Flex Gateway新着情報
Governance新着情報
Monitoring API ManagerSupport Category: Premium
Anypoint Connector for AS2 (Applicability Statement 2) is a specification about how to transport data securely and reliably over the internet. Security is achieved by using digital certificates and encryption.
Mule runtime engine (Mule) supports the AS2 protocol through the Anypoint Connector for AS2 (AS2 Connector). AS2 Connector enables trading partners to transmit and receive AS2 messages with EDI-X12, EDIFACT, XML, or binary payloads.
March 26, 2024
The following libraries are upgraded to address reported security vulnerabilities:
The bcprov-jdk18on library is upgraded to version 1.77.
The bcpkix-jdk18on library is upgraded to version 1.77.
Software | Version |
---|---|
Mule |
4.3.0 and later |
OpenJDK |
8, 11, and 17 |
Issue Resolution | ID |
---|---|
The connector now returns the correct MDN error when the payload is encoded using Base64, as defined in RFC 4648. |
W-15099775 |
February 5, 2024
This connector is now compatible with Java 17.
You can now configure the AS2 Listener to use a different keystore entry for the MDN signature than the one used for decryption.
To use this feature, select Use different Alias for MDN Signature and complete the Alias For MDN Signature and Private Key Password fields.
For more information, see the Listener Config section in the AS2 Connector Reference.
Software | Version |
---|---|
Mule |
4.3.0 and later |
OpenJDK |
8, 11 and 17 |
Issue Resolution | ID |
---|---|
The cryptographic operations now comply with the FIPS 140-2 requirements. |
W-14243186 |
Adjusted the logs to remove sensitive date. |
W-14931729 |
June 22, 2023
You can now configure the Send with Sync Mdn operation to use a different certificate for MDN signature validation than the one used for encryption.
To use this feature, select Use different Alias for MDN Signature Validation and complete the x509 Alias For MDN Signature field.
For more information, see the Send Config section in the AS2 Connector Reference.
Software | Version |
---|---|
Mule |
4.3.0 and later |
OpenJDK |
8 |
Issue Resolution | ID |
---|---|
The AS2 Listener source now supports AS2-to and AS2-from header values that have double quotes, in accordance with RFC-4130. |
W-12975888 |
The algorithm value used on headers now complies with RFC-8551. |
W-13055720 |
The Send With Asnc Mdn and Send With Sync Mdn operations no longer generate message IDs with colons or extra double quotes, in accordance with RFC-2822. |
W-13079117 |
March 14, 2023
You can now configure the As2 listener source so that it rejects new, incoming messages that have the same sender, receiver, and message ID as messages that have been processed already.
To use this feature, select the Check for duplicate messages field and reference a global object store in the Object Store field.
For more information, see the AS2 Connector Reference.
Software | Version |
---|---|
Mule |
4.3.0 and later |
OpenJDK |
8 |
December 7, 2022
Software | Version |
---|---|
Mule |
4.3.0 and later |
OpenJDK |
8 |
Issue Resolution | ID |
---|---|
The send operations no longer generate a thread leak in the Threshold or Identity transfer modes when the connector is configured with static expression values. |
W-11723371 |
The send operations no longer generate a thread leak in dynamic configuration situations. |
W-11796931 |
Payloads can now be encrypted with the |
W-11888057 |
November 14, 2022
You can now configure the As 2 listener source to send the MDN at the end of the flow by using the Mdn mode option AUTO
.
You can now configure retries to ensure the delivery of the MDN by using the Retry interval and Retry count fields in the Async MDN Connection Provider global configuration.
A new field named Validate certificate expiration date enables you to enable or disable the certificate expiration date validation.
The console logs a warning message when a certificate approaches its expiration date or if it already expired. You can configure when to get the warning by using the new Warning before (days) in the KeyStore Config field.
For more information, see the AS2 Connector Reference.
Software | Version |
---|---|
Mule |
4.3.0 and later |
OpenJDK |
8 |
Issue Resolution | ID |
---|---|
The As 2 listener now sends back the MDN if there are errors. |
W-11303187 |
The As 2 mdn listener won’t throw an exception when receiving an MDN without the |
W-11633079 |
When an error occurs in the As 2 listener, the execution of the flow now stops. |
W-11633272 |
If an error occurs when setting the Request a Receipt field to |
W-11633356 |
The connector now cleans the temporal files created when the resource threshold is reached. |
W-11715911 |
The As 2 listener now sends back the HTTP response when an async and unsigned MDN is requested. |
W-11837866 |
August 17, 2022
The following libraries are upgraded to address reported security vulnerabilities:
The bcprov-jdk15on is upgraded to version 1.69.
The bcpkix-jdk15on library is upgraded to version 1.69.
