference.

Compatibility

Software Version

Mule

4.3.0 and later

OpenJDK

8

Fixed Issues

Issue Resolution ID

The AS2 Listener source now supports AS2-to and AS2-from header values that have double quotes, in accordance with RFC-4130.

W-12975888

The algorithm value used on headers now complies with RFC-8551.

W-13055720

The Send With Asnc Mdn and Send With Sync Mdn operations no longer generate message IDs with colons or extra double quotes, in accordance with RFC-2822.

W-13079117

6.5.0

March 14, 2023

What’s New

  • You can now configure the As2 listener source so that it rejects new, incoming messages that have the same sender, receiver, and message ID as messages that have been processed already.

    To use this feature, select the Check for duplicate messages field and reference a global object store in the Object Store field.

    For more information, see the AS2 Connector Reference.

Compatibility

Software Version

Mule

4.3.0 and later

OpenJDK

8

6.4.1

December 7, 2022

Compatibility

Software Version

Mule

4.3.0 and later

OpenJDK

8

Fixed Issues

Issue Resolution ID

The send operations no longer generate a thread leak in the Threshold or Identity transfer modes when the connector is configured with static expression values.

W-11723371

The send operations no longer generate a thread leak in dynamic configuration situations.

W-11796931

Payloads can now be encrypted with the AES256_WRAP algorithm, regardless of their length.

W-11888057

6.4.0

November 14, 2022

What’s New

  • You can now configure the As 2 listener source to send the MDN at the end of the flow by using the Mdn mode option AUTO.

  • You can now configure retries to ensure the delivery of the MDN by using the Retry interval and Retry count fields in the Async MDN Connection Provider global configuration.

  • A new field named Validate certificate expiration date enables you to enable or disable the certificate expiration date validation.

  • The console logs a warning message when a certificate approaches its expiration date or if it already expired. You can configure when to get the warning by using the new Warning before (days) in the KeyStore Config field.

    For more information, see the AS2 Connector Reference.

Compatibility

Software Version

Mule

4.3.0 and later

OpenJDK

8

Fixed Issues

Issue Resolution ID

The As 2 listener now sends back the MDN if there are errors.

W-11303187

The As 2 mdn listener won’t throw an exception when receiving an MDN without the Received-Content-Mic field.

W-11633079

When an error occurs in the As 2 listener, the execution of the flow now stops.

W-11633272

If an error occurs when setting the Request a Receipt field to SIGNED_REQUIRED from the Send configuration, the received MDN is now handled correctly.

W-11633356

The connector now cleans the temporal files created when the resource threshold is reached.

W-11715911

The As 2 listener now sends back the HTTP response when an async and unsigned MDN is requested.

W-11837866

6.3.2

August 17, 2022

What’s New

The following libraries are upgraded to address reported security vulnerabilities:

  • The bcprov-jdk15on is upgraded to version 1.69.

  • The bcpkix-jdk15on library is upgraded to version 1.69.

Compatibility

Software Version

Mule

4.3.0 and later

OpenJDK

8

AS2

1.0, 1.1, and 1.2

Fixed Issues

Issue ID

The shared listener mode option now supports using expressions to configure partners.

W-11507857

6.3.1

June 27, 2022

Compatibility

Software Version

Mule

4.3.0 and later

OpenJDK

8

AS2

1.0, 1.1, and 1.2

Fixed Issues

Issue ID

The As 2 listener and As 2 mdn listener sources now process signed and encrypted content correctly when the MIME header boundary entry contains colon characters.

W-11277855

An error is now thrown by the connector when the hostname resolution fails.

W-11278644

6.3.0

June 06, 2022

What’s New

  • You can now configure a single AS2 listener endpoint to receive messages from multiple partners by using the Shared listener mode option.

  • You can now pass custom headers on outbound AS2 messages when using the Send with Sync MDN and Send with Async MDN operations.

Compatibility

Software Version

Mule

4.3.0 and later

OpenJDK

8

Fixed Issues

Issue ID

Log entry levels no longer print informational log messages.

