Authorize.net certificate error

[rohit]

Yes, it did work for me as well. As regards the property file, the password field is not required. Its a security issue and it should be removed. Authorize.net's transaction key and login will serve the purpse for authentication.
 
rohit
 

--- On Tue, 6/30/09, Kumaraswamy nandipati <[hidden email]> wrote:


From: Kumaraswamy nandipati <[hidden email]>
Subject: Re: Authorize.net certificate error - SOLVED
To: [hidden email]
Date: Tuesday, June 30, 2009, 4:03 PM


Hi rohit.,

When I make implementation for my ofbiz store earlier,(For live mode)

1.P )I added secure.authorize.net certificate into
/usr/lib/jvm/java-6-sun/jre/lib/security/cacerts
using the following command
add certificate: sudo keytool -import  -alias AUTHORIZE_NET -keystore
cacerts -trustcacerts -file secure.autorize.net.cer

(I made certificate dump from https://secure.authorize.net)

2.P) in payment.properties, make sure that
*payment.authorizedotnet.url*=payment.authorizedotnet.url=
https://secure.authorize.net/gateway/transact.dll
*payment.authorizedotnet.version*=3.1
*payment.authorizedotnet.trankey*=your transactionkey from authorize.net(
secure.authorize.net)
*payment.authorizedotnet.password*=your transactionkey from authorize.net(
secure.authorize.net)
*payment.authorizedotnet.login*=valid merchant id (secure.authorize.net).

3.P) make sure that product store level capture, authorize service call
changes are done.

Thats it. It worked for me.

On Fri, Jun 19, 2009 at 5:35 PM, Raj Saini <[hidden email]> wrote:

