
mendelson AS2 is a robust, Java-based implementation of the EDIINT AS2 standard, offering secure, reliable, and automated data exchange with your communication partners.
The software runs cross-platform on Windows, Linux, macOS, AIX, and other systems, making it a flexible choice for diverse environments.
You can get started with our free open-source community edition — ideal for initial testing and smaller deployments. For production use and advanced features, choose our commercial edition, backed by professional support and enterprise-grade capabilities.
AS2 (Applicability Statement 2) is a widely adopted protocol for secure, reliable business data exchange over the internet. Unlike traditional VANs or dedicated networks, AS2 ensures end-to-end delivery through built-in receipt and confirmation mechanisms (MDNs).
With mendelson AS2, you can exchange a wide range of document types, including EDI (X12, UN/EDIFACT), XML, and even Microsoft Word files. Files are transferred unchanged, preserving original structure and format.
Our AS2 solution provides a fast and straightforward way to connect with your partners. It can operate as a standalone module or be fully integrated into the mendelson business integration (MBI) platform for advanced workflows.
mendelson AS2 enables sending and receiving AS2 messages via HTTP and HTTPS, with support for both synchronous and asynchronous MDNs. Each trading partner can be individually configured, with polling mechanisms that detect and send new files automatically.
The architecture varies between editions:
- Community Version: Designed as a desktop application, with the user interface and AS2 server running in the same process.
- Commercial Version: Follows a scalable client-server model. The server and GUI run in separate processes and can be installed on different machines. The server can also run as a background service.
Below is an overview of the software’s components, all of which are included by default in the commercial installer:
- AS2 Server: Core component managing message processing, encryption, signing, and communication.
- Rich Client: Desktop interface for managing transactions, partners, and certificates (commercial only).
- Web Client (optional): Monitor transactions via browser access.
- Database: Stores transaction history and master data. Commercial editions support PostgreSQL, MySQL, and Oracle (via plugins).
- HTTP Server: Servlet container for inbound message receipt and information pages. A built-in server is included, but deployment in any servlet container (e.g., Tomcat) is possible.
- AS2 Sender: Handles outgoing messages and MDNs (sync/async).
- Notification System: Sends email alerts for system events requiring user attention.
mendelson AS2 is available in multiple versions to fit different business needs:
- Community Edition: Free, open-source desktop version for individual or small-scale use.
- Commercial Editions: Scalable, professionally supported versions for enterprise environments.
The table below highlights key differences between the Community and Commercial versions:
Community Edition | Commercial Edition | |
---|---|---|
Price | Free | Shop |
Number of partners | Unlimited | Unlimited |
Number of transactions | Unlimited | Unlimited |
Purpose |
||
Architecture | Desktop application | Client-Server application |
Functionality | ||
Asyncronous and syncronous MDN | ✔️ | ✔️ |
Partner management | ✔️ | ✔️ |
Digital signatures, encryption | ✔️ | ✔️ |
TLS (up to TLS v1.3), TLS client authentication | ✔️ | ✔️ |
Data compression (AS2 1.1) | ✔️ | ✔️ |
Multiple attachments (AS2 1.2) | ✔️ | ✔️ |
SHA-2 (SHA-256, SHA-384, SHA-512) | ✔️ | ✔️ |
SHA-3 (SHA3-256, SHA3-384, SHA3-512) | ✔️ | ✔️ |
Multilingual support: Localized to de, en and fr | ✔️ | ✔️ |
Web interface for transaction monitoring | ✔️ | ✔️ |
Multiple identities/local stations (ASP capable) | ✔️ | ✔️ |
Key and certificate management | ✔️ | ✔️ |
Key and certificate generation | ✔️ | ✔️ |
Certificate exchange messages (CEM) | ✔️ | ✔️ |
Email event notification | Some | ✔️(OAuth2 via plugin) |
Access via XML API(via plugin) | ❌ | 💲 |
Message statistic | ❌ | ✔️ |
Message quota | ❌ | ✔️ |
User defined HTTP headers | ❌ | ✔️ |
Run AS2 server as service (Windows) | ❌ | ✔️ |
Supported database systems | HSQLDB | HSQLDB, PostgreSQL, MySQL (*), Oracle DB (*) |
Support | ||
Community Forums (no professional support) | ✔️ | ✔️ |
Detailed documentation | ❌ | ✔️ |
Access to mendelson Support | ❌ | 💲 |
Access to phone Support | ❌ | 💲 |
Remote Support | ❌ | 💲 |
Free updates | ❌ | 💲 |
License Type | ||
Open Source License (GPL) | ✔️ | ❌ |
Commercial License | ❌ | ✔️ |
Each Commercial Edition is tailored for specific levels of integration and performance:
- Entry: Essential features, ideal for small companies or simple EDI needs.
- Professional: Adds database support, API integration, and plugins for advanced use cases.
- Enterprise HA: Built for high availability and scalability — perfect for mission-critical systems and redundancy.
