ssl - Using custom certificates for Authorize.net AIM API in Rails on Heroku -


as of few days ago, authorize.net upgraded certificates signed using (sha-2).

our customers error returned authorize.net:

ssl_connect returned=1 errno=0 state=sslv3 read server certificate b: certificate verify failed

so need use them in our rails app on heroku. heroku's set of root certificates doesn't include these, have include them in activemerchant, having no luck finding clear instructions how properly. here's i've tried far:

i've downloaded 5 root certificates authorize.net requires, , chained them "cacert.pem," replacing existing "cacert.pem" file in app's /vendor/plugins/active_merchant/lib/certs/ folder (i backed old cacert.pem file first, in case). did not solve problem -- still same error in development.

looking @ new "cacert.pem" file created, saw last certificate in chain (https://cacert.omniroot.com/bc2025.crt) looked this:

0Çw0Ç_†��π0 *Ühܘ �0z10 uie10u baltimore10u cybertrust1"0 ubaltimore cybertrust root0 000512184600z 250512235900z0z10 uie10u baltimore10u cybertrust1"0 ubaltimore cybertrust root0Ç"0 *Ühܘ �Ç�0Ç Ç�£ª"´ò=wË&röµy‘)‚·Ëïı∞„[é+)ödfl°]Ì∞ m€(.Œb¢b˛¥à⁄Î8Î!ù¿a+r{àw”è«∫πàµj ÁsË@ߗàbç-Âè¶p“®p√(Íı´%áäöñ©g∏?’˜˘r/¬’ppè¿ Àö·Ÿ 3zw÷¯ÏπÒhdbh“¿¬§Æ^``˛∂¶¸¥›y‘yòcı•c‡ê}]≤zÛÖÍΑÆ^Ñ>_ˇÌiº˘96ruœwrmÛ…ê,π=Â…#s?$ò!\ô)Ω∆:ÏÁnÜ:kótc3Ωh1xçvø¸ûé]*Üßmê‹'9�£e0c0uÂùy0Çgxè˙t6Ü{:µm0uˇ0ˇ0uˇ0 *Ühܘ �Ç�Ö]é‰oqhb†›ªo'%ÑΩ˜d˝-◊0„§Î⁄))∂y?vˆ#∏ ˘x§‘apΩajä’ Ω≈º0|÷È%çÜ@oÏã~8∆7oÌ›h1él“≥tÓæu^hpˇ\Ñ¿yÖ∏˝æe£¿¥¯r79’©1zø†*Ùô˜£eÇ„<^ıùûµ»û|.»§ûnkm˝pmkcΩdÊ∑ŒÚü.ª∑Úpàsí¬‚„çö2´é›ÈÓ~5´êØ>0îz–3=ßeı¸éûbœgd,]ªµ2“g“8.–˛Å‹2jµÓ<’¸ÁÅ√$bÍc9©

so removed portion in hopes i'd @ least have valid file. not sure if helped, because still got error message.

i tried altering activemerchant's connection.rb configure_ssl method, changing

http.ca_file = file.dirname(__file__) + '/../../certs/cacert.pem'

to

http.ca_file = rails.root + "app/vendor/plugins/active_merchant/lib/certs/cacert.pem"

i'm not sure if pointed cacert.pem file correctly, since can't write development log file. don't know if file used if pointing file correctly. there severe lack of information online.

my site down until solve problem. i'm in full panic-mode. ideas need look/what need do?

thanks post able exact issue solved. installed latest activemerchant gem on different server , copied cacert.pem new gem /vendor/plugins/active_merchant/lib/certs/ directory of not working server. restart apache , able process cc successfully.

might bit of workaround @ least can accept payments again.


Comments

Popular posts from this blog

Java 3D LWJGL collision -

spring - SubProtocolWebSocketHandler - No handlers -

methods - python can't use function in submodule -