Examples with SMPClientBadResponseException com.helger.smpclient.exception.SMPClientBadResponseException used on opensource projects

Example 1 with SMPClientBadResponseException

use of com.helger.smpclient.exception.SMPClientBadResponseException in project peppol-commons by phax.

the class SMPClientReadOnlyTest method testInvalidTrustStore.

@Test
public void testInvalidTrustStore() throws SMPDNSResolutionException, SMPClientException, GeneralSecurityException, IOException {
    final IParticipantIdentifier aPI = PeppolIdentifierFactory.INSTANCE.createParticipantIdentifierWithDefaultScheme("9915:test");
    final SMPClientReadOnly aSMPClient = new SMPClientReadOnly(PeppolURLProvider.INSTANCE, aPI, ESML.DIGIT_TEST);
    // Set old trust store
    {
        final KeyStore aTS = KeyStoreHelper.loadKeyStoreDirect(EKeyStoreType.JKS, "truststore-outdated.jks", "peppol");
        assertNotNull(aTS);
        aSMPClient.setTrustStore(aTS);
    }
    try {
        // Signature validation MUST fail
        aSMPClient.getServiceMetadataOrNull(aPI, EPredefinedDocumentTypeIdentifier.INVOICE_EN16931_PEPPOL_V30);
        fail();
    } catch (final SMPClientBadResponseException ex) {
        assertNotNull(ex.getCause());
        assertTrue(ex.getCause() instanceof XMLSignatureException);
    }
}

Example 2 with SMPClientBadResponseException

use of com.helger.smpclient.exception.SMPClientBadResponseException in project peppol-commons by phax.

the class BDXRClientReadOnlyTest method testGetBDXRHostURI_Peppol_WithBDXR.

@Test
public void testGetBDXRHostURI_Peppol_WithBDXR() throws SMPClientException, SMPDNSResolutionException {
    // This instance has a BOM inside
    final IParticipantIdentifier aPI = PeppolIdentifierFactory.INSTANCE.createParticipantIdentifierWithDefaultScheme("9917:5504033150");
    final BDXRClientReadOnly aBDXRClient = new BDXRClientReadOnly(PeppolURLProvider.INSTANCE, aPI, ESML.DIGIT_PRODUCTION);
    assertEquals("http://B-2f67a0710cbc13c11ac8c0d64186ac5e.iso6523-actorid-upis.edelivery.tech.ec.europa.eu/", aBDXRClient.getSMPHostURI());
    // not OASIS!
    try {
        aBDXRClient.getServiceGroupOrNull(aPI);
        fail();
    } catch (final SMPClientBadResponseException ex) {
    // Expected "Malformed XML document returned from SMP server"
    }
}

Example 3 with SMPClientBadResponseException

use of com.helger.smpclient.exception.SMPClientBadResponseException in project peppol-commons by phax.

the class SMPHttpResponseHandlerSigned method handleEntity.

@Override
@Nonnull
public T handleEntity(@Nonnull final HttpEntity aEntity) throws SMPClientBadResponseException, IOException {
    // Get complete response as one big byte buffer
    final byte[] aResponseBytes = StreamHelper.getAllBytes(aEntity.getContent());
    if (ArrayHelper.isEmpty(aResponseBytes))
        throw new SMPClientBadResponseException("SMP server response content is empty/could not be read");
    if (LOGGER.isDebugEnabled())
        LOGGER.debug("Signed SMP response has " + aResponseBytes.length + " bytes");
    if (m_bVerifySignature) {
        if (m_aTrustStore == null)
            throw new SMPClientBadResponseException("No trust store was configured - cannot verify signatures");
        try (final InputStream aIS = new NonBlockingByteArrayInputStream(aResponseBytes)) {
            // Check the signature
            if (_checkSignature(aIS, m_aTrustStore).isFailure())
                throw new SMPClientBadResponseException("Signature returned from SMP server was not valid");
            if (LOGGER.isDebugEnabled())
                LOGGER.debug("Successfully verified signature of signed SMP response");
        } catch (final SMPClientBadResponseException ex) {
            // Avoid double wrapping
            throw ex;
        } catch (final Exception ex) {
            throw new SMPClientBadResponseException("Error in validating signature returned from SMP server", ex);
        }
    } else {
        LOGGER.warn("SMP response signature verification is disabled. This should not happen in production systems!");
    }
    // Finally convert to domain object
    final T ret = m_aMarshaller.read(aResponseBytes);
    if (ret == null)
        throw new SMPClientBadResponseException("Malformed XML document returned from SMP server");
    if (LOGGER.isDebugEnabled())
        LOGGER.debug("Successfully parsed signed SMP HTTP response");
    return ret;
}

Example 4 with SMPClientBadResponseException

use of com.helger.smpclient.exception.SMPClientBadResponseException in project peppol-commons by phax.

the class AbstractSMPResponseHandler method handleResponse.

