View Attach (15) Info

Add new attachment

Only authorized users are allowed to upload new attachments.

List of attachments

Kind Attachment Name Size Version Date Modified Author Change note
png
 Encrypt.png 78.1 kB 2 29-Dec-2020 05:25 Halmágyi Árpád
png
 Screen Shot 2013-11-23 at 1.35... 30.3 kB 1 29-Dec-2020 05:25 Halmágyi Árpád
png
 Screen Shot 2013-11-23 at 1.37... 72.2 kB 1 29-Dec-2020 05:25 Halmágyi Árpád
png
 as2_options.png 55.7 kB 2 29-Dec-2020 05:25 Ben Spink
png
 as2_receive.png 25.8 kB 2 29-Dec-2020 05:25 Ben Spink
png
 as2_signing.png 17.1 kB 2 29-Dec-2020 05:25 Ben Spink
png
 complete.png 158.7 kB 1 29-Dec-2020 05:25 Halmágyi Árpád
png
 delete.png 49.4 kB 1 29-Dec-2020 05:25 Halmágyi Árpád
png
 exclude1.png 42.0 kB 1 29-Dec-2020 05:25 Halmágyi Árpád
png
 exclude2.png 41.1 kB 1 29-Dec-2020 05:25 Halmágyi Árpád
png
 find.png 92.8 kB 4 29-Dec-2020 05:25 Halmágyi Árpád
png
 new_vfs.png 3.6 kB 1 29-Dec-2020 05:25 Ben Spink
png
 options.png 135.7 kB 2 29-Dec-2020 05:25 Halmágyi Árpád
png
 signing.png 76.2 kB 2 29-Dec-2020 05:25 Halmágyi Árpád
png
 tasks.png 47.0 kB 1 29-Dec-2020 05:25 Halmágyi Árpád

This page (revision-16) was last changed on 09-Jun-2021 03:44 by Ben Spink

This page was created on 29-Dec-2020 05:25 by Ben Spink

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Difference between version and

