EBICS 3.0(H005) INI请求报错090004：无效订单数据格式求助

可能的问题原因 #

• 命名空间前缀不匹配：你提交的SignaturePubKeyOrderData根元素使用ns2作为S002命名空间前缀，但外层ebicsUnsecuredRequest中S002的前缀是ns3，XML解析时会判定命名空间不一致，导致格式错误。
• X509IssuerName格式不符合规范：EBICS要求X509IssuerName必须遵循RFC 2253的属性顺序（从最具体到最宽泛），你当前的顺序颠倒，正确顺序应为OU=eng, O=Claus AS, CN=*.example.com, L=Sydhavn, C=DK。
• 压缩编码流程错误：SignaturePubKeyOrderData的正确处理流程是：XML序列化（保证无冗余空格、命名空间正确）→ GZIP压缩 → Base64编码，任何一步偏差都会导致订单数据无法解析。
• SecurityMedium值兼容性问题：部分银行可能不接受INI请求使用0000（无安全介质），建议确认银行要求的有效值。

修正后的ebicsUnsecuredRequest示例 #

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<ebicsUnsecuredRequest Version="H005" Revision="1" xmlns="urn:org:ebics:H005" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:ebics="http://www.ebics.org/S002">
    <header authenticate="true">
        <static>
            <HostID>DEHost</HostID>
            <PartnerID>DEPartner</PartnerID>
            <UserID>DeSystemUser</UserID>
            <Product Language="de">Ebics server</Product>
            <OrderDetails xsi:type="UnsecuredReqOrderDetailsType" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
                <AdminOrderType>INI</AdminOrderType>
            </OrderDetails>
            <SecurityMedium>0000</SecurityMedium>
        </static>
        <mutable/>
    </header>
    <body>
        <DataTransfer>
            <!-- 修正命名空间和IssuerName后的SignaturePubKeyOrderData经过GZIP+Base64编码的结果 -->
            <OrderData>eJx9VV1v2zYQ/SsneN2bZtY2yLiAoToxMFBYjIJSDHG5eAcqgcBf76tZuJme3Z3iUCovgyK7+sgsj69r3Ls1Eb3au0LNbj2Ss2HkVFUIZpEa/HpsH9RY5HVe0VoZeVRbQe91E1/r55+VZU+Fc9jQuvbu6R2vhi1Cv3MLpDr/ZGT82iWo+Tur5+nU4RQq9o/lre4ymOYdgUo6ZPQlil8R/jgfr1qfaBHvlpUL3P0DEMH29eRs/rs55CcSoH9J1hLzDqzcGv0s8yE93r9JQGXh1tJEGA+zPDgMSLARJoEAs8cCqireVOAhjP6DdeF/w51FiaQSaQuLiDEIh0LB9pUEkAPzbugz1IgOTBzGSZGAka3iWhLcXaUeq4MzAHriRBvWxcO0l8m65cfXH2caxjHmA34I4BLoe9dAAIxg48atoWgtCIrEPp2G4j0YQNDeEhGaCTDYAk+Ly58q2GvdfgzxqyICtJoBz8IARda1FIBxZB9K4rQpBAn+dmQU/T5oO1JFp75wKEZDFdZBHP1QHfZftcbn2D3Uvg8o7TicQc2KpjIVAGz4FEz+SFyydJmBMojtn09z0DmgkAIdAQgTdcBOVzjzUmMW2Rult27fas4Xit4UyTmvH7Nk1JYLjh1ccWEyE85tWUZ7atDooucxQv4ba+sNglCnekVpFCTVcEsYSdfVUu9hmqMev0J/XGgev+ni2lTGJQ4Ec7OjMC58qSO4uZJ1YhtrXmaUW25UuHOYKuMbusomLITRCN7tixZSmpePDBSYOW5gcp3UXLayITYbfdAubhFYzCkiRUEZN0CyciMcEPL560n5VE87Sk9CSAZWswJqDLPbUPnQRNgJ8k54A0EWFQ/SWSpCSB7NUqWXwn9bQOdxRWHEi+F+0YF6+s7tY+Nn/0ZLlvtT7rMmEGpvrDYK83zipJtYhDgXB5mtQcO1epq1WdmeUKxBINwPM7a85OLF0haQMZaOye1gB87j0NBFOZN+3RnuSX3HTFKFzqosbdeMHy/UeBuRy5K/K0UtP5DqacfzFC7nwNemFmR1XdOd6B6lR9K3RglltKKfenTJXynl4EZMuiw14JcU+4Ng5Y8NTZB4/8cDABR3JqHHbesVFMFX/+4kQBW3RJkSHm0MxWmOKc1QszORQ3fm56q36VcKZ11l1KzuZm4cW2fUxDLS/n2ARRj0bATltskmX4fm9cfRCeFzJHl4Jxkz0PY2XUHBkZ6Sk7Kx7HSZOfRJbA4QNMaEOcECyzlVJd2e2aG3AbcnpeMqfIx4Ab4MX8puok3+IW56j++eDggdz7SKwOVUKzp5I68XO8NejTwo/x0PGTraY4bfdYgvW36e+p8u/MEaqqie56dE+97CP8G0X28mizX+t9mHht8WXErKH4fMrrP1+jzsuvWfQalPmXkbJmMq+pRkB/js11VMSDjX+ofN5m8CA3uR/dN7MltSKWxGw2o8jFIPAB/7iQ6X+vZMA+Bu7HlD4OJ8sGYNiz06fQkO3T/w33d1HVu9dFdBfgBrI/xsO0X8AvslkNzEjvqzrK314H8g/g5dOOP4+wzcvfMkpB3g==</OrderData>
        </DataTransfer>
    </body>
</ebicsUnsecuredRequest>