/**
 * Read the entity from the response body and pass it to the entity handler
 * method if the response was successful (a 2xx status code). If no response
 * body exists, this returns null. If the response was unsuccessful (>= 300
 * status code), throws an {@link HttpResponseException}.
 */
@Nullable
public T handleResponse(@Nonnull final HttpResponse aResponse) throws IOException {
    final StatusLine aStatusLine = aResponse.getStatusLine();
    final HttpEntity aEntity = aResponse.getEntity();
    if (aStatusLine.getStatusCode() >= 300) {
        if (false && GlobalDebug.isDebugMode()) {
            final String sEntity = EntityUtils.toString(aEntity);
            throw new HttpResponseException(aStatusLine.getStatusCode(), aStatusLine.getReasonPhrase() + "\n" + sEntity);
        }
        throw new HttpResponseException(aStatusLine.getStatusCode(), aStatusLine.getReasonPhrase());
    }
    try {
        return aEntity == null ? null : handleEntity(aEntity);
    } catch (final SMPClientBadResponseException ex) {
        // Wrap to comply to API :(
        throw new ClientProtocolException(ex);
    }
}

Example 5 with SMPClientBadResponseException

use of com.helger.smpclient.exception.SMPClientBadResponseException in project peppol-practical by phax.

the class PagePublicToolsParticipantInformation method _queryParticipant.

