v4.2.6

• Added new class AS4CertificateOnlySignatureTrustValidator to verify signature verification only happens on certificates and not on public keys
• (Peppol) Introduced new class Phase4PeppolAS4Servlet that uses AS4CertificateOnlySignatureTrustValidator
• Extended IAS4IncomingMessageState with the possibility to store the signing and decrypting certificate reference type
• (Peppol) The default inbound Peppol processor added a check that both signing and decrypting certificates are provided as direct references
• (Peppol) The scheduled time to transmit reports to OpenPeppol can be customized. See #355 - thx @alvarolivie

What's Changed

• Add configurable reporting date to peppol server by @alvarolivie in #355

New Contributors

• @alvarolivie made their first contribution in #355

Full Changelog: phase4-parent-pom-4.2.5...phase4-parent-pom-4.2.6

Dependencies required:

• ph-bc/ph-collection/ph-commons/ph-dao/ph-datetime/ph-jaxb/ph-json/ph-scopes/ph-security/ph-settings/ph-xml 12.1.2
• ph-xsds-xmldsig 4.1.0
• ph-http/ph-httpclient/ph-mail/ph-network/ph-servlet/ph-useragent/ph-web 11.2.1
• ph-oton-io/ph-oton-audit/ph-oton-security 10.1.2
• ph-masterdata/ph-tenancy 8.1.0
• peppol-commons/peppol-id/peppol-sbdh/peppol-smp-client 12.3.8
• phive 11.1.1 [Peppol only]
• phive-rules-peppol 4.1.5 [Peppol only]
• peppol-reporting-api 4.1.0 [Peppol only]
• ph-xhe 5.1.0 [DBNAlliance only]
• angus-activation 2.0.3
• angus-mail 2.0.5
• httpclient 5.6
• BouncyCastle 1.83
• WSS4J 4.0.1
• XMLSec 4.0.4
• Servlet API 6.0.x
• JAXB 4.0.x
• SLF4J 2.0.x