View Attach (15) Info

Add new attachment

Only authorized users are allowed to upload new attachments.

List of attachments

Kind Attachment Name Size Version Date Modified Author Change note
png
 Encrypt.png 78.1 kB 2 29-Dec-2020 05:25 Halmágyi Árpád
png
 Screen Shot 2013-11-23 at 1.35... 30.3 kB 1 29-Dec-2020 05:25 Halmágyi Árpád
png
 Screen Shot 2013-11-23 at 1.37... 72.2 kB 1 29-Dec-2020 05:25 Halmágyi Árpád
png
 as2_options.png 55.7 kB 2 29-Dec-2020 05:25 Ben Spink
png
 as2_receive.png 25.8 kB 2 29-Dec-2020 05:25 Ben Spink
png
 as2_signing.png 17.1 kB 2 29-Dec-2020 05:25 Ben Spink
png
 complete.png 158.7 kB 1 29-Dec-2020 05:25 Halmágyi Árpád
png
 delete.png 49.4 kB 1 29-Dec-2020 05:25 Halmágyi Árpád
png
 exclude1.png 42.0 kB 1 29-Dec-2020 05:25 Halmágyi Árpád
png
 exclude2.png 41.1 kB 1 29-Dec-2020 05:25 Halmágyi Árpád
png
 find.png 92.8 kB 4 29-Dec-2020 05:25 Halmágyi Árpád
png
 new_vfs.png 3.6 kB 1 29-Dec-2020 05:25 Ben Spink
png
 options.png 135.7 kB 2 29-Dec-2020 05:25 Halmágyi Árpád
png
 signing.png 76.2 kB 2 29-Dec-2020 05:25 Halmágyi Árpád
png
 tasks.png 47.0 kB 1 29-Dec-2020 05:25 Halmágyi Árpád

This page (revision-16) was last changed on 09-Jun-2021 03:44 by Ben Spink

This page was created on 29-Dec-2020 05:25 by Ben Spink

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Difference between version and