private void _queryParticipant(@Nonnull final WebPageExecutionContext aWPEC, final String sParticipantIDScheme, final String sParticipantIDValue, final ISMLConfiguration aSMLConfiguration, final boolean bSMLAutoDetect, final boolean bQueryBusinessCard, final boolean bShowTime, final boolean bXSDValidation, final boolean bVerifySignatures) {
    final HCNodeList aNodeList = aWPEC.getNodeList();
    final Locale aDisplayLocale = aWPEC.getDisplayLocale();
    final IRequestWebScopeWithoutResponse aRequestScope = aWPEC.getRequestScope();
    final ISMLConfigurationManager aSMLConfigurationMgr = PPMetaManager.getSMLConfigurationMgr();
    final String sParticipantIDUriEncoded = CIdentifier.getURIEncoded(sParticipantIDScheme, sParticipantIDValue);
    LOGGER.info("Start querying the Participant information of '" + sParticipantIDUriEncoded + "'");
    // Try to print the basic information before an error occurs
    aNodeList.addChild(div("Querying the following SMP for ").addChild(code(sParticipantIDUriEncoded)).addChild(":"));
    final ICommonsList<JAXBException> aSMPExceptions = new CommonsArrayList<>();
    try {
        SMPQueryParams aQueryParams = null;
        ISMLConfiguration aRealSMLConfiguration = aSMLConfiguration;
        if (bSMLAutoDetect) {
            final ICommonsList<ISMLConfiguration> aSortedList = aSMLConfigurationMgr.getAllSorted();
            if (LOGGER.isDebugEnabled())
                LOGGER.debug("Sorted SML Configs: " + StringHelper.getImplodedMapped(", ", aSortedList, ISMLConfiguration::getID));
            for (final ISMLConfiguration aCurSML : aSortedList) {
                aQueryParams = SMPQueryParams.createForSML(aCurSML, sParticipantIDScheme, sParticipantIDValue, false);
                if (aQueryParams == null)
                    continue;
                try {
                    InetAddress.getByName(aQueryParams.getSMPHostURI().getHost());
                    // Found it
                    aRealSMLConfiguration = aCurSML;
                    break;
                } catch (final UnknownHostException ex) {
                // continue
                }
            }
            // Ensure to go into the exception handler
            if (aRealSMLConfiguration == null) {
                LOGGER.error("Failed to autodetect a matching SML for '" + sParticipantIDUriEncoded + "'");
                aNodeList.addChild(error(div("Seems like the participant ID " + sParticipantIDUriEncoded + " is not known in any of the configured networks.")));
                // Audit failure
                AuditHelper.onAuditExecuteFailure("participant-information", sParticipantIDUriEncoded, "no-sml-found");
                return;
            }
            LOGGER.info("Participant ID '" + sParticipantIDUriEncoded + "': auto detected SML " + aRealSMLConfiguration.getID());
        } else {
            // SML configuration is not null
            aQueryParams = SMPQueryParams.createForSML(aRealSMLConfiguration, sParticipantIDScheme, sParticipantIDValue, true);
        }
        if (aQueryParams == null) {
            LOGGER.error("Participant ID '" + sParticipantIDUriEncoded + "': failed to resolve SMP query parameters for SML '" + aRealSMLConfiguration.getID() + "'");
            aNodeList.addChild(error(div("Failed to resolve participant ID " + sParticipantIDUriEncoded + " for the provided network.")).addChild(bSMLAutoDetect ? null : div("Try selecting a different SML - maybe this helps")));
            // Audit failure
            AuditHelper.onAuditExecuteFailure("participant-information", sParticipantIDUriEncoded, "smp-query-params-null");
            return;
        }
        LOGGER.info("Participant information of '" + sParticipantIDUriEncoded + "' is queried using SMP API '" + aQueryParams.getSMPAPIType() + "' from '" + aQueryParams.getSMPHostURI() + "' using SML '" + aRealSMLConfiguration + "'; XSD validation=" + bXSDValidation + "; verify signatures=" + bVerifySignatures);
        final IParticipantIdentifier aParticipantID = aQueryParams.getParticipantID();
        final URL aSMPHost = URLHelper.getAsURL(aQueryParams.getSMPHostURI());
        {
            if (LOGGER.isDebugEnabled())
                LOGGER.debug("Trying to resolve SMP '" + aSMPHost.getHost() + "' by DNS");
            final HCUL aUL = new HCUL();
            aNodeList.addChild(aUL);
            aUL.addItem(div("SML used: ").addChild(code(aRealSMLConfiguration.getDisplayName() + " / " + aRealSMLConfiguration.getDNSZone())).addChild(" ").addChild(aRealSMLConfiguration.isProduction() ? badgeSuccess("production SML") : badgeWarn("test SML")));
            aUL.addItem(div("Query API: " + aRealSMLConfiguration.getSMPAPIType().getDisplayName()));
            final String sURL1 = aSMPHost.toExternalForm();
            aUL.addItem(div("Resolved name: ").addChild(code(sURL1)), div(_createOpenInBrowser(sURL1)));
            if (aWPEC.params().hasStringValue("dnsjava", "true")) {
                LOGGER.info("Start DNSJava lookup");
                Record[] aRecords = null;
                try {
                    aRecords = new Lookup(aSMPHost.getHost(), Type.A).run();
                } catch (final TextParseException ex) {
                // Ignore
                }
                if (aRecords != null)
                    for (final Record aRecord : aRecords) {
                        final ARecord aARec = (ARecord) aRecord;
                        final String sURL2 = aARec.rdataToString();
                        final InetAddress aNice = aARec.getAddress();
                        final String sURL3 = aNice != null ? aNice.getCanonicalHostName() : null;
                        final HCDiv aDiv1 = div("[dnsjava] IP addressX: ").addChild(code(sURL2));
                        if (sURL3 != null)
                            aDiv1.addChild(" - reverse lookup: ").addChild(code(sURL3));
                        else
                            aDiv1.addChild(" - reverse lookup failed");
                        final HCDiv aDiv2 = div(_createOpenInBrowser("http://" + sURL2, "Open IP in browser"));
                        if (sURL3 != null)
                            aDiv2.addChild(" ").addChild(_createOpenInBrowser("http://" + sURL3, "Open name in browser"));
                        aUL.addItem(aDiv1, aDiv2);
                    }
                LOGGER.info("Finished DNSJava lookup - " + (aRecords == null ? "no results" : aRecords.length + " result records"));