The comparison below outlines the main capabilities of each commercial version:
entry | professional | enterprise HA | |
---|---|---|---|
Plugins | |||
PostgreSQL | ❌ | ✔️ | ✔️ |
MySQL (*) | ❌ | ✔️ | ✔️ |
Java API | ❌ | ✔️ | ✔️ |
REST API | ❌ | ✔️ | ✔️ |
OAUTH2 for HTTP/S and SMTP | ❌ | ✔️ | ✔️ |
HSM (Hardware Security Module) | ❌ | ✔️ | ✔️ |
Oracle DB (*) | ❌ | ❌ | ✔️ |
High Availability (HA) cluster | ❌ | ❌ | ✔️ |
Support | |||
Detailed documentation | ✔️ | ✔️ | ✔️ |
Access to mendelson Support (only with SMP) | ✔️ | ✔️ | ✔️ |
Access to phone Support | 💲 | 💲 | 💲 |
Remote Support | 💲 | 💲 | 💲 |
Premium Support | ❌ | ❌ | ✔️ |
The Professional and Enterprise HA editions of mendelson AS2 offer powerful plugins to extend functionality and integrate seamlessly with your systems.
🔌 Available Plugins:
- Java API: Embed mendelson AS2 directly into your Java applications. Send and receive messages programmatically — no separate server required.
- REST API: Integrate mendelson AS2 with your web-based platforms via modern, lightweight REST endpoints.
- PostgreSQL & MySQL: Use robust external databases instead of the embedded HSQLDB. Includes migration wizards and supports cloud deployments.
- HA (High Availability): Achieve performance scaling and redundancy through clustering. Ideal for critical systems and growing transaction loads.
- OAUTH2: Modern authentication for SMTP and HTTP. Enhances email alerts and message security.
- Web Interface: Monitor transactions through a browser — convenient and platform-independent.
🌐 Plugin Highlights
Java API:
Embed AS2 communication directly into your Java software. This plugin enables full programmatic control without running a separate AS2 server — ideal for developers and automation engineers.
REST API:
Integrate with cloud systems and web-based workflows. Simple and secure HTTP access for sending, receiving, and monitoring AS2 messages.
External Database Support (PostgreSQL, MySQL):
Replace the built-in database with scalable systems like PostgreSQL or MySQL. This is essential for large datasets, multi-user environments, and cloud-ready infrastructure.
HA Architecture:
Create a clustered environment with multiple AS2 nodes, each running in parallel for maximum uptime and throughput. Upgrade nodes individually without downtime.
OAUTH2 Authentication:
Upgrade your SMTP and HTTP security using industry-standard OAUTH2 protocols — future-proof and enterprise-ready.
Web Interface:
Keep track of your AS2 transactions via a secure browser dashboard — no need for local client software.
*MySQL and Oracle DB are registered trademarks of Oracle and/or its affiliates.
🔧 Core Technical Features
- Support for both synchronous and asynchronous MDN (Message Disposition Notification)
- Built-in key and certificate management with generation and exchange (CEM)
- Encryption and digital signature support using industry standards
- Secure transport via SSLv3, TLS 1.0–1.3, including TLS client authentication
- Multi-language support: English, German, French
- Automated log cleanup via system tasks
🔌 Integration Capabilities
- Easy integration via partner-based file system interface
- Built-in scheduler to pick up files from directories
- Support for post-processing through scripting on receipt
- Compatible with servlet containers like Tomcat and Jetty
- Plugin system for extended functionality (e.g., external databases)
- 100% Java-based — ideal for Docker and Kubernetes deployment
📈 Monitoring and Alerts
- Web interface for transaction monitoring
- Email-based alerts for system events (OAuth2 support via plugin)
🔐 Encryption and Signature Algorithms
Supported Encryption Algorithms:
- 3DES, AES (128/192/256 in CBC, GCM, CCM)
- AES with RSAES-OAEP (128/192/256 in CBC, GCM)
- Camellia (128/192/256 in CBC)
- CHACHA20-POLY1305, DES, RC2, RC4
Supported Hash Algorithms:
- SHA-1, SHA-2 (256/384/512), SHA-3 (224/256/384/512)
- Support for RSASSA-PSS variants of SHA
- MD5 (legacy support)
🔑 Certificate & Key Support
- Self-signed and CA-signed certificates
- SHA-1, SHA-2, SHA-3 signed certificates
- Elliptic Curve and RSA key support
🔍 Test Your AS2 Setup
To help you verify compatibility and functionality, Mendelson operates a public AS2 test server. This is ideal for ensuring your setup works correctly with our solution.
If you are using the mendelson open-source AS2 installation, it is pre-configured to communicate with this server out of the box.
🔗 Test Server URLs
- Check server status:
http://testas2.mendelson-e-c.com:8080/as2/ServerState - Web monitoring interface:
http://testas2.mendelson-e-c.com:8080/webas2
Login: guest / Password: guest
🛠️ Configuration for Testing
- MDN: sync
- URL: http://testas2.mendelson-e-c.com:8080/as2/HttpReceiver
- Sender AS2 ID: mycompanyAS2
- Receiver AS2 ID: mendelsontestAS2
- Signature algorithm: SHA-1, SHA-2, SHA-3 or any other
- Encryption algorithm: 3DES or any supported
🔐 Keys and Certificates
- Sender key (PKCS#12):
Download Key3 (password:test
) - Receiver certificate (PEM):
Download Key4
🌐 TLS Test Options
You can also test TLS-secured communication using:
- AS2 Receiver:
https://testas2.mendelson-e-c.com:8444/as2/HttpReceiver - Web interface:
https://testas2.mendelson-e-c.com:8444/webas2 (guest / guest)
Please note: These URLs are secured with a self-signed certificate. Your browser may flag them as untrusted — this is expected. In production, you can use your own trusted certificates.
📩 Need help? Contact us if you encounter any issues during testing.