phase4 1.3.9

• Updated to xmlsec 2.3.1
• Updated to peppol-commons 8.7.5 with Peppol Code Lists v8.1
• Improved the ENTSOG profile to remove some checks

Dependencies required:

• ph-bc/ph-collection/ph-commons/ph-dao/ph-datetime/ph-jaxb/ph-json/ph-scopes/ph-security/ph-settings/ph-xml 10.1.6
• ph-xsds-xmldsig 2.6.0
• ph-http/ph-httpclient/ph-mail/ph-network/ph-servlet/ph-useragent/ph-web 9.6.4
• ph-oton-app/ph-oton-audit/ph-oton-html/ph-oton-security 8.4.0
• ph-css 6.5.0
• ph-masterdata/ph-tenancy 6.2.4
• peppol-commons/peppol-id/peppol-sbdh/peppol-smp-client 8.7.5
• phive-engine 7.2.3
• phive-rules-peppol 2.1.14
• jakarta.mail 1.6.7
• jakarta.activation 1.2.2
• httpclient 4.5.13
• BouncyCastle 1.70
• WSS4J 2.4.1
• XMLSec 2.3.1

Full Changelog: phase4-parent-pom-1.3.8...phase4-parent-pom-1.3.9

phase4 1.3.8

• Reverted the change to try to use TLS 1.3 connections. See issue #80. Thx @Florianisme

Dependencies required:

• ph-bc/ph-collection/ph-commons/ph-dao/ph-datetime/ph-jaxb/ph-json/ph-scopes/ph-security/ph-settings/ph-xml 10.1.6
• ph-xsds-xmldsig 2.6.0
• ph-http/ph-httpclient/ph-mail/ph-network/ph-servlet/ph-useragent/ph-web 9.6.3
• ph-oton-app/ph-oton-audit/ph-oton-html/ph-oton-security 8.4.0
• ph-css 6.5.0
• ph-masterdata/ph-tenancy 6.2.4
• peppol-commons/peppol-id/peppol-sbdh/peppol-smp-client 8.7.4
• phive-engine 7.2.3
• phive-rules-peppol 2.1.12
• jakarta.mail 1.6.7
• jakarta.activation 1.2.2
• httpclient 4.5.13
• BouncyCastle 1.70
• WSS4J 2.4.1
• XMLSec 2.3.0

Full Changelog: phase4-parent-pom-1.3.7...phase4-parent-pom-1.3.8

phase 1.3.7

• Updated the callback interface of AS4DumpReader to be able to decrypt all attachments
• The Peppol, BPC and ENTSOG profile now also try to use TLS 1.3 connections
• Added new submodule phase4-profile-eespa to support the EESPA AS4 profile - thx to OpusCapita for providing the initial version
• Deprecated class Phase4PeppolServlet in favour of AS4Servlet because they do the same thing

Dependencies required:

• ph-bc/ph-collection/ph-commons/ph-dao/ph-datetime/ph-jaxb/ph-json/ph-scopes/ph-security/ph-settings/ph-xml 10.1.6
• ph-xsds-xmldsig 2.6.0
• ph-http/ph-httpclient/ph-mail/ph-network/ph-servlet/ph-useragent/ph-web 9.6.3
• ph-oton-app/ph-oton-audit/ph-oton-html/ph-oton-security 8.4.0
• ph-css 6.5.0
• ph-masterdata/ph-tenancy 6.2.4
• peppol-commons/peppol-id/peppol-sbdh/peppol-smp-client 8.7.4
• phive-engine 7.2.3
• phive-rules-peppol 2.1.12
• jakarta.mail 1.6.7
• jakarta.activation 1.2.2
• httpclient 4.5.13
• BouncyCastle 1.70
• WSS4J 2.4.1
• XMLSec 2.3.0

Full Changelog: phase4-parent-pom-1.3.6...phase4-parent-pom-1.3.7

phase4 1.3.6

• Moved all the documentation into a Wiki for better structuring of information
• Added new submodule phase4-profile-bpc to support the BPC market pilot
• Added support for a CEF two-corner profile. See issue #79. Thx @Nagendra-Naidu1629
• Increased the debug logging for the sample Peppol Server application
• The data type of PModeReceptionAwareness.RetryIntervalMS was changed from int to long
• The SMP Endpoint ServiceActivationDate and ServiceExpirationDate values are considered properly (see peppol-commons 8.7.3 release)

