The mendelson AS2 software is a JAVA-based easy to use but highly configurable implementation of the EDIINT AS2 standard.
This is your solution for secure and reliable automated data transfer with your communication partners. We make sure that your platforms are also supported - no matter if you are running Windows, Linux, Mac OS, AIX or others.
The software is available in dual license model - a community version - to take the first steps towards professional, secure data exchange without a financial expense and a - commercial license - with lightspeed support in a distinguished quality.
AS2 or EDIINT AS2 is the communication standard used to securely transport all types of business data using the internet rather than over a dedicated network. Using a machnism of message delivery notifications you will always know if your messages arrived at the system of your partner and which state your partners system returned after the receipt.
With mendelson AS2 solution, you can transfer not only EDI documents but also documents in various formats such as X12, UN/EDIFACT, XML, and Microsoft Word. The data is not changed as it is transferred - it arrives in the same format in which it was sent.
mendelson AS2 solution gives you an easy and fast solution to communicate with your partners based on AS2. It can be used as stand alone modul or integrated in the mendelson business integration.
mendelson AS2 could send and receive AS2 messages from and to trading partners via HTTP and HTTPS. It supports synchronous MDN and asynchronous MDN.
There runs an additional poll thread for every partner that polls special directories per partner and sends matching files to the mendelson AS2 server.
Please have a look at the following diagram for an overview of the inluded components of the mendelson AS2 package. All these components install out-of-the-box if you are using the installer. The main difference in the architecture between the commercial version and the community version (open source) is that in the commercial version the user interface and the AS2 server are running in different processes and could even run on different machines/operation systems while the server could run as service. The community version acts as a desktop system, user interface and server are running in the same process.
AS2 Server:
The server is the core component. It is responsible for the transaction processing
and cares for encryption, digital signatures and the communication to all the
other components.
AS2 Client (Rich client)
The AS2 client contains the transaction management, partner management, certificate
management (commercial version only). It allows to set all server properties and configure the system.
AS2 Client (Web client)
This is an optional component, it allows to monitor the AS2 transactions via a browser.
Database
The database server stores all information about the transactions and the master
data of partners, subjects etc. This could be either the embedded database system or (for the commercial edition with an additional plugin) an external database server (PostgreSQL, MySQL).
HTTP Server:
The HTTP server acts as a servlet container for the message receipt servlet.
It host alos some information pages. The servlet sends received messages via
RMI to the server. There is a HTTP server included in the installation package but its also possible to deploy the AS2 receiver in any other servlet container.
AS2 Sender:
This component sends messages and MDN (async) to the trading partner. It also
received MDN if the MDN of an outbound transmission is set to sync.
Notification:
Allows the notification via mail if there occured any event that requires user interaction.
The Mendelson AS2 software is available in multiple versions: a community version and three commercial versions—Entry, Professional, and Enterprise HA.
Here is a brief overview comparing the community and commercial versions of our software:
| Community Edition | Commercial Edition | |
|---|---|---|
| Price | Free | Shop |
| Number of partners | Unlimited | Unlimited |
| Number of transactions | Unlimited | Unlimited |
Purpose | ||
| Architecture | Desktop application | Client-Server application |
| Functionality | ||
| Asyncronous and syncronous MDN | ✔️ | ✔️ |
| Partner management | ✔️ | ✔️ |
| Digital signatures, encryption | ✔️ | ✔️ |
| TLS (up to TLS v1.3), TLS client authentication | ✔️ | ✔️ |
| Data compression (AS2 1.1) | ✔️ | ✔️ |
| Multiple attachments (AS2 1.2) | ✔️ | ✔️ |
| SHA-2 (SHA-256, SHA-384, SHA-512) | ✔️ | ✔️ |
| SHA-3 (SHA3-256, SHA3-384, SHA3-512) | ✔️ | ✔️ |
| Multilingual support: Localized to de, en and fr | ✔️ | ✔️ |
| Web interface for transaction monitoring | ✔️ | ✔️ |
| Multiple identities/local stations (ASP capable) | ✔️ | ✔️ |
| Key and certificate management | ✔️ | ✔️ |
| Key and certificate generation | ✔️ | ✔️ |
| Certificate exchange messages (CEM) | ✔️ | ✔️ |
| Email event notification | Some | ✔️(OAuth2 via plugin) |
| Access via XML API(via plugin) | ❌ | 💲 |
| Message statistic | ❌ | ✔️ |
| Message quota | ❌ | ✔️ |
| User defined HTTP headers | ❌ | ✔️ |
| Run AS2 server as service (Windows) | ❌ | ✔️ |
| Supported database systems | HSQLDB | HSQLDB, PostgreSQL, MySQL (*), Oracle DB (*) |
| Support | ||
| Community Forums (no professional support) | ✔️ | ✔️ |
| Detailed documentation | ❌ | ✔️ |
| Access to mendelson Support | ❌ | 💲 |
| Access to phone Support | ❌ | 💲 |
| Remote Support | ❌ | 💲 |
| Free updates | ❌ | 💲 |
| License Type | ||
| Open Source License (GPL) | ✔️ | ❌ |
| Commercial License | ❌ | ✔️ |
There are three commercial versions available: Entry, Professional, and Enterprise HA. Below is an overview of the features offered by each version.