At line 1 changed 7 lines
To configure AS2/3, you need to have a user configured in the UserManager, and a job that does the AS2 without any copy or move task, all the task that have to be done are
Notice there is no copy or move operation there. The AS2 item is the special protocol that does that type of activity. When the remote server sends a MDN, it comes into an account you have setup for this...and that AS2 task above will be handed that MDN response internally inside CrushFTP so it knows the response came back.
If the remote company is just sending you a file (not a MDN) it also comes in through an account in CrushFTP. In CrusHFTP's User Manager, you can make accounts, and on each account you can configure the AS2/3 information to use. This is the information that will be used to decode and decrypt incoming HTTP transfers that are in AS2 format. This account could also be used for normal FTP/SFTP/HTTP transfers too, but if you have the AS2 stuff configured, that info is used to decode and decrypt the AS2 data, and for sending a MDN reply back to the partner who sent you the file.
To configure AS2 you need two parts. One a job to send the AS2 file to your partner, and two a user in the User Manager to receive the MDN response, or to receive files from your partner.\\
\\
First lets create a job. Notice there is no copy or move operation here. The AS2 item is the special protocol that does this type of activity. When the remote server sends a MDN, it is sent to an account you have setup for this in the User Manager...and this AS2 job waits for the MDN notification to come back internally from CrushFTP when that file is received.\\
\\
If the remote company is just sending you a file (not a MDN) it also comes in through the account in CrushFTP. In the User Manager, you can make accounts, and on each account you can configure the AS2 information to use for decrypting the incoming file. This account could also be used for normal FTP/SFTP/HTTP transfers too, but if you have AS2 configured, that info is used to decode and decrypt the AS2 data.\\
At line 9 changed 19 lines
[attachment|AS2/tasks.png]
For beginning you should have a FindTask in the job. A FindTask, that is searching for the folder contains the data that should be sent using AS2.
[attachment|AS2/find.png]
For the second step, you have to exclude the files that are already encrypted.
[attachment|AS2/exclude1.png]
After that is done, you should exclude the MDN responses that you already have.
[attachment|AS2/exclude2.png]
Make sure you have the certificate of the AS2 receiving machine added as a trusted certificate in the certificate chain that you use.
On the AS2 task you have to set it like:
First you should have a Find task in the job. It is searching the specified folder to find items to use in future task items.\\
[attachment|AS2/tasks.png]\\
[attachment|AS2/find.png]\\
\\
For the second step, you have to exclude old files that are already encrypted.
[attachment|AS2/exclude1.png]\\
\\
After that is done, you should exclude the MDN responses that you already have.\\
[attachment|AS2/exclude2.png]\\
\\
(This assumes you have the MDN responses coming into this same folder too with your user you configure in the User Manager.)\\
\\
Make sure you have the certificate of the AS2 receiving machine added as a trusted certificate in the keystore that you use. This certificate will be used for encrypting the data using the partners key. Your key will be used for signing the data.\\
\\
The AS2 task should be set similar to this:\\
At line 29 removed one line
At line 31 removed one line
At line 33 removed 2 lines
At line 36 changed 16 lines
If you have your partner's public key for who you want to send to, you need to import that into a keystore file.
{{{
keytool -importcert -alias {partner_name} -file {partner_public_key_file} -keystore {partner_name}.jks
}}}
That will be the keystore you use for the encryption tab. {partner_name}.jks
For signing, and your public key you are going to give your partner...
{{{
keytool -genkeypair -alias {your_name} -keyalg RSA -keysize 1024 -keystore {your_name}.jks
}}}
Then get your public key out to give to your partner:
{{{
keytool -export -alias {your_name} -file {your_name}.cer -keystore {your_name}.jks
}}}
Send them the resulting {your_name}.cer file. That is your public key they can encrypt with. You set this keystore file {your_name}.jks on the "AS2/3 Decryption Key" panel of the user manager and on the signing tab of the VFS item.
\\
You can create your own keystore using [Portecle]. Generate a new key pair, and give it a name appropriate to your company. Its this item you will right click on and share with your trading partner.
\\
You also use the tools menu to import your partner's public key too and give it an appropriate name. You can have these in separate keystores, or in one single one.
Version Date Modified Size Author Changes ... Change note
16 09-Jun-2021 03:44 2.958 kB Ben Spink to previous
15 29-Dec-2020 05:25 2.354 kB Halmágyi Árpád to previous | to last
14 29-Dec-2020 05:25 2.479 kB Halmágyi Árpád to previous | to last
13 29-Dec-2020 05:25 2.303 kB Halmágyi Árpád to previous | to last
12 29-Dec-2020 05:25 2.333 kB Ben Spink to previous | to last
11 29-Dec-2020 05:25 2.698 kB Halmágyi Árpád to previous | to last
10 29-Dec-2020 05:25 2.593 kB Halmágyi Árpád to previous | to last
9 29-Dec-2020 05:25 2.813 kB Ben Spink to previous | to last
8 29-Dec-2020 05:25 2.892 kB Ben Spink to previous | to last
7 29-Dec-2020 05:25 2.895 kB Ben Spink to previous | to last
6 29-Dec-2020 05:25 2.926 kB Ben Spink to previous | to last
5 29-Dec-2020 05:25 2.95 kB Ben Spink to previous | to last
4 29-Dec-2020 05:25 2.057 kB Ben Spink to previous | to last
3 29-Dec-2020 05:25 2.031 kB Ben Spink to previous | to last
2 29-Dec-2020 05:25 1.967 kB Ben Spink to previous | to last
1 29-Dec-2020 05:25 0.191 kB Ben Spink to last
« This page (revision-16) was last changed on 09-Jun-2021 03:44 by Ben Spink
G’day (anonymous guest)
CrushFTP10 | What's New

Referenced by
LeftMenu

JSPWiki