Dependencies required:

• ph-bc/ph-collection/ph-commons/ph-dao/ph-datetime/ph-jaxb/ph-json/ph-scopes/ph-security/ph-settings/ph-xml 10.1.6
• ph-xsds-xmldsig 2.6.0
• ph-http/ph-httpclient/ph-mail/ph-network/ph-servlet/ph-useragent/ph-web 9.6.3
• ph-oton-app/ph-oton-audit/ph-oton-html/ph-oton-security 8.3.6
• ph-css 6.5.0
• ph-masterdata/ph-tenancy 6.2.3
• peppol-commons/peppol-id/peppol-sbdh/peppol-smp-client 8.7.4
• phive-engine 7.2.3
• phive-rules-peppol 2.1.12
• jakarta.mail 1.6.7
• jakarta.activation 1.2.2
• httpclient 4.5.13
• BouncyCastle 1.70
• WSS4J 2.4.1
• XMLSec 2.3.0

phase4 1.3.5

• Updated to Log4J 2.17.0 for security reasons (CVE-2021-45105) - see https://logging.apache.org/log4j/2.x/security.html

Dependencies required:

• ph-bc/ph-collection/ph-commons/ph-dao/ph-datetime/ph-jaxb/ph-json/ph-scopes/ph-security/ph-settings/ph-xml 10.1.5
• ph-xsds-xmldsig 2.6.0
• ph-http/ph-httpclient/ph-mail/ph-network/ph-servlet/ph-useragent/ph-web 9.6.2
• ph-oton-app/ph-oton-audit/ph-oton-html/ph-oton-security 8.3.5
• ph-css 6.4.0
• ph-masterdata/ph-tenancy 6.2.2
• peppol-commons/peppol-id/peppol-sbdh/peppol-smp-client 8.6.4
• phive-engine 7.2.2
• phive-rules-peppol 2.1.8
• jakarta.mail 1.6.7
• jakarta.activation 1.2.2
• httpclient 4.5.13
• BouncyCastle 1.69
• WSS4J 2.4.0
• XMLSec 2.3.0

phase4 1.3.4

• Updated to Log4J 2.16.0 for security reasons (CVE-2021-45046) - see https://www.lunasec.io/docs/blog/log4j-zero-day/

Dependencies required:

• ph-bc/ph-collection/ph-commons/ph-dao/ph-datetime/ph-jaxb/ph-json/ph-scopes/ph-security/ph-settings/ph-xml 10.1.5
• ph-xsds-xmldsig 2.6.0
• ph-http/ph-httpclient/ph-mail/ph-network/ph-servlet/ph-useragent/ph-web 9.6.2
• ph-oton-app/ph-oton-audit/ph-oton-html/ph-oton-security 8.3.4
• ph-css 6.4.0
• ph-masterdata/ph-tenancy 6.2.2
• peppol-commons/peppol-id/peppol-sbdh/peppol-smp-client 8.6.4
• phive-engine 7.2.2
• phive-rules-peppol 2.1.8
• jakarta.mail 1.6.7
• jakarta.activation 1.2.2
• httpclient 4.5.13
• BouncyCastle 1.69
• WSS4J 2.4.0
• XMLSec 2.3.0

phase4 1.3.3

• Updated to Log4J2 2.15.0
• Updated to WSS4J 2.4.0
• Updated to xmlsec 2.3.0
• Fixed a typo in method name of class AbstractPeppolUserMessageBuilder (missing p of endpoint)
• Fixed the interface name from IPhase4PeppolValidatonResultHandler to IPhase4PeppolValidationResultHandler (see issue #68)
• Updated the Maven JAXB2 plugin so that it also build with Java 17

Dependencies required:

• ph-bc/ph-collection/ph-commons/ph-dao/ph-datetime/ph-jaxb/ph-json/ph-scopes/ph-security/ph-settings/ph-xml 10.1.5
• ph-xsds-xmldsig 2.6.0
• ph-http/ph-httpclient/ph-mail/ph-network/ph-servlet/ph-useragent/ph-web 9.6.2
• ph-oton-app/ph-oton-audit/ph-oton-html/ph-oton-security 8.3.2
• ph-css 6.4.0
• ph-masterdata/ph-tenancy 6.2.1
• peppol-commons/peppol-id/peppol-sbdh/peppol-smp-client 8.6.4
• phive-engine 7.2.2
• phive-rules-peppol 2.1.8
• jakarta.mail 1.6.7
• jakarta.activation 1.2.2
• httpclient 4.5.13
• BouncyCastle 1.69
• WSS4J 2.4.0
• XMLSec 2.3.0

phase4 1.3.2

• Updated to ph-web 9.6.1
• Updated to phive-rules 2.1.7
• Updated to xmlsec 2.2.3 (security fix)
• Allowing to set the "RefToMessageId" in the client sender builders
• Improved the error handling of ISOAPHeaderElementProcessor invocations (see issue #52)

Dependencies required:

• ph-bc/ph-collection/ph-commons/ph-dao/ph-datetime/ph-jaxb/ph-json/ph-scopes/ph-security/ph-settings/ph-xml 10.1.3
• ph-xsds-xmldsig 2.6.0
• ph-http/ph-httpclient/ph-mail/ph-network/ph-servlet/ph-useragent/ph-web 9.6.1
• ph-oton-app/ph-oton-audit/ph-oton-html/ph-oton-security 8.3.1
• ph-css 6.3.4
• ph-masterdata/ph-tenancy 6.2.1
• peppol-commons/peppol-id/peppol-sbdh/peppol-smp-client 8.6.3
• phive-engine 7.2.1
• phive-rules-peppol 2.1.7
• jakarta.mail 1.6.7
• jakarta.activation 1.2.2
• httpclient 4.5.13
• BouncyCastle 1.69
• WSS4J 2.3.1
• XMLSec 2.2.3

phase4 1.3.1

• Updated to xmlsec 2.2.2
• Added the possibility to provide the content ID in the Peppol AS4 sender
• Changed the layout of the default, random Content-IDs to match RFC 822
• The error handling of the SPI invocations was improved
• AS4MessageProcessorResult.createFailure now also takes empty arguments
• Extended the internal API of AS4XServletHandler to make calls from the outside simpler
• Added a new class AS4DumpReader that can be helpful in reading dumped ".as4in" messages at a later point in time

Dependencies required:

• ph-bc/ph-collection/ph-commons/ph-dao/ph-datetime/ph-jaxb/ph-json/ph-scopes/ph-security/ph-settings/ph-xml 10.1.2
• ph-xsds-xmldsig 2.6.0
• ph-http/ph-httpclient/ph-mail/ph-network/ph-servlet/ph-useragent/ph-web 9.6.0
• ph-oton-app/ph-oton-audit/ph-oton-html/ph-oton-security 8.3.0
• ph-css 6.3.1
• ph-masterdata/ph-tenancy 6.2.0
• peppol-commons/peppol-id/peppol-sbdh/peppol-smp-client 8.6.1
• phive-engine 7.2.0
• phive-rules-peppol 2.1.4
• jakarta.mail 1.6.5
• jakarta.activation 1.2.2
• httpclient 4.5.13
• BouncyCastle 1.68
• WSS4J 2.3.1
• XMLSec 2.2.2

phase4 1.3.0

• Updated to ph-commons 10.1
• Moved the classes AS4IncomingDumperFileBased, AS4OutgoingDumperFileBased and AS4RawResponseConsumerWriteToFile from package com.helger.phase4.servlet.dump to package com.helger.phase4.dump. The old classes remain there, but deprecated.
• IAS4IncomingDumper.onEndRequest is only called if onNewRequest returned a non-null stream
• Improved logging in case of failed sending prerequisites
• Changed from Offset(Date|Time|DateTime) to XMLOffset(Date|Time|DateTime) where the message exchange is affected
• The JAXB implementation must now explicitly be added to an application pom.xml e.g. like this:

<dependency>
  <groupId>com.sun.xml.bind</groupId>
  <artifactId>jaxb-impl</artifactId>
</dependency>