W-11099643

The performance of the MDN listener under a high load is now improved.

W-11142320

AS2 Send operations now correctly handle an unknown-trading-partner error in the message disposition notification (MDN) returned from the receiver.

W-10580735

Known Issues

Known Issue Workaround ID

Using expressions to configure partners when using Shared listener mode does not currently work.

6.2.4

January 24, 2022

Compatibility

Software Version

Mule

4.3.0 and later

OpenJDK

8

AS2

1.0, 1.1, and 1.2

Fixed Issues

Issue ID

Added and improved log messages.

CONN-9128

A NullPointerException error no longer occurs when a server sends a Message Disposition Notification (MDN) that uses lower-case text.

SE-23926

6.2.3

November 17, 2021

Compatibility

Software Version

Mule

4.3.0 and later

OpenJDK

8

Fixed Issues

Issue ID

Outbound encrypted messages contained extra name and smime-type parameters in the Content-Type header. Because extra parameters are no longer supported by the current AS2 RFC, some servers did not process the messages.

CONN-9285

The connector did not accept the smime-type and disposition-notification-options parameters in the Content-Type header with quotes. You can now specify these values with or without quotes.

SE-23387

6.2.2

November 1, 2021

Compatibility

Software Version

Mule

4.3.0 and later

OpenJDK

8

Fixed Issues

Issue ID

The Received-Content-MIC header was not parsed when the space character after a comma was suppressed.

SE-23058

The None option was removed from the General - Transfer Mode Configuration field because it behaved like the default option (Chunked transfer mode).

CONN-9143

6.2.1

October 22, 2021

Compatibility

Software Version

Mule

4.3.0 and later

OpenJDK

8

Fixed Issues

Issue ID

Fixed reported security vulnerabilities.

CONN-9115

6.2.0

September 24, 2021

What’s New

  • The new Custom Message ID property enables you to specify a custom message ID for AS2 send operations.

  • The new Propagate Content Transfer Encoding property indicates whether to propagate the content transfer encoding on the AS2 message sent to the partner.

Compatibility

Software Version

Mule

4.3.0 and later

OpenJDK

8

6.1.4

August 11, 2021

Compatibility

Software Version

Mule

4.3.0 and later

OpenJDK

8

Fixed Issue

AS2 send attributes with auto-generated message IDs are now available after running the Send with Async MDN operation. (CONN-8603)

6.1.3

August 10, 2021

Compatibility

Software Version

Mule

4.3.0 and later

OpenJDK

8

Fixed Issue

The Send operation failed with a digest calculation error when using a signed and encrypted message. (SE-21764)

6.1.2

March 30, 2021

Compatibility

Software Version

Mule

4.3.0 and later

OpenJDK

8

Fixed Issue

Changed the parser to fix the issue with splitting boundary headers. (SE-20159)

6.1.1

November 12, 2020

Compatibility

Software Version

Mule

4.3.0 and later

OpenJDK

8

Fixed Issue

Added ReportingUA (disposition notification content) to fix the issue with Synchronous MDN not working. (SE-18454)

6.1.0

October 30, 2020

Compatibility

Software Version

Mule

4.3.0 and later

OpenJDK

8

New Features

  • Added a new configuration to optionally enable or disable chunked data transfer in the Send operation.

  • Changed the reporting-UA parameter to an optional parameter in the MDN listener.

6.0.2

October 15, 2020

Compatibility

Software Version

Mule

4.3.0 and later

OpenJDK

8

Fixed Issues

  • AS2 Listener did not clear incoming payloads, which caused the /tmp directory to become full and a 'java.io.IOException: No space left on device' error. (SE-17914)

  • The issue that caused a memory leak with Bouncy Castle javax.crypto.JceSecurity in applications with an AS2 Receiver is fixed. (SE-17950)

6.0.1

July 30, 2020

Compatibility

Software Version

Mule

4.3.0 and later

Java

8

Fixed Issue

  • The Subject parameter was not being applied to outgoing AS2 messages.