对应的修正后SignaturePubKeyOrderData（编码前） #

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<ebics:SignaturePubKeyOrderData xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:ebics="http://www.ebics.org/S002">
    <ebics:SignaturePubKeyInfo>
        <ds:X509Data>
            <ds:X509Certificate>MIIDLjCCAhagAwIBAgIGAYs4vtNxMA0GCSqGSIb3DQEBCwUAMFgxDDAKBgNVBAsMA2VuZzERMA8GA1UECgwIQ2xhdXMgQVMxFjAUBgNVBAMMDSouZXhhbXBsZS5jb20xCzAJBgNVBAYTAkRLMRAwDgYDVQQHDAdTeWRoYXZuMB4XDTIzMTAxNTAwMDAwMFoXDTI0MTAxNDAwMDAwMFowWDEMMAoGA1UECwwDZW5nMREwDwYDVQQKDAhDbGF1cyBBUzEWMBQGA1UEAwwNKi5leGFtcGxlLmNvbTELMAkGA1UEBhMCREsxEDAOBgNVBAcMB1N5ZGhhdm4wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChUXK9rWXtZyETYavTY/htCbyvii8ATZdpb05+IdVms/GCHvSAnxlYOahFHbI5JhOFV97eO9/7446DxXpOkXjDPgEYyfPqFApLrl6MlMCwcbeJBlTcYpE8JWC3hWnKvtQaQnlHGoYCVAxuUxls9gDF+wBwr0VvE9MnzGcfQDWQbciBxe6phN4dxHHACzanCOE88DPwChx5Ye80IbdkaML1o4uO9/Oy8ADovTCUABoL9LdYhw+Abhhjc8Uw4T9ykeMMhhDEpWoE2JMyBSDJ90nR8GyKXg2KpESZtb03zy8oLvQylxlI1A/SzTEpqFWo8PngdI4ZGB8QYXmP9pWsjC67AgMBAAEwDQYJKoZIhvcNAQELBQADggEBAIUO3uvVX+mkmUZKed6SKQFqGIWbbzn0ZF8JnmisPi3JDiFbkTdFjpcyI1XestxYaR9xPSHIxA1mWOoNyflPMmyB5c8vEwRLOd2aIpuYA5G9jbAzmRRUAF8FPgdxaVuOUP2AkR4nDvwkiwTKmDUl70OYjPkC+RnqG3Ua7y7hFUWjSZ9Nl3UnagXXVidQmo30+w9zuI0fH0+ll2LLTpbAdj5NFBoITqNaa0ENwuVCNwSiE1nzV+umfKE42DzA+BTK+4ECHMiSOJJuqAZu8/j6Cfeb0AZc2n3qPS8Gv2WFYPbjRY2cNybwKsRshBEfo9fG32vTBf5bg2dYbhHQOYvxz6A=</ds:X509Certificate>
            <ds:X509IssuerSerial>
                <ds:X509IssuerName>OU=eng, O=Claus AS, CN=*.example.com, L=Sydhavn, C=DK</ds:X509IssuerName>
                <ds:X509SerialNumber>1697464111985</ds:X509SerialNumber>
            </ds:X509IssuerSerial>
        </ds:X509Data>
        <ebics:SignatureVersion>A005</ebics:SignatureVersion>
    </ebics:SignaturePubKeyInfo>
    <ebics:PartnerID>DEPartner</ebics:PartnerID>
    <ebics:UserID>DeSystemUser</ebics:UserID>
</ebics:SignaturePubKeyOrderData>

内容的提问来源于stack exchange，提问作者Claus C