| entry | professional | enterprise HA | |
|---|---|---|---|
| Plugins | |||
| PostgreSQL | ❌ | ✔️ | ✔️ |
| MySQL (*) | ❌ | ✔️ | ✔️ |
| Java API | ❌ | ✔️ | ✔️ |
| REST API | ❌ | ✔️ | ✔️ |
| OAUTH2 for HTTP/S and SMTP | ❌ | ✔️ | ✔️ |
| HSM (Hardware Security Module) | ❌ | ✔️ | ✔️ |
| Oracle DB (*) | ❌ | ❌ | ✔️ |
| High Availability (HA) cluster | ❌ | ❌ | ✔️ |
| Support | |||
| Detailed documentation | ✔️ | ✔️ | ✔️ |
| Access to mendelson Support (only with SMP) | ✔️ | ✔️ | ✔️ |
| Access to phone Support | 💲 | 💲 | 💲 |
| Remote Support | 💲 | 💲 | 💲 |
| Premium Support | ❌ | ❌ | ✔️ |
The Professional and Enterprise HA versions of our software include additional plugins. Below is an overview of the available plugins.
- Java API
- REST API
- PostgreSQL database
- MySQL database
- HA (High availability) architecture
- OAUTH2 for SMTP and HTTP authentication
- WebInterface
Plugin Java API
With the help of this plugin you can access the functions of the mendelson AS2 in your own products by simply including the mendelson AS2 as lib in your Java projects.
You then have the possibility to use the send and receive functions of the mendelson AS2 via a simple java API without needing a running mendelson AS2 server.
Save yourself the time and effort of implementing the proven functions of the
mendelson AS2 yourself and benefit from mendelsons know-how.
Plugin REST API
This plugin allows the access to the mendelson AS2 via a REST API. If you want to integrate the system into your own web based environment, this is the right plugin for you.
Plugin PostgreSQL database
This plugin allows you to replace the internal supplied HSQLDB database with an external database system (PostgreSQL), which of course can also run on another system. Part of this plugin is also a wizard for data migration of your previous dataset.
This plugin has been tested with several versions of PostgreSQL (12.1, 12.4, 13.0, 13.1) and runs also fine with the PostgreSQL databases of cloud providers (e.g. AWS PostgreSQL).
Plugin MySQL database
This plugin allows you to replace the internal supplied HSQLDB database with an external database system (MySQL), which of course can also run on another system. Part of this plugin is also a wizard for data migration of your previous dataset. This plugin also includes the possibility to switch to MariaDB drivers.
MySQL is a registered trademark of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.
Plugin HA (High availability) architecture
This plugin allows you to combine several mendelson AS2 systems in a redundant cluster and thus obtain both fail-safety and scaling of performance.
Prerequisite for each node of the HA network is a plugin PostgreSQL and a plugin HA. You can build the architecture with load balancer and external database server either in-house or also realize it via cloud providers.
In the HA architecture, you can stop individual nodes, add new ones as needed, and also perform updates to individual nodes without affecting the overall system.
The HA plugin thus offers you the possibility to flexibly adapt the mendelson AS2 system to your needs.
Plugin OAUTH2
This plugin adds OAUTH2 authentication posibilities to the AS2 message send process, async MDN send process and the mail notification process via SMTP.
Plugin WebInterface
This plugin allows view the transactions and details of them via a web browser.
*MySQL and Oracle DB are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.
