Issue in create pcsid in simulation

FATOORA portal and Simulation portal
1

When try to create pcsid in simulation environment
after success sign document by csid
It give internal server error 500

2

please try to generate the CSR from the beginning for the simulation using the SDK, this command:

Fatoora -sim -csr -csrConfig [propertiesfilename. properties] and the properties file that comes with it in data/input directory

,complete the onboarding process again and it will work as expected

3

We are also getting same error while using production CSID api

Request
{
“compliance_request_id”: “1692621015604”
}

Response
{
“code”: “Invalid-Request”,
“message”: “System failed to process your request”
}

Request id : 1692621015604

Log: 500 Internal server error

Please help us to resolve the issue.

4

Please, try to perform the task via Postman collection. If the issue still persists, please, share the postman collection with ZATCA via the official channels or your RM for further investigation as the technical team needs to analyze the provided inputs and steps.

5

Thanks for your response.

We have tried via Postman still the issue persists. We will share the collection and csr files to technical team via RM manger.

6

thanks it solved with me by make certificateTemplateName = ASN1:PRINTABLESTRING:PREZATCA-Code-Signing

7

we have added “certificateTemplateName = ASN1:PRINTABLESTRING:PREZATCA-Code-Signing” in csr property file but still same error. Can you please share the sample csr file with us.

Note : We are using below command to generate the CSR

fatoora -sim -csr -csrConfig csr-config-saco.properties

8

Sample CSR files are in the SDK → Data - Inputs. You can find there examples of English and Arabic CSRs, incl. VAT groups.

9

We used the same mechanism as per the above thread still same issue. Can you please help us to resolve the issue?

Please find the below CSR property file

csr.common.name=SAICO-23456-300071179800003
csr.serial.number=1-SAICO|2-SAICO1|3-1234567891
csr.organization.identifier=300071179800003
csr.organization.unit.name=HEADOFFICE
csr.organization.name=SAICO
csr.country.name=SA
csr.invoice.type=1000
csr.location.address=Riyadh
csr.industry.business.category=INSURANCE

10

Please, try to perform the task via Postman collection. If the issue still persists, please, share the postman collection with ZATCA via the official channels or your RM for further investigation as the technical team needs to analyze the provided inputs and steps.

11

Yes. we have tried with postman. Still same issue. we have sent email to Zatca via RM. All steps are mentioned.

12

where you put this
certificateTemplateName = ASN1:PRINTABLESTRING:PREZATCA-Code-Signing
???

13

dear @amerrabba,

in order to generate a CSR for simulation environment using openssl, then you need a CNF config file containing below fields (example) :

oid_section = OIDs
[OIDs]
certificateTemplateName = 1.3.6.1.4.1.311.20.2
[req]
default_bits = 2048
emailAddress = MyEmail@email.com
req_extensions = v3_req
x509_extensions = v3_ca
prompt = no
default_md = sha 256
req_extensions = req_ext
distinguished_name = dn
[dn]
C=SA
OU=Riyad Branch
O=Contoso
CN=EA123456789
[v3_req]
basicConstraints = CA:FALSE
keyUsage = digitalSignature, nonRepudiation, keyEncipherment
[req_ext]
certificateTemplateName = ASN1:PRINTABLESTRING:PREZATCA-Code-Signing
subjectAltName = dirName:alt_names
[alt_names]
SN=1-TST|2-TST|3-ed22f1d8-e6a2-1118-9b58-d9a8f11e445f
UID=310122393500003
title=1100
registeredAddress= MyAddress
businessCategory=Industry

so the certificateTemplateName = ASN1:PRINTABLESTRING:PREZATCA-Code-Signing is one of the fields.

however, you can still generate the CSR from the csr config properties file by using SDK using the following command:
Fatoora -sim -csr -csrConfig [propertiesfilename. properties]

note: make sure to use the latest version of the SDK.

please do not hesitate to reach out if you have any further questions.

thanks.

14

many thanks dear anas
after add certificate template line
and install simulation sdk
its working fine
many thanks

في الأربعاء، 6 أيلول 2023, 5:54 م Anas Turkistani via Fatoora Developer Community <notifications@zatca1.discoursemail.com> كتب:

15

@amerrabba any time dear :). if you have any other questions, please do not hesitate to submit them as posts, and the team will be happy to help always.

16

i have arabic name of organization along with the english name
do i need to make changes in config file?

17

It’s up to you, no restrections by ZATCA wheter you enter the org name in arabic or english in your CSR config file.

18

I have one more Question to ask ! Will be very gratefull to your response

my question is
i am generating a csr file using chilkat library ,by submitting this csr file i got the Compliance CSID and i did the compliance of invoices but when i try to generate the PCSID it gives me the error of “Invalid-CSR”.

Then i used OpenSSL .i didnt do any changes just replaced the CSR generattion from chilkat to OpenSSL and i got succeed in onboarding the Unit device and everything

is there any restriction by ZATCA that it only accpets the CSR generated by OpenSSL or there is something else that could cause the Error in the CSR generated by chilkat library

19

@Shzzamx,

Please note that there is a special requirement for CSR generation in simulation environment, which probably you configured it correctly in OpenSSL.

+there is no such restriction by ZATCA to accept CSRs from openSSL only.

20

Please note that there is a special requirement for CSR generation in simulation environment, which probably you configured it correctly in OpenSSL. ??? what is this requirement ?