> Hi Rohit,
>
> Although, I never worked Authorize.net specific certificates, however, I
> resolved similar problem by importing the certificates in the JDK ca
> certificate store. This may be a problem related to missing Intermediate
> certificate of the certificate chains. Also make sure the you are using the
> same JDK, where you imported your certificates.
>
> If nothing works, I would debug the communication between client and server
> using some network sniffer (or a some kind of http proxy which can show you
> the http headers).
>
> Thanks,
>
> Raj
>
>
> rohit2006 wrote:
>
>> Hi,
>>
>> I am getting the same problems. The logs reads as:
>>
>> 2009-06-19 04:35:30,143 (TP-Processor20) [
>> AIMPaymentServices.java:326:INFO
>> ] Could not complete Authorize.Net transaction:
>> org.ofbiz.base.util.HttpClientException: IO Error processing request
>> (java.security.cert.CertificateException: No trusted certificate found)
>> I have imported the SSL into both ofbizssl.jks and ofbiztrust.jks ( i
>> don't
>> it is required anymore) but with no success.
>>
>>  I also imported the certificate into JDK keystore, at
>> /usr/java/jdk1.6.0_11/jre/lib/security, but this do not help either.
>>
>> I am at a complete loss as, what the problem my be. If anyone can help
>> identify the issue i will appreciate it.
>>
>> Thanks,
>>
>> Rohit
>>
>>
>> Ritesh Trivedi wrote:
>>
>>
>>> Added
>>>
>>>
>>> http://docs.ofbiz.org/display/OFBIZ/How+to+configure+authorize.net+certificates
>>>
>>>
>>> BJ Freeman wrote:
>>>
>>>
>>>> better yet
>>>>
>>>> http://docs.ofbiz.org/display/OFBIZ/FAQ+-+Tips+-+Tricks+-+Cookbook+-+HowTo
>>>>
>>>>
>>>> Ritesh Trivedi sent the following on 7/25/2008 10:22 AM:
>>>>
>>>>
>>>>> Thanks Raj and BJ for responses.
>>>>>
>>>>> After couple of hours of debugging, I was able to get pass the issue.
>>>>>
>>>>> For the completion of the thread - I had to import authorize.net
>>>>> certificates into the default JDK keystore - even though in tomcat the
>>>>> setting was to use ofbiz keystore for https - not sure why.
>>>>>
>>>>> Also keep in mind that authorize.net has different set of certificates
>>>>> for
>>>>> test and production site. if you are hitting
>>>>> https://test.authorize.net
>>>>> vs.
>>>>> https://secure.authorize.net. For those who dont know how to get
>>>>> authorize.net certificates, just go to the URLs and export the
>>>>> certificates
>>>>> to file and import then into the keystore. So you dont need your
>>>>> website
>>>>> certificates signed by CA but you need authorize.net (or the url you
>>>>> are
>>>>> connecting to - as trusted site) certificates added.
>>>>>
>>>>>
>>>>> Raj Saini wrote:
>>>>>
>>>>>
>>>>>> I don't know about Authorize.net but I had similar problem while using
>>>>>> the OFBiz RMI. I am not even sure if RMI is used by Authorize.net. However
>>>>>> few pointers which may be helpful.
>>>>>>
>>>>>> 1. I am not sure there is something like authrorize.net certificate.
>>>>>> Generally certificates are CA signed certificates and well known CAs  are
>>>>>> recognized by web clients such as web browsers as they have a pre-populated
>>>>>> CA store.
>>>>>>
>>>>>> 2. If you are using a CA certificate for testing (for example self
>>>>>> signed CA certificate or a trail certificate). You will need to add it to
>>>>>> the  your applications to  CA  certificate store. Generally browser have a
>>>>>> support for adding the certificates in the stores.
>>>>>>
>>>>>> 3. There are two way in Java application to use the CA store. i)
>>>>>> Import your certificate in the default JDK store (it is in the
>>>>>> ${java.home}/jre/lib/security folder) of your JDK. ii) Pass the CA
>>>>>> store as JVM argument to the command line of your Java application
>>>>>> (This method did not work for me  due to some reason).
>>>>>>
>>>>>> For testing, my suggestion is you import the CA certificate in JVM
>>>>>> default CA store. You can use the keytool command to import the certificate.
>>>>>> I hope this will be helpful.
>>>>>>
>>>>>> Thanks,
>>>>>>
>>>>>> Raj
>>>>>>
>>>>>> Ritz123 wrote:
>>>>>>
>>>>>>
>>>>>>> Anyone knows which certificate and where it needs to be imported for
>>>>>>> authorize.net to work?
>>>>>>> r
>>>>>>>
>>>>>>> Ritz123 wrote:
>>>>>>>
>>>>>>>
>>>>>>>> Hi,
>>>>>>>>
>>>>>>>> I am using ofbiz embedded inside tomcat (vs. the normal config of
>>>>>>>> tomcatr container embedded inside ofbiz). I dont think it matters in
>>>>>>>> this
>>>>>>>> case,
>>>>>>>> but I am getting No trusted certificate found (see below the exact
>>>>>>>> error).
>>>>>>>>
>>>>>>>> I have imported actual authorize.net certificate (by going to
>>>>>>>> https://www.authorize.net and exporting their certificate and then
>>>>>>>> importing it into keystores) under alias AUTHORIZE_NET in both users
>>>>>>>> default keystore as well as the one tomcat is using which is under
>>>>>>>> OFBIZ_HOME/framework/base/config/ofbizssl.jks. It doesnt seem to
>>>>>>>> work.
>>>>>>>> Not
>>>>>>>> sure what am I missing here.
>>>>>>>>
>>>>>>>>
>>>>>>>> 2008-07-23 18:23:29,516 (http-8443-1) [
>>>>>>>> AIMPaymentServices.java:365:INFO
>>>>>>>> ]
>>>>>>>> Could
>>>>>>>>  not complete Authorize.Net transaction:
>>>>>>>> org.ofbiz.base.util.HttpClientException
>>>>>>>> : IO Error processing request
>>>>>>>> (java.security.cert.CertificateException:
>>>>>>>> No
>>>>>>>> trust
>>>>>>>> ed certificate found)
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>
>>>>>>
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>>
>
>

--
Thanks,
Kumaraswamy.N
91-9866805250.