Hi All:

I've been working on a very simple AS2 server module (RFC-4130) to deal with other "certified" applications. My application is a small Perl algorithm and realies on OpenSSL but not through libraries, but using qx// calls to command line OpenSSL smime, routines, which is handy.

So far this routine is able to receive signed+encrypted messages, headers are identified (not exhaustively, work to do there) to decide if body is binary or base 64. If message is encrypted or not. Message is decrypted either if binary or base64 and signed message is processed to extract 2 things. The certificate of signer and the MIC or message integrity check. Finally an MDN is produced to report the status of the processed message.

This loop has already been successfully tested against WPG from IBM.

What hasn't worked at all is when I start the message on my side. The WPG simply doesn't respond in any way: if message is plain text, neither if only signed nor only encrypted or signed+encrypted. An error is produced at the WPG which nobody on the other side can explain what's the reason. But what is also interesting is the fact that the MDN that I send is very well identified and approved (a signed message) by WPG, meaning that my side is well able to decrypt and extract the proper info to produce the MDN correctly and have WPG to accept it as good.

I think my problem is the lack of somebody with enough curiosity on the other side.

This small set of scripts is a good choice for cheap and affordable AS2, which is Open Source of course.

Thanks in advance for the help.