6.0.0

July 16, 2020

Compatibility

Software Version

Mule

4.3.0 and later

Java

8

New Features

  • Non-repudiation of a signed message is now implemented for all operations and sources in AS2 Connector.

  • AS2 Send with Sync MDN operation now outputs the MDN payload to the user flow instead of the original payload.

  • AS2 Send with Async MDN operation now outputs nothing (void) to the user flow instead of the original payload.

  • AS2 Connector IO performance is improved on CloudHub, as the Send operations no longer retain the original payload.

  • Mule 4.3.0 enables a more efficient way of dispatching reusable streams to the Mule flow by using ImmutableRepeatableFileInputStream.

  • Added support for dynamically passing a Partner URL in AS2 Send operations.

  • The securityLevel configuration parameter sets the Security level requirement on the AS2 Listener to accept only signed, encrypted, or signed-and-encrypted based on your organization’s security guidelines.

Fixed Issue

The deprecated BasicAuthentication field has been removed from the BaseConnection class.

5.1.4

November 2, 2020

Compatibility

Software Version

Mule

4.2.2 and later

OpenJDK

8

Fixed Issues

  • The issue that caused a memory leak with Bouncy Castle javax.crypto.JceSecurity in applications with an AS2 Receiver is fixed. (CONN-7171)

5.1.3

July 30, 2020

Compatibility

Software Version

Mule

4.2.2 and later

Java

8

Fixed Issue

The Subject parameter was not being applied to outgoing AS2 messages.

Known Issues

Signed copies of the document for non-repudiation are not saved.

5.1.2

July 14, 2020

Compatibility

Software Version

Mule

4.2.2 and later

Java

8

Fixed Issue

  • Fixed security vulnerability issues (CONN-6397).

Known Issues

  • Signed copies of the document for non-repudiation are not saved.

5.1.1

April 20, 2020

Compatibility

Software Version

Mule

4.2.2 and later

Java

8

Fixed Issue

  • Validation of the as2-to and as2-from headers did not produce the expected error response (CONN-5653).

Known Issues

  • Signed copies of the document for non-repudiation are not saved.

5.1.0

March 10, 2020

Compatibility

Software Version

Mule

4.2.2 and later

Java

8

New Features

  • Basic Authentication is now available for both send operations and on a receiving source.

Fixed Issue

  • Support using the MIME type set on the input message for AS2 send data (CONN-4668)(SE-13003).

Known Issues

  • Signed copies of the document for non-repudiation are not saved.

5.0.1

February 7, 2020

Compatibility

Software Version

Mule

4.2.2 and later

Java

8

Fixed Issue

  • Fixed the issue where an MDN was not requested or sent, which resulted in an NPE with the payload not being passed to the Mule flow. (SE-14740)

Known Issues

  • Signed copies of the document for non-repudiation are not saved.

  • Authentication over HTTP is currently not supported.

5.0.0

December 2019

Compatibility

Software Version

Mule

4.2.2 and later

Java

8

New Features

  • All operations support message payloads as a stream.

  • Experience using Anypoint Studio to configure Mule 4 application flows using HTTP endpoint configuration is improved, and new error types that improve error handling are available.

  • An explicit asynchronous MDN source enables you to process asynchronous MDN in the application.

  • CloudHub configuration is improved.

  • Information from the AS2 Send and Listener operation output attributes is more detailed.

  • Additional encryption/signing algorithms are now supported.

Known Issues

  • Signed copies of the document for non-repudiation are not saved.

  • Authentication over HTTP is currently not supported.