            }
            try {
                final InetAddress[] aInetAddresses = InetAddress.getAllByName(aSMPHost.getHost());
                for (final InetAddress aInetAddress : aInetAddresses) {
                    final String sURL2 = new IPV4Addr(aInetAddress).getAsString();
                    final InetAddress aNice = InetAddress.getByAddress(aInetAddress.getAddress());
                    final String sURL3 = aNice.getCanonicalHostName();
                    aUL.addItem(div("IP address: ").addChild(code(sURL2)).addChild(" - reverse lookup: ").addChild(code(sURL3)), div(_createOpenInBrowser("http://" + sURL2, "Open IP in browser")).addChild(" ").addChild(_createOpenInBrowser("http://" + sURL3, "Open name in browser")));
                }
                // Show only once
                final String sURL4 = sURL1 + (sURL1.endsWith("/") ? "" : "/") + sParticipantIDUriEncoded;
                aUL.addItem(div("Query base URL: ").addChild(code(sURL4)), div(_createOpenInBrowser(sURL4)));
                if (!bXSDValidation)
                    aUL.addItem(badgeWarn("XML Schema validation of SMP responses is disabled."));
                if (!bVerifySignatures)
                    aUL.addItem(badgeDanger("Signature verification of SMP responses is disabled."));
            } catch (final UnknownHostException ex) {
                LOGGER.error("Failed to resolve SMP host '" + aSMPHost.getHost() + "' for the participant ID '" + sParticipantIDUriEncoded + "'");
                aNodeList.addChild(error(div("Seems like the participant ID " + sParticipantIDUriEncoded + " is not registered to the selected network.")).addChild(AppCommonUI.getTechnicalDetailsUI(ex, false)).addChild(bSMLAutoDetect ? null : div("Try selecting a different SML - maybe this helps")));
                // Audit failure
                AuditHelper.onAuditExecuteFailure("participant-information", sParticipantIDUriEncoded, "unknown-host", ex.getMessage());
                return;
            }
        }
        // Determine all document types
        final ICommonsList<IDocumentTypeIdentifier> aDocTypeIDs = new CommonsArrayList<>();
        SMPClientReadOnly aSMPClient = null;
        BDXRClientReadOnly aBDXR1Client = null;
        final Consumer<GenericJAXBMarshaller<?>> aSMPMarshallerCustomizer = m -> {
            aSMPExceptions.clear();
            // Remember exceptions
            m.readExceptionCallbacks().add(aSMPExceptions::add);
        };
        try {
            final StopWatch aSWGetDocTypes = StopWatch.createdStarted();
            final HCUL aSGUL = new HCUL();
            final ICommonsSortedMap<String, String> aSGHrefs = new CommonsTreeMap<>();
            IHCNode aSGExtension = null;
            switch(aQueryParams.getSMPAPIType()) {
                case PEPPOL:
                    {
                        aSMPClient = new SMPClientReadOnly(aQueryParams.getSMPHostURI());
                        aSMPClient.setXMLSchemaValidation(bXSDValidation);
                        aSMPClient.setVerifySignature(bVerifySignatures);
                        aSMPClient.setMarshallerCustomizer(aSMPMarshallerCustomizer);
                        // Get all HRefs and sort them by decoded URL
                        final com.helger.xsds.peppol.smp1.ServiceGroupType aSG = aSMPClient.getServiceGroupOrNull(aParticipantID);
                        if (aSG != null) {
                            // Map from cleaned URL to original URL
                            if (aSG.getServiceMetadataReferenceCollection() != null)
                                for (final com.helger.xsds.peppol.smp1.ServiceMetadataReferenceType aSMR : aSG.getServiceMetadataReferenceCollection().getServiceMetadataReference()) {
                                    // Decoded href is important for unification
                                    final String sHref = CIdentifier.createPercentDecoded(aSMR.getHref());
                                    if (aSGHrefs.put(sHref, aSMR.getHref()) != null)
                                        aSGUL.addItem(warn("The ServiceGroup list contains the duplicate URL ").addChild(code(sHref)));
                                }
                            if (aSG.getExtension() != null && aSG.getExtension().getAny() != null) {
                                aSGExtension = new HCPrismJS(EPrismLanguage.MARKUP).addChild(XMLWriter.getNodeAsString(aSG.getExtension().getAny()));
                            }
                        }
                        break;
                    }
                case OASIS_BDXR_V1:
                    {
                        aBDXR1Client = new BDXRClientReadOnly(aQueryParams.getSMPHostURI());
                        aBDXR1Client.setXMLSchemaValidation(bXSDValidation);
                        aBDXR1Client.setVerifySignature(bVerifySignatures);
                        aBDXR1Client.setMarshallerCustomizer(aSMPMarshallerCustomizer);
                        // Get all HRefs and sort them by decoded URL
                        final com.helger.xsds.bdxr.smp1.ServiceGroupType aSG = aBDXR1Client.getServiceGroupOrNull(aParticipantID);
                        // Map from cleaned URL to original URL
                        if (aSG != null) {
                            if (aSG.getServiceMetadataReferenceCollection() != null)
                                for (final com.helger.xsds.bdxr.smp1.ServiceMetadataReferenceType aSMR : aSG.getServiceMetadataReferenceCollection().getServiceMetadataReference()) {
                                    // Decoded href is important for unification
                                    final String sHref = CIdentifier.createPercentDecoded(aSMR.getHref());
                                    if (aSGHrefs.put(sHref, aSMR.getHref()) != null)
                                        aSGUL.addItem(warn("The ServiceGroup list contains the duplicate URL ").addChild(code(sHref)));
                                }
                            if (aSG.getExtensionCount() > 0) {
                                final HCUL aNL2 = new HCUL();
                                for (final com.helger.xsds.bdxr.smp1.ExtensionType aExt : aSG.getExtension()) if (aExt.getAny() != null) {
                                    if (aExt.getAny() instanceof Element)
                                        aNL2.addItem(new HCPrismJS(EPrismLanguage.MARKUP).addChild(XMLWriter.getNodeAsString((Element) aExt.getAny())));