- Asyncronous and synchronous MDN
- Key and certificate management
- Partner management
- Digital signatures
- Message encryption
- Secure transport (SSLv3, TLS 1.0, TLS 1.1, TLS 1.2, TLS 1.3)
- Support for TLS client authentication
- System task to auto clear old log entries
- Data compression (AS2 1.1)
- Multiple attachments (AS2 1.2)
- Multinational support: Localized to german, english and french
- Easy integration to existing systems, using a partner based file system interface
- Integrated scheduler picks up data from directories
- Message post processing (scripting on receipt)
- Pluggable into any servlet container like Tomcat, Jetty, ...
- All versions are delivered with an embedded HSQLDB database system.
The mendelson AS2 offers a plugin concept for additional functionality. There exist additional plugins for the commercial edition to support external database systems like PostgreSQL, Maria DB, MySQL*, Oracle DB* - The mendelson AS2 is written in pure Java - this enables an easy Docker and Kuberetes integration
- Web interface for transaction monitoring
- Email event notification, could be extended by OAUTH2 authentication by a plugin
- 3DES (Triple DES )
- AES-128 (CBC, GCM, CCM), AES-192 (CBC, GCM, CCM), AES-256 (CBC, GCM, CCM)
- AES-128-RSAES_OAEP (CBC, GCM) , AES-192-RSAES_OAEP (CBC, GCM) , AES-256-RSAES_OAEP (CBC, GCM)
- CAMELLIA-128 (CBC), CAMELLIA-192 (CBC), CAMELLIA-192 (CBC)
- CHACHA20-POLY1305
- DES
- RC2-40, RC2-64, RC2-128, RC2-196
- RC4-40, RC4-56, RC4-128
- SHA-1, SHA-1 (RSASSA-PSS)
- MD5
- SHA-224, SHA-256, SHA-384, SHA-512
- SHA-224 (RSASSA-PSS), SHA-256 (RSASSA-PSS), SHA-384 (RSASSA-PSS), SHA-512 (RSASSA-PSS)
- SHA-3-224, SHA-3-256, SHA-3-384, SHA-3-512
- SHA-3-224 (RSASSA-PSS), SHA-3-256 (RSASSA-PSS), SHA-3-384 (RSASSA-PSS), SHA-3-512 (RSASSA-PSS)
- Trusted certificates, self signed certificates
- SHA-1 signed certficates, SHA-2 signed certificates
- Trusted by any CA
- Elliptic curve keys/certificates, RSA keys/certificates
Technical features
Integration
Monitoring
Encryption and Signatures
The following encryption algorithms are supported:
The following hash algorithms are supported:
Accepted certificates and keys
mendelson-e-commerce GmbH runs a AS2 test server. It allows to check your server software for compatibility against the mendelson product.
If you are using the installation version of mendelson opensource AS2 it is preconfigured to directly communicate with this server.
This server may sometimes be down for maintenance purpose. You could check it's state by pointing your browser to the following URL:
http://testas2.mendelson-e-c.com:8080/as2/ServerState
To monitor the data entries on the testserver please point your browser to
http://testas2.mendelson-e-c.com:8080/webas2, user: guest, password: guest
If you would like to test your AS2 server against the mendelson AS2 test server please use the following settings before sending messages:
- MDN: sync
- URL: http://testas2.mendelson-e-c.com:8080/as2/HttpReceiver
- Signature: Necessary, SHA-1 or SHA-2 or SHA-3 or any other
- Encryption: Necessary, 3DES or any other
- Sender AS2 id (your id): mycompanyAS2
- Sender key (your key): (format pkcs#12, keystore pass "test"): Key3
- Receiver AS2 id (test servers id): mendelsontestAS2
- Receiver certificate (test servers certificate): (format PEM): Key4
If you want to test TLS connections, you can also reach the test server or the mendelson AS2 web interface via the URLs
https://testas2.mendelson-e-c.com:8444/as2/HttpReceiver (TLS 1.0, TLS 1.1, TLS 1.2, TLS 1.3)
and
https://testas2.mendelson-e-c.com:8444/webas2, user: guest, password: guest
Note: These URLs are just secured by the (self signed) key "key3" (please see above). Please do not send us a mail if your browser classifies a URL secured by a self signed key as a security risk, that is an expected behavior of your browser. If you run a mendelson AS2 server yourself, you can of course use trusted keys at this point.
Please contact us if you have trouble sending data to the AS2 test server.