More Security Notes

Link about being your own root authoritiy: http://www.debian-administration.org/articles/284

ebXML specific

ebXML Messaging Version 2.0 has the following rule: "First sign, then encrypt"

Sending side

This means that the ebXML message has to packaged and then signed ... then each mime part (except the first SOAP part) must be encrypted.

The ebXML message header has no information whether the individual mime parts are encrypted ... so basically we have to find out. Somewhat strange.

Receiving side

This means that when an ebXML message is received each mime part (except the first SOAP part) must be decrypted and then repackaged so that the signature can be checked.