Issue with Direct Message from our domain to ETT

[Vijetha Nayak]

Hi Team,

I am trying to send a direct message from our domain qagtab.mirthmail.com to ETT and receiving validation report with Error as 

• Message is not signed

• Message is not wrapped

• Attached the validation report received 

• 


• we have upgraded our system to support both SHA1 and SHA256

• Could you please help us understand if there is any fix required from our end to support these cases, also please confirm if you are receiving our direct messages.

• https://site.healthit.gov/direct/messagestatus/validationreport/incoming/%3C2aeb9d460a82466...@qagtab.mirthmail.com%3E

• 
  

• https://site.healthit.gov/direct/messagestatus/validationreport/incoming/%3C2aeb9d460a82466...@qagtab.mirthmail.com%3E

• 

  
  

[Vijetha Nayak]

Hi

For additional context, the validation report succeeds when RSAES-PKCS1-v1_5 is used. However, when the message is processed using SHA1, the validation fails as described in the email above.

Step-by-Step Comparison

 

 

Final Message Structure (Both Flows)

application/pkcs7-mime (envelopedData)
    └── multipart/signed
            ├── message/rfc822 (wrapped body)
            └── application/pkcs7-signature (detached signature)

 

[Abhishek Bhardwaj]

Hi Team,

Need your inputs on this, as we are doing the encryption/decryption algorithm changes and running the test cases of Security Certification.

Is there a way to test the SHA-1 for Sender flow and SHA-1/SHA-256 for Receiver flow in this tool.

Thanks and Regards,

Abhishek