At line 1 changed 7 lines
To configure AS2/3, you need to have a user configured in the UserManager, and a job that does the AS2 without any copy or move task, all the task that have to be done are
Notice there is no copy or move operation there. The AS2 item is the special protocol that does that type of activity. When the remote server sends a MDN, it comes into an account you have setup for this...and that AS2 task above will be handed that MDN response internally inside CrushFTP so it knows the response came back.
If the remote company is just sending you a file (not a MDN) it also comes in through an account in CrushFTP. In CrusHFTP's User Manager, you can make accounts, and on each account you can configure the AS2/3 information to use. This is the information that will be used to decode and decrypt incoming HTTP transfers that are in AS2 format. This account could also be used for normal FTP/SFTP/HTTP transfers too, but if you have the AS2 stuff configured, that info is used to decode and decrypt the AS2 data, and for sending a MDN reply back to the partner who sent you the file.
To configure AS2 you need two parts. One a job to send the AS2 file to your partner, and two a user in the User Manager to receive the MDN response, or to receive files from your partner.\\
\\
First lets create a job. Notice there is no copy or move operation here. The AS2 item is the special protocol that does this type of activity. When the remote server sends a MDN, it is sent to an account you have setup for this in the User Manager...and this AS2 job waits for the MDN notification to come back internally from CrushFTP when that file is received.\\
\\
If the remote company is just sending you a file (not a MDN) it also comes in through the account in CrushFTP. In the User Manager, you can make accounts, and on each account you can configure the AS2 information to use for decrypting the incoming file. This account could also be used for normal FTP/SFTP/HTTP transfers too, but if you have AS2 configured, that info is used to decode and decrypt the AS2 data.\\
At line 10 changed 18 lines
[attachment|AS2/tasks.png]
For beginning you should have a FindTask in the job. A FindTask, that is searching for the folder contains the data that should be sent using AS2.
[attachment|AS2/find.png]
For the second step, you have to exclude the files that are already encrypted.
[attachment|AS2/exclude1.png]
After that is done, you should exclude the MDN responses that you already have.
[attachment|AS2/exclude2.png]
Make sure you have the certificate of the AS2 receiving machine added as a trusted certificate in the certificate chain that you use.
On the AS2 task you have to set it like:
The general process will look like the one below:\\
[attachment|AS2/complete.png]\\
\\
\\
First you should have a Find task in the job. It is searching the specified folder to find items to use in future task items.\\
[attachment|AS2/find.png]\\
\\
For the second step, make sure you have the certificate of the AS2 receiving machine added as a trusted certificate in the keystore that you use. This certificate will be used for encrypting the data using the partners key. Your key will be used for signing the data.\\
\\
The AS2 task should be set similar to this:\\
[attachment|AS2/options.png]\\
[attachment|AS2/signing.png]\\
At line 21 added 4 lines
\\
After that is done, you should delete the encrypted files that you already have.\\
[attachment|AS2/delete.png]\\
\\
At line 30 removed one line
[attachment|AS2/signing.png]\\
At line 32 changed one line
[attachment|AS2/options.png]\\
-----
\\
You can create your own keystore using [Portecle]. Generate a new key pair, and give it a name appropriate to your company. Its this item you will right click on and share with your trading partner.
\\
You also use the tools menu to import your partner's public key too and give it an appropriate name. You can have these in separate keystores, or in one single one.
At line 35 changed one line
-----
[attachment|Portecle/new_keystore.png]\\
\\
[attachment|AS2/Screen Shot 2013-11-23 at 1.35.05 AM.png]\\
\\
[attachment|AS2/Screen Shot 2013-11-23 at 1.37.57 AM.png]\\
----\\
!!As of CrushFTP v10.0.0_26+, you can improve AS2 processing flow.\\
At line 37 changed one line
If you have your partner's public key for who you want to send to, you need to import that into a keystore file.
Example Job flow:\\
At line 39 changed one line
keytool -importcert -alias {partner_name} -file {partner_public_key_file} -keystore {partner_name}.jks
Find task
AS2 task, 120 seocnd wait for MDNs
The red dot, and green dot, both go to next step which is a Jump task.
Jump task, turn off if/else. Criteria is "{mdn_result}" equals blank.
TRUE dot goes to a delete task or otherwise successful action task
FALSE dot goes to a notification task or moving to a failed directory.
Green dot goes to End...or next step.
At line 41 changed 11 lines
That will be the keystore you use for the encryption tab. {partner_name}.jks
For signing, and your public key you are going to give your partner...
{{{
keytool -genkeypair -alias {your_name} -keyalg RSA -keysize 1024 -keystore {your_name}.jks
}}}
Then get your public key out to give to your partner:
{{{
keytool -export -alias {your_name} -file {your_name}.cer -keystore {your_name}.jks
}}}
Send them the resulting {your_name}.cer file. That is your public key they can encrypt with. You set this keystore file {your_name}.jks on the "AS2/3 Decryption Key" panel of the user manager and on the signing tab of the VFS item.
This green dot has the complete list of success/failed items, as long as they weren't deleted in the sub tasks from Jump.
Version Date Modified Size Author Changes ... Change note
16 09-Jun-2021 03:44 2.958 kB Ben Spink to previous
15 29-Dec-2020 05:25 2.354 kB Halmágyi Árpád to previous | to last
14 29-Dec-2020 05:25 2.479 kB Halmágyi Árpád to previous | to last
13 29-Dec-2020 05:25 2.303 kB Halmágyi Árpád to previous | to last
12 29-Dec-2020 05:25 2.333 kB Ben Spink to previous | to last
11 29-Dec-2020 05:25 2.698 kB Halmágyi Árpád to previous | to last
10 29-Dec-2020 05:25 2.593 kB Halmágyi Árpád to previous | to last
9 29-Dec-2020 05:25 2.813 kB Ben Spink to previous | to last
8 29-Dec-2020 05:25 2.892 kB Ben Spink to previous | to last
7 29-Dec-2020 05:25 2.895 kB Ben Spink to previous | to last
6 29-Dec-2020 05:25 2.926 kB Ben Spink to previous | to last
5 29-Dec-2020 05:25 2.95 kB Ben Spink to previous | to last
4 29-Dec-2020 05:25 2.057 kB Ben Spink to previous | to last
3 29-Dec-2020 05:25 2.031 kB Ben Spink to previous | to last
2 29-Dec-2020 05:25 1.967 kB Ben Spink to previous | to last
1 29-Dec-2020 05:25 0.191 kB Ben Spink to last
« This page (revision-16) was last changed on 09-Jun-2021 03:44 by Ben Spink
G’day (anonymous guest)
CrushFTP10 | What's New

Referenced by
LeftMenu

JSPWiki