4.1.6

August 26, 2020

Compatibility

Software Version

Mule

4.2.2 and later

Java

8

Fixed Issue

Fixed the issue that caused the Content Transfer Encoding quoted-printable error. (CONN-5908)

4.1.5

April 20, 2020

Compatibility

Software Version

Mule

4.1.0 and later

Java

8

Libraries version update

Library Previous Version Current Version

bcprov-jdk15on

1.59

1.62

bcpkix-jdk15on

1.59

1.62

bcmail-jdk15on

1.59

1.62

dom4j

2.0.0

2.1.1

h2

1.4.197

1.4.199

4.1.4

March 10, 2020

Compatibility

Software Version

Mule

4.1.0 and later

Java

8

Fixed Issue

Added message IDs to the names of other files used for temporary storage, to avoid file name conflicts between messages. This is an addition to the changes made in 4.1.3. (SE-15153)

4.1.3

March 4, 2020

Compatibility

Software Version

Mule

4.1.0 and later

Java

8

Fixed Issue

Added message IDs to the names of files used for storing messages so multiple messages do not use the same name. (SE-15153).

4.1.2

January 6, 2020

Compatibility

Software Version

Mule

4.1.0 and later

Java

8

Fixed Issue

  • Fixed startup error due to a slash (/) in the windows path. (SE-14173)

4.1.1

December 3, 2019

Compatibility

Software Version

Mule

4.1.0 and later

Java

8

Fixed Issues

  • The java.nio.file.Files.copy() file is now used instead of the Apache Commons IO library for a file copy, fixing the "Error storing transaction" error caused by "java.io.IOException: Failed to copy full contents". (SE-14144)

4.1.0

October 17, 2019

Compatibility

Software Version

Mule

4.1.0 and later

Java

8

Fixed Issues

  • The mime type is now a configurable value in the partnership configuration for outgoing messages. This enables users to set the content type of the sending document. (SE-13317)

4.0.8

October 15, 2019

Compatibility

Software Version

Mule

4.1.0 and later

Java

8

Fixed Issues

  • Resolved a directory polling issue if the config folder is missing during runtime(SE-11935).

4.0.7

July 17, 2019

Compatibility

Software Version

Mule

4.1.0 and later

Java

8

Fixed Issues

  • Corrected NullPointerException thrown during HTTP response generation for error conditions (SE-11935).

4.0.6

June 11, 2019

Compatibility

Software Version

Mule

4.1.0 and later

Java

8

Fixed Issues

  • The AS2 Connector did not refer an SSL certificate from the keyStorePath specified in the Secure Receiver Module ports.

4.0.5

May 29, 2019

Compatibility

Software Version

Mule

4.1.0 and later

Java

8

Fixed Issues

  • Certain receive requests failed because the App was trying to process deleted files.

4.0.4

May 16, 2019

Compatibility

Software Version

Mule

4.1.0 and later

Java

8

Fixed Issues

  • Some send and receive requests failed because the app was starting to process files before they were completely transferred.

  • Releasing threads and file operations from the Send process increased the size of the thread pool and caused many operations to fail.

  • The send and receive operations were not supported together in the same instance.

4.0.3

April 26, 2019

Compatibility

Software Version

Mule

4.1.0 and later

Java

8

Fixed Issues

  • The connector always sent the content signed with SHA256.

4.0.2

March 28, 2019

Compatibility

Software Version

Mule

4.1.0 and later

Java

8

Fixed Issues

  • The connector did not accept JKS and JCEKS keystores.

  • The encryption and signing algorithm lists in the configuration are now tho separate ones. Previously, you were able to select a signing algorithm for encrypting and vice-versa, which would not work.

  • The connector is now able to receive both signed and unsigned MDNs.

4.0.1

February 20, 2019

Compatibility

Software Version

Mule

4.1.0 and later

Java

8

Features

  • Added Receiver Host configuration, which must be set to "0.0.0.0" for operating on CloudHub.

Fixed Issues

  • The connector would not accept incoming messages when run on CloudHub.

  • Using signing throws ClassCastException.

4.0.0

November 12, 2018

Compatibility

Software Version

Mule

4.1.0 and later

Java

8

Features

  • Send - Allows you to send AS2 messages via HTTP or HTTPS.

  • Receive - Enables a Mule application to receive messages following the AS2 protocol.