                                    else
                                        aNL2.addItem(code(aExt.getAny().toString()));
                                }
                                if (aNL2.hasChildren())
                                    aSGExtension = aNL2;
                            }
                        }
                        break;
                    }
            }
            aSWGetDocTypes.stop();
            LOGGER.info("Participant information of '" + aParticipantID.getURIEncoded() + "' returned " + aSGHrefs.size() + " entries");
            final HCH3 aH3 = h3("ServiceGroup contents");
            if (bShowTime)
                aH3.addChild(" ").addChild(_createTimingNode(aSWGetDocTypes.getMillis()));
            aNodeList.addChild(aH3);
            final String sPathStart = "/" + aParticipantID.getURIEncoded() + "/services/";
            // Show all ServiceGroup hrefs
            for (final Map.Entry<String, String> aEntry : aSGHrefs.entrySet()) {
                final String sHref = aEntry.getKey();
                final String sOriginalHref = aEntry.getValue();
                final IHCLI<?> aLI = aSGUL.addAndReturnItem(div(code(sHref)));
                // Should be case insensitive "indexOf" here
                final int nPathStart = sHref.toLowerCase(Locale.US).indexOf(sPathStart.toLowerCase(Locale.US));
                if (nPathStart >= 0) {
                    final String sDocType = sHref.substring(nPathStart + sPathStart.length());
                    final IDocumentTypeIdentifier aDocType = aQueryParams.getIF().parseDocumentTypeIdentifier(sDocType);
                    if (aDocType != null) {
                        aDocTypeIDs.add(aDocType);
                        aLI.addChild(div(EFontAwesome4Icon.ARROW_RIGHT.getAsNode()).addChild(" ").addChild(AppCommonUI.createDocTypeID(aDocType, false)));
                        aLI.addChild(div(EFontAwesome4Icon.ARROW_RIGHT.getAsNode()).addChild(" ").addChild(_createOpenInBrowser(sOriginalHref)));
                    } else {
                        aLI.addChild(error("The document type ").addChild(code(sDocType)).addChild(" could not be interpreted as a structured document type!"));
                    }
                } else {
                    aLI.addChild(error().addChildren(div("Contained href does not match the rules!"), div("Found href: ").addChild(code(sHref)), div("Expected path part: ").addChild(code(sPathStart))));
                }
            }
            if (!aSGUL.hasChildren())
                aSGUL.addItem(warn("No service group entries were found for " + aParticipantID.getURIEncoded()));
            if (aSGExtension != null)
                aSGUL.addAndReturnItem(div("Extension:")).addChild(aSGExtension);
            aNodeList.addChild(aSGUL);
        } catch (final SMPClientException ex) {
            if (LOGGER.isDebugEnabled())
                LOGGER.debug("Participant DocTypes Error", ex);
            else if (LOGGER.isWarnEnabled())
                LOGGER.warn("Participant DocTypes Error: " + ex.getClass().getName() + " - " + ex.getMessage());
            final BootstrapErrorBox aErrorBox = error(div("Error querying SMP.")).addChild(AppCommonUI.getTechnicalDetailsUI(ex, false));
            for (final JAXBException aItem : aSMPExceptions) aErrorBox.addChild(AppCommonUI.getTechnicalDetailsUI(aItem, false));
            aNodeList.addChild(aErrorBox);
            // Audit failure
            AuditHelper.onAuditExecuteFailure("participant-doctypes", sParticipantIDUriEncoded, ex.getClass(), ex.getMessage());
        }
        // List document type details
        if (aDocTypeIDs.isNotEmpty()) {
            final OffsetDateTime aNowDateTime = PDTFactory.getCurrentOffsetDateTime();
            final ICommonsOrderedSet<X509Certificate> aAllUsedEndpointCertifiactes = new CommonsLinkedHashSet<>();
            long nTotalDurationMillis = 0;
            aNodeList.addChild(h3("Document type details"));
            final HCUL aULDocTypeIDs = new HCUL();
            for (final IDocumentTypeIdentifier aDocTypeID : aDocTypeIDs.getSortedInline(IDocumentTypeIdentifier.comparator())) {
                final HCDiv aDocTypeDiv = div(AppCommonUI.createDocTypeID(aDocTypeID, true));
                final IHCLI<?> aLIDocTypeID = aULDocTypeIDs.addAndReturnItem(aDocTypeDiv);
                LOGGER.info("Now SMP querying '" + aParticipantID.getURIEncoded() + "' / '" + aDocTypeID.getURIEncoded() + "'");
                final StopWatch aSWGetDetails = StopWatch.createdStarted();
                try {
                    switch(aQueryParams.getSMPAPIType()) {
                        case PEPPOL:
                            {
                                final com.helger.xsds.peppol.smp1.SignedServiceMetadataType aSSM = aSMPClient.getServiceMetadataOrNull(aParticipantID, aDocTypeID);
                                aSWGetDetails.stop();
                                if (aSSM != null) {
                                    final com.helger.xsds.peppol.smp1.ServiceMetadataType aSM = aSSM.getServiceMetadata();
                                    if (aSM.getRedirect() != null)
                                        aLIDocTypeID.addChild(div("Redirect to " + aSM.getRedirect().getHref()));
                                    else {
                                        // For all processes
                                        final HCUL aULProcessID = new HCUL();
                                        for (final com.helger.xsds.peppol.smp1.ProcessType aProcess : aSM.getServiceInformation().getProcessList().getProcess()) if (aProcess.getProcessIdentifier() != null) {
                                            final IHCLI<?> aLIProcessID = aULProcessID.addItem();
                                            aLIProcessID.addChild(div("Process ID: ").addChild(AppCommonUI.createProcessID(aDocTypeID, SimpleProcessIdentifier.wrap(aProcess.getProcessIdentifier()))));
                                            final HCUL aULEndpoint = new HCUL();
                                            // For all endpoints of the process
                                            for (final com.helger.xsds.peppol.smp1.EndpointType aEndpoint : aProcess.getServiceEndpointList().getEndpoint()) {
                                                final IHCLI<?> aLIEndpoint = aULEndpoint.addItem();
