ssl - Using custom certificates for Authorize.net AIM API in Rails on Heroku -
as of few days ago, authorize.net upgraded certificates signed using (sha-2).
our customers error returned authorize.net:
ssl_connect returned=1 errno=0 state=sslv3 read server certificate b: certificate verify failed
so need use them in our rails app on heroku. heroku's set of root certificates doesn't include these, have include them in activemerchant, having no luck finding clear instructions how properly. here's i've tried far:
i've downloaded 5 root certificates authorize.net requires, , chained them "cacert.pem," replacing existing "cacert.pem" file in app's /vendor/plugins/active_merchant/lib/certs/
folder (i backed old cacert.pem
file first, in case). did not solve problem -- still same error in development.
looking @ new "cacert.pem" file created, saw last certificate in chain (https://cacert.omniroot.com/bc2025.crt) looked this:
0Çw0Ç_†��π0 *Ühܘ �0z10 uie10u baltimore10u cybertrust1"0 ubaltimore cybertrust root0 000512184600z 250512235900z0z10 uie10u baltimore10u cybertrust1"0 ubaltimore cybertrust root0Ç"0 *Ühܘ �Ç�0Ç Ç�£ª"´ò=wË&röµy‘)‚·Ëïı∞„[é+)ödfl°]Ì∞ m€(.Œb¢b˛¥à⁄Î8Î!ù¿a+r{àw”è«∫πàµj ÁsË@ß—Ã bç-Âè¶p“®p√(Íı´%áäöñ©g∏?’˜˘r/¬’ppè¿ Àö·Ÿ 3zw÷¯ÏπÒhdbh“¿¬§Æ^``˛∂¶¸¥›y‘yòcı•c‡ê}]≤zÛÖÍΑÆ^Ñ>_ˇÌiº˘96ruœwrmÛ…ê,π=Â…#s?$ò!\ô)Ω∆:ÏÁnÜ:kótc3Ωh1xçvø¸ûé]*Üßmê‹'9�£e0c0uÂùy0Çgxè˙t6Ü{:µm0uˇ0ˇ0uˇ0 *Ühܘ �Ç�Ö]é‰oqhb†›ªo'%ÑΩ˜d˝-◊0„§Î⁄))∂y?vˆ#∏ ˘x§‘apΩajä’ Ω≈º0|÷È%çÜ@oÏã~8∆7oÌ›h1él“≥tÓæu^hpˇ\Ñ¿yÖ∏˝æe£¿¥¯r79’©1zø†*Ùô˜£eÇ„<^ıùûµ»û|.»§ûnkm˝pmkcΩdÊ∑ŒÚü.ª∑Úpàsí¬‚„çö2´é›ÈÓ~5´êØ>0îz–3=ßeı¸éûbœgd,]ªµ2“g“8.–˛Å‹2jµÓ<’¸ÁÅ√$bÍc9©
so removed portion in hopes i'd @ least have valid file. not sure if helped, because still got error message.
i tried altering activemerchant's connection.rb
configure_ssl
method, changing
http.ca_file = file.dirname(__file__) + '/../../certs/cacert.pem'
to
http.ca_file = rails.root + "app/vendor/plugins/active_merchant/lib/certs/cacert.pem"
i'm not sure if pointed cacert.pem
file correctly, since can't write development log file. don't know if file used if pointing file correctly. there severe lack of information online.
my site down until solve problem. i'm in full panic-mode. ideas need look/what need do?
thanks post able exact issue solved. installed latest activemerchant gem on different server , copied cacert.pem new gem /vendor/plugins/active_merchant/lib/certs/ directory of not working server. restart apache , able process cc successfully.
might bit of workaround @ least can accept payments again.
Comments
Post a Comment