Software | Version |
---|---|
Mule |
4.3.0 and later |
OpenJDK |
8 |
AS2 |
1.0, 1.1, and 1.2 |
Issue | ID |
---|---|
The shared listener mode option now supports using expressions to configure partners. |
W-11507857 |
June 27, 2022
Software | Version |
---|---|
Mule |
4.3.0 and later |
OpenJDK |
8 |
AS2 |
1.0, 1.1, and 1.2 |
Issue | ID |
---|---|
The As 2 listener and As 2 mdn listener sources now process signed and encrypted content correctly when the MIME header boundary entry contains colon characters. |
W-11277855 |
An error is now thrown by the connector when the hostname resolution fails. |
W-11278644 |
June 06, 2022
You can now configure a single AS2 listener endpoint to receive messages from multiple partners by using the Shared listener mode option.
You can now pass custom headers on outbound AS2 messages when using the Send with Sync MDN and Send with Async MDN operations.
Software | Version |
---|---|
Mule |
4.3.0 and later |
OpenJDK |
8 |
Issue | ID |
---|---|
Log entry levels no longer print informational log messages. |
W-11099643 |
The performance of the MDN listener under a high load is now improved. |
W-11142320 |
AS2 Send operations now correctly handle an |
W-10580735 |
Known Issue | Workaround | ID |
---|---|---|
Using expressions to configure partners when using Shared listener mode does not currently work. |
January 24, 2022
Software | Version |
---|---|
Mule |
4.3.0 and later |
OpenJDK |
8 |
AS2 |
1.0, 1.1, and 1.2 |
Issue | ID |
---|---|
Added and improved log messages. |
CONN-9128 |
A |
SE-23926 |
November 17, 2021
Software | Version |
---|---|
Mule |
4.3.0 and later |
OpenJDK |
8 |
Issue | ID |
---|---|
Outbound encrypted messages contained extra |
CONN-9285 |
The connector did not accept the |
SE-23387 |
November 1, 2021
Software | Version |
---|---|
Mule |
4.3.0 and later |
OpenJDK |
8 |
Issue | ID |
---|---|
The Received-Content-MIC header was not parsed when the space character after a comma was suppressed. |
SE-23058 |
The |
CONN-9143 |
October 22, 2021
Software | Version |
---|---|
Mule |
4.3.0 and later |
OpenJDK |
8 |
Issue | ID |
---|---|
Fixed reported security vulnerabilities. |
CONN-9115 |
September 24, 2021
The new Custom Message ID property enables you to specify a custom message ID for AS2 send operations.
The new Propagate Content Transfer Encoding property indicates whether to propagate the content transfer encoding on the AS2 message sent to the partner.
Software | Version |
---|---|
Mule |
4.3.0 and later |
OpenJDK |
8 |
October 15, 2020
AS2 Listener did not clear incoming payloads, which caused the /tmp
directory to become full and a 'java.io.IOException: No space left on device' error. (SE-17914)
The issue that caused a memory leak with Bouncy Castle javax.crypto.JceSecurity
in applications with an AS2 Receiver is fixed. (SE-17950)
July 16, 2020
Non-repudiation of a signed message is now implemented for all operations and sources in AS2 Connector.
AS2 Send with Sync MDN operation now outputs the MDN payload to the user flow instead of the original payload.
AS2 Send with Async MDN operation now outputs nothing (void) to the user flow instead of the original payload.
AS2 Connector IO performance is improved on CloudHub, as the Send operations no longer retain the original payload.
Mule 4.3.0 enables a more efficient way of dispatching reusable streams to the Mule flow by using ImmutableRepeatableFileInputStream
.
Added support for dynamically passing a Partner URL in AS2 Send operations.
The securityLevel
configuration parameter sets the Security level requirement on the AS2 Listener to accept only signed, encrypted, or signed-and-encrypted based on your organization’s security guidelines.
December 2019
All operations support message payloads as a stream.
Experience using Anypoint Studio to configure Mule 4 application flows using HTTP endpoint configuration is improved, and new error types that improve error handling are available.
An explicit asynchronous MDN source enables you to process asynchronous MDN in the application.
CloudHub configuration is improved.
Information from the AS2 Send and Listener operation output attributes is more detailed.
Additional encryption/signing algorithms are now supported.
May 16, 2019
Some send and receive requests failed because the app was starting to process files before they were completely transferred.
Releasing threads and file operations from the Send process increased the size of the thread pool and caused many operations to fail.
The send and receive operations were not supported together in the same instance.
March 28, 2019
The connector did not accept JKS and JCEKS keystores.
The encryption and signing algorithm lists in the configuration are now tho separate ones. Previously, you were able to select a signing algorithm for encrypting and vice-versa, which would not work.
The connector is now able to receive both signed and unsigned MDNs.