                                                // Endpoint URL
                                                final String sEndpointRef = aEndpoint.getEndpointReference() == null ? null : W3CEndpointReferenceHelper.getAddress(aEndpoint.getEndpointReference());
                                                _printEndpointURL(aLIEndpoint, sEndpointRef);
                                                // Valid from
                                                _printActivationDate(aLIEndpoint, aEndpoint.getServiceActivationDate(), aDisplayLocale);
                                                // Valid to
                                                _printExpirationDate(aLIEndpoint, aEndpoint.getServiceExpirationDate(), aDisplayLocale);
                                                // Transport profile
                                                _printTransportProfile(aLIEndpoint, aEndpoint.getTransportProfile());
                                                // Technical infos
                                                _printTecInfo(aLIEndpoint, aEndpoint.getTechnicalInformationUrl(), aEndpoint.getTechnicalContactUrl());
                                                // Certificate (also add null values)
                                                final X509Certificate aCert = CertificateHelper.convertStringToCertficateOrNull(aEndpoint.getCertificate());
                                                aAllUsedEndpointCertifiactes.add(aCert);
                                            }
                                            aLIProcessID.addChild(aULEndpoint);
                                        }
                                        aLIDocTypeID.addChild(aULProcessID);
                                    }
                                } else {
                                    aLIDocTypeID.addChild(error("Failed to read service metadata from SMP (not found)"));
                                }
                                break;
                            }
                        case OASIS_BDXR_V1:
                            {
                                final com.helger.xsds.bdxr.smp1.SignedServiceMetadataType aSSM = aBDXR1Client.getServiceMetadataOrNull(aParticipantID, aDocTypeID);
                                aSWGetDetails.stop();
                                if (aSSM != null) {
                                    final com.helger.xsds.bdxr.smp1.ServiceMetadataType aSM = aSSM.getServiceMetadata();
                                    if (aSM.getRedirect() != null)
                                        aLIDocTypeID.addChild(div("Redirect to " + aSM.getRedirect().getHref()));
                                    else {
                                        // For all processes
                                        final HCUL aULProcessID = new HCUL();
                                        for (final com.helger.xsds.bdxr.smp1.ProcessType aProcess : aSM.getServiceInformation().getProcessList().getProcess()) if (aProcess.getProcessIdentifier() != null) {
                                            final IHCLI<?> aLIProcessID = aULProcessID.addItem();
                                            aLIProcessID.addChild(div("Process ID: ").addChild(AppCommonUI.createProcessID(aDocTypeID, SimpleProcessIdentifier.wrap(aProcess.getProcessIdentifier()))));
                                            final HCUL aULEndpoint = new HCUL();
                                            // For all endpoints of the process
                                            for (final com.helger.xsds.bdxr.smp1.EndpointType aEndpoint : aProcess.getServiceEndpointList().getEndpoint()) {
                                                final IHCLI<?> aLIEndpoint = aULEndpoint.addItem();
                                                // Endpoint URL
                                                _printEndpointURL(aLIEndpoint, aEndpoint.getEndpointURI());
                                                // Valid from
                                                _printActivationDate(aLIEndpoint, aEndpoint.getServiceActivationDate(), aDisplayLocale);
                                                // Valid to
                                                _printExpirationDate(aLIEndpoint, aEndpoint.getServiceExpirationDate(), aDisplayLocale);
                                                // Transport profile
                                                _printTransportProfile(aLIEndpoint, aEndpoint.getTransportProfile());
                                                // Technical infos
                                                _printTecInfo(aLIEndpoint, aEndpoint.getTechnicalInformationUrl(), aEndpoint.getTechnicalContactUrl());
                                                // Certificate (also add null values)
                                                try {
                                                    final X509Certificate aCert = CertificateHelper.convertByteArrayToCertficateDirect(aEndpoint.getCertificate());
                                                    aAllUsedEndpointCertifiactes.add(aCert);
                                                } catch (final CertificateException ex) {
                                                    aAllUsedEndpointCertifiactes.add(null);
                                                }
                                            }
                                            aLIProcessID.addChild(aULEndpoint);
                                        }
                                        aLIDocTypeID.addChild(aULProcessID);
                                    }
                                } else {
                                    aLIDocTypeID.addChild(error("Failed to read service metadata from SMP (not found)"));
                                }
                                break;
                            }
                    }
                } catch (final SMPClientBadResponseException ex) {
                    if (LOGGER.isDebugEnabled())
                        LOGGER.debug("Participant Information Error", ex);
                    else if (LOGGER.isWarnEnabled())
                        LOGGER.warn("Participant Information Error: " + ex.getClass().getName() + " - " + ex.getMessage());
