Issue with Direct Message from our domain to ETT

[Vijetha Nayak]

Hi Team,

I am trying to send a direct message from our domain qagtab.mirthmail.com to ETT and receiving validation report with Error as 

• Message is not signed

• Message is not wrapped

• Attached the validation report received 

• 


• we have upgraded our system to support both SHA1 and SHA256

• Could you please help us understand if there is any fix required from our end to support these cases, also please confirm if you are receiving our direct messages.

• https://site.healthit.gov/direct/messagestatus/validationreport/incoming/%3C2aeb9d460a82466...@qagtab.mirthmail.com%3E

• 
  

• https://site.healthit.gov/direct/messagestatus/validationreport/incoming/%3C2aeb9d460a82466...@qagtab.mirthmail.com%3E

• 

  
  

[Vijetha Nayak]

Hi

For additional context, the validation report succeeds when RSAES-PKCS1-v1_5 is used. However, when the message is processed using SHA1, the validation fails as described in the email above.

Step-by-Step Comparison

 

 

Final Message Structure (Both Flows)

application/pkcs7-mime (envelopedData)
    └── multipart/signed
            ├── message/rfc822 (wrapped body)
            └── application/pkcs7-signature (detached signature)

 

[Abhishek Bhardwaj]

Hi Team,

Need your inputs on this, as we are doing the encryption/decryption algorithm changes and running the test cases of Security Certification.

Is there a way to test the SHA-1 for Sender flow and SHA-1/SHA-256 for Receiver flow in this tool.

Thanks and Regards,

Abhishek

[Vijetha Nayak]

Hi Team,

Is there any update on this request? We are currently in the middle of our certification process and would appreciate your feedback.

Regards,

Vijetha

--
You received this message because you are subscribed to the Google Groups "Edge Test Tool (ETT)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to edge-test-too...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/edge-test-tool/4f37e819-42a0-49a3-94d9-4d4b198392can%40googlegroups.com.

[Vishnu Mulla]

To ensure we can review this accurately, could you please confirm or provide the following (if not already included):

        •        The Direct test scenario you are running (Sender / Receiver) and test case number

        •        The issue you are encountering and the expected behavior

        •        Screenshots of the issue or error messages observed

- Vishnu

[Vijetha Nayak]

Hi Team,

Is there any update on this as its a blocker for us to complete compliance testing with Direct Trust

Regards,

Vijetha

[Vishnu Mulla]

Here is the information relavent to the thread:

TestName is Send a direct message 

Sending a direct email from our domain qagtab.mirthmail.com (i.e., cure_t...@qagtab.mirthmail.com) to tes...@ett.healthit.gov.

Message ID : <2aeb9d460a824669...@qagtab.mirthmail.com>

Validation report : https://site.healthit.gov/direct/messagestatus/validationreport/incoming/%3C2aeb9d460a82466...@qagtab.mirthmail.com%3E

attached the screenshot of validation report 

Note : 

• we have upgraded our system to support both SHA1 and SHA256.

• 
  

[Sai Valluripalli]

Based on the error, "message not signed" , the message is not delivered by a valid Direct Address, which means, your Direct certificates are not valid / signed by the appropriate CA. Please check.

Are you using domain bound certificates or address bound certificates? Who is your CA?

Thank you,

Sai

[Vijetha Nayak]

Hi Sai,

  We are able to see successful message delivery using the old logic with the same email IDs.  

For additional context, the validation report succeeds when RSAES-PKCS1-v1_5 is used. However, when the message is processed using SHA1, the validation fails as described

Step-by-Step Comparison

 

  I have attached our valid email ID, along with the maxMD response and CA information.  

--
You received this message because you are subscribed to the Google Groups "Edge Test Tool (ETT)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to edge-test-too...@googlegroups.com.

To view this discussion visit https://groups.google.com/d/msgid/edge-test-tool/262d7b20-e646-4ebf-bada-e2af5073221fn%40googlegroups.com.

[Vijetha Nayak]

Hi Team,

  We have made changes to the system and performed a direct testing scenario in which a Direct message is sent from…  

cure_t...@qagtab.mirthmail.com
tes...@ett.healthit.gov

We have received automatic MDN as well from ETT


Attached validation report, Could you please confirm if this is valid and can be closed ?
https://site.healthit.gov/direct/messagestatus/validationreport/incoming/%3C3620fe1325116e603d97170982251cbe%40qagtab.mirthmail.com%3E

Regards,

Vijetha

[Sai Valluripalli]

There are 2 errors in the validation report. Fix those and you should be good.