KB Article #191460

Failed to decrypt inbound message

Problem

Inbound documents from a Trading partner fail for this reason:
NOTIFICATION;Level 3 INBOUND Rejected;com.cyclonecommerce.packager.PackagerDecryptionException: Unable to decrypt Pkcs7MimeEnvelopedData using encryption key alias

The following is part of the error:
Caused by: java.security.GeneralSecurityException: The following certificate:
Version: 3
Serial Number:xyz-abc-123

Resolution

The error is caused by the reason above, details based on the Activator/B2Bi's inability to decrypt a message that contained a "DIFFERENT" certificate than what was expected. The error recorded in the server.log file is written in such a way that it appears to be an issue with the certificate on file, but the way to interpret the error is that when Activator/B2Bi tried to validate the inbound message against the Company's certificate, it could not.

1. Ask your partner to validate and compare the certificate they are using to send to you against your Company certificate
2. Ask your partner to validate and compare the certificate they have in place for their Company against what is listed in the Activator/B2Bi Trading Partner profile

The following is part of the error that can be misleading:
Caused by: java.security.GeneralSecurityException: The following certificate:
Version: 3
Serial Number:xyz-abc-123

You would want to validate all the certificates for both the Community and Trading Partner.