                    final BootstrapErrorBox aErrorBox = error(div("Error querying SMP. Try disabling 'XML Schema validation'.")).addChild(AppCommonUI.getTechnicalDetailsUI(ex, false));
                    for (final JAXBException aItem : aSMPExceptions) aErrorBox.addChild(AppCommonUI.getTechnicalDetailsUI(aItem, false));
                    aLIDocTypeID.addChild(aErrorBox);
                    // Audit failure
                    AuditHelper.onAuditExecuteFailure("participant-information", sParticipantIDUriEncoded, ex.getClass(), ex.getMessage());
                } catch (final SMPClientException ex) {
                    if (LOGGER.isDebugEnabled())
                        LOGGER.debug("Participant Information Error", ex);
                    else if (LOGGER.isWarnEnabled())
                        LOGGER.warn("Participant Information Error: " + ex.getClass().getName() + " - " + ex.getMessage());
                    final BootstrapErrorBox aErrorBox = error(div("Error querying SMP.")).addChild(AppCommonUI.getTechnicalDetailsUI(ex, false));
                    for (final JAXBException aItem : aSMPExceptions) aErrorBox.addChild(AppCommonUI.getTechnicalDetailsUI(aItem, false));
                    aLIDocTypeID.addChild(aErrorBox);
                    // Audit failure
                    AuditHelper.onAuditExecuteFailure("participant-information", sParticipantIDUriEncoded, ex.getClass(), ex.getMessage());
                }
                if (bShowTime)
                    aDocTypeDiv.addChild(" ").addChild(_createTimingNode(aSWGetDetails.getMillis()));
                nTotalDurationMillis += aSWGetDetails.getMillis();
            }
            aNodeList.addChild(aULDocTypeIDs);
            if (bShowTime)
                aNodeList.addChild(div("Overall time: ").addChild(_createTimingNode(nTotalDurationMillis)));
            aNodeList.addChild(h3("Endpoint Certificate details"));
            if (aAllUsedEndpointCertifiactes.isEmpty()) {
                aNodeList.addChild(warn("No Endpoint Certificate information was found."));
            } else {
                final HCUL aULCerts = new HCUL();
                for (final X509Certificate aEndpointCert : aAllUsedEndpointCertifiactes) {
                    final IHCLI<?> aLICert = aULCerts.addItem();
                    if (aEndpointCert != null) {
                        aLICert.addChild(div("Subject: " + aEndpointCert.getSubjectX500Principal().getName()));
                        aLICert.addChild(div("Issuer: " + aEndpointCert.getIssuerX500Principal().getName()));
                        final OffsetDateTime aNotBefore = PDTFactory.createOffsetDateTime(aEndpointCert.getNotBefore());
                        aLICert.addChild(div("Not before: " + PDTToString.getAsString(aNotBefore, aDisplayLocale)));
                        if (aNotBefore.isAfter(aNowDateTime))
                            aLICert.addChild(error("This Endpoint Certificate is not yet valid!"));
                        final OffsetDateTime aNotAfter = PDTFactory.createOffsetDateTime(aEndpointCert.getNotAfter());
                        aLICert.addChild(div("Not after: " + PDTToString.getAsString(aNotAfter, aDisplayLocale)));
                        if (aNotAfter.isBefore(aNowDateTime))
                            aLICert.addChild(error("This Endpoint Certificate is no longer valid!"));
                        aLICert.addChild(div("Serial number: " + aEndpointCert.getSerialNumber().toString() + " / 0x" + _inGroupsOf(aEndpointCert.getSerialNumber().toString(16), 4)));
                        if (aQueryParams.getSMPAPIType() == ESMPAPIType.PEPPOL) {
                            // Check Peppol certificate status
                            final EPeppolCertificateCheckResult eCertStatus = PeppolCertificateChecker.checkPeppolAPCertificate(aEndpointCert, aNowDateTime, ETriState.FALSE, null);
                            if (eCertStatus.isValid())
                                aLICert.addChild(success("The Endpoint Certificate appears to be a valid Peppol certificate."));
                            else {
                                aLICert.addChild(error().addChild(div("The Endpoint Certificate appears to be an invalid Peppol certificate. Reason: " + eCertStatus.getReason())));
                            }
                        }
                        final HCTextArea aTextArea = new HCTextArea().setReadOnly(true).setRows(4).setValue(CertificateHelper.getPEMEncodedCertificate(aEndpointCert)).addStyle(CCSSProperties.FONT_FAMILY.newValue(CCSSValue.FONT_MONOSPACE));
                        BootstrapFormHelper.markAsFormControl(aTextArea);
                        aLICert.addChild(div(aTextArea));
                    } else {
                        aLICert.addChild(error("Failed to interpret the data as a X509 certificate"));
                    }
                }
                aNodeList.addChild(aULCerts);
            }
        }
        if (bQueryBusinessCard) {
            final StopWatch aSWGetBC = StopWatch.createdStarted();
            aNodeList.addChild(h3("Business Card details"));
            EFamFamFlagIcon.registerResourcesForThisRequest();
            final String sBCURL = aSMPHost.toExternalForm() + "/businesscard/" + aParticipantID.getURIEncoded();
            LOGGER.info("Querying BC from '" + sBCURL + "'");
            byte[] aData;
            try (HttpClientManager aHttpClientMgr = new HttpClientManager()) {
                final HttpGet aGet = new HttpGet(sBCURL);
                aData = aHttpClientMgr.execute(aGet, new ResponseHandlerByteArray());
            } catch (final Exception ex) {
                aData = null;
            }
            aSWGetBC.stop();
            if (aData == null)
                aNodeList.addChild(warn("No Business Card is available for that participant."));
            else {
                final ICommonsList<JAXBException> aPDExceptions = new CommonsArrayList<>();
                final Consumer<GenericJAXBMarshaller<?>> aPMarshallerCustomizer = m -> {
                    aPDExceptions.clear();
                    // Remember errors
                    m.readExceptionCallbacks().add(aPDExceptions::add);
                    m.setCharset(StandardCharsets.UTF_8);
                };
                final PDBusinessCard aBC = PDBusinessCardHelper.parseBusinessCard(aData, aPMarshallerCustomizer);
                if (aBC == null) {
                    final BootstrapErrorBox aError = error("Failed to parse the response data as a Business Card.");
