PGP signing issue with one-pass signature packet in SAP Cloud Platform

[former_member747490]

Hi,

My requirement is to send a file from the source to target SFTPs via SAP CPI, and the file should be encrypted and signed while posting the file to the target SFTP. I used the PGP encryptor in SAP CPI to encrypt (used public key) and sign (used private key). However, the customer, came back to us the signature verification failed at their end while decrypting the file.

As analyzed in detail, the issue seems to be in the one-pass signature packet identifier.

I have used the GnuPG tool (Kleopatra) directly to encrypt/sign the file for the validation and that's working fine which means the one-pass signature packet identifier (last=1) is coming as expected.

But the file generated in SAP CPI, the one-pass signature identifier is coming as 0 (last=0). which makes the file failed to decrypt at the customer end.

Adding the screenshots in, to differentiate the files generated by Gnupg and SAP CPI

Success one - GnuPG file has the right one-pass signature identifier.

Failed one - SAP CPI generated file, has an incorrect one-pass signature identifier

Attached the SAP CPI encryptor configuration below,

Appreciate your assistance, to correct the one-pass signature identifier in SAP CPI.

Regards,

Naveen

[former_member363381]

This issue is fixed since a couple of months

[E_Ahamed]

hi,

How was the issue resolved ,I am having same kind of issue.

kindly provide some inputs

Thanks