                    for (final JAXBException aItem : aPDExceptions) aError.addChild(AppCommonUI.getTechnicalDetailsUI(aItem, false));
                    aNodeList.addChild(aError);
                    final String sBC = new String(aData, StandardCharsets.UTF_8);
                    if (StringHelper.hasText(sBC))
                        aNodeList.addChild(new HCPrismJS(EPrismLanguage.MARKUP).addChild(sBC));
                    LOGGER.error("Failed to parse BC:\n" + sBC);
                } else {
                    final HCH4 aH4 = h4("Business Card contains " + (aBC.businessEntities().size() == 1 ? "1 entity" : aBC.businessEntities().size() + " entities"));
                    if (bShowTime)
                        aH4.addChild(" ").addChild(_createTimingNode(aSWGetBC.getMillis()));
                    aNodeList.addChild(aH4);
                    aNodeList.addChild(div(_createOpenInBrowser(sBCURL)));
                    final HCUL aUL = new HCUL();
                    for (final PDBusinessEntity aEntity : aBC.businessEntities()) {
                        final HCLI aLI = aUL.addItem();
                        // Name
                        for (final PDName aName : aEntity.names()) {
                            final Locale aLanguage = LanguageCache.getInstance().getLanguage(aName.getLanguageCode());
                            final String sLanguageName = aLanguage == null ? "" : " (" + aLanguage.getDisplayLanguage(aDisplayLocale) + ")";
                            aLI.addChild(div(aName.getName() + sLanguageName));
                        }
                        // Country
                        {
                            final String sCountryCode = aEntity.getCountryCode();
                            final Locale aCountryCode = CountryCache.getInstance().getCountry(sCountryCode);
                            final String sCountryName = aCountryCode == null ? sCountryCode : aCountryCode.getDisplayCountry(aDisplayLocale) + " (" + sCountryCode + ")";
                            final EFamFamFlagIcon eIcon = EFamFamFlagIcon.getFromIDOrNull(sCountryCode);
                            aLI.addChild(div("Country: " + sCountryName + " ").addChild(eIcon == null ? null : eIcon.getAsNode()));
                        }
                        // Geo info
                        if (aEntity.hasGeoInfo()) {
                            aLI.addChild(div("Geographical information: ").addChildren(HCExtHelper.nl2brList(aEntity.getGeoInfo())));
                        }
                        // Additional IDs
                        if (aEntity.identifiers().isNotEmpty()) {
                            final BootstrapTable aIDTab = new BootstrapTable().setCondensed(true);
                            aIDTab.addHeaderRow().addCells("Scheme", "Value");
                            for (final PDIdentifier aItem : aEntity.identifiers()) {
                                // Avoid empty rows
                                if (StringHelper.hasText(aItem.getScheme()) || StringHelper.hasText(aItem.getValue()))
                                    aIDTab.addBodyRow().addCells(aItem.getScheme(), aItem.getValue());
                            }
                            if (aIDTab.hasBodyRows())
                                aLI.addChild(div("Additional identifiers: ").addChild(aIDTab));
                        }
                        // Website URLs
                        if (aEntity.websiteURIs().isNotEmpty()) {
                            final HCNodeList aWebsites = new HCNodeList();
                            for (final String sItem : aEntity.websiteURIs()) if (StringHelper.hasText(sItem))
                                aWebsites.addChild(div(HCA.createLinkedWebsite(sItem)));
                            if (aWebsites.hasChildren())
                                aLI.addChild(div("Website URLs: ").addChild(aWebsites));
                        }
                        // Contacts
                        if (aEntity.contacts().isNotEmpty()) {
                            final BootstrapTable aContactTab = new BootstrapTable().setCondensed(true);
                            aContactTab.addHeaderRow().addCells("Type", "Name", "Phone", "Email");
                            for (final PDContact aItem : aEntity.contacts()) {
                                // Avoid empty rows
                                if (StringHelper.hasText(aItem.getType()) || StringHelper.hasText(aItem.getName()) || StringHelper.hasText(aItem.getPhoneNumber()) || StringHelper.hasText(aItem.getEmail()))
                                    aContactTab.addBodyRow().addCell(aItem.getType()).addCell(aItem.getName()).addCell(aItem.getPhoneNumber()).addCell(HCA_MailTo.createLinkedEmail(aItem.getEmail()));
                            }
                            if (aContactTab.hasBodyRows())
                                aLI.addChild(div("Contact points: ").addChild(aContactTab));
                        }
                        if (aEntity.hasAdditionalInfo()) {
                            aLI.addChild(div("Additional information: ").addChildren(HCExtHelper.nl2brList(aEntity.getAdditionalInfo())));
                        }
                        if (aEntity.hasRegistrationDate()) {
                            aLI.addChild(div("Registration date: ").addChild(PDTToString.getAsString(aEntity.getRegistrationDate(), aDisplayLocale)));
                        }
                    }
                    aNodeList.addChild(aUL);
                }
            }
        }
        // Audit success
        AuditHelper.onAuditExecuteSuccess("participant-information", aParticipantID.getURIEncoded());
    } catch (final RuntimeException ex) {
        if (LOGGER.isDebugEnabled())
            LOGGER.debug("Participant Information Error", ex);
        else if (LOGGER.isWarnEnabled())
            LOGGER.warn("Participant Information Error: " + ex.getClass().getName() + " - " + ex.getMessage());
        new InternalErrorBuilder().setRequestScope(aRequestScope).setDisplayLocale(aDisplayLocale).setThrowable(ex).handle();
        aNodeList.addChild(error(div("Error querying participant information.")).addChild(AppCommonUI.getTechnicalDetailsUI(ex, true)));
        // Audit failure
        AuditHelper.onAuditExecuteFailure("participant-information", sParticipantIDUriEncoded, ex.getClass(), ex.getMessage());
    }
    aNodeList.addChild(new HCHR());
}