Authorize.net API with Card on File transactions support thread...

[carlwhat]

for those of you waiting on the new certificate file, you can get it here.

there is no charge for this file, although you will probably need to create an account on my site.

this file has all of the latest certificates as stated in the authorize.net knowledgebase articles.

i have tested this file on 2 live sites located in the US with zero problems. in addition to having run cursory tests, those 2 sites are both now using this new certificate file in production environments with no ill effect.

for now, i know this new file works in the environments i have tested. when authorize.net makes the changeover on October 23rd and 24th, 2024 will be the real test.

i will be closely monitoring the situation at that time, so that users of this module can continue using it hopefully uninterrupted.

best.

[jeking]

for those of you waiting on the new certificate file, you can get it here.

there is no charge for this file, although you will probably need to create an account on my site.

this file has all of the latest certificates as stated in the authorize.net knowledgebase articles.

i have tested this file on 2 live sites located in the US with zero problems. in addition to having run cursory tests, those 2 sites are both now using this new certificate file in production environments with no ill effect.

for now, i know this new file works in the environments i have tested. when authorize.net makes the changeover on October 23rd and 24th, 2024 will be the real test.

i will be closely monitoring the situation at that time, so that users of this module can continue using it hopefully uninterrupted.

best.

Thank you for this!

[bustin98]

Just to make sure the certs installed, what should we be seeing? I was looking at the DigiCert Root page and I see G5 Root Certificates along with other certs. I see some of the other certs after importing your file, but none of the G5. I didn't see a specification of required certs from the notification email.

[carlwhat]

Just to make sure the certs installed, what should we be seeing? I was looking at the DigiCert Root page and I see G5 Root Certificates along with other certs. I see some of the other certs after importing your file, but none of the G5. I didn't see a specification of required certs from the notification email.

you only need to replace 1 file...

all of the research that i have done suggests that file has the correct certificates.

i will be monitoring the situation very closely on the 23rd and 24th. and if there is a problem, i will be posting the situation here as well as any solutions.

with regards to what you should be seeing, feel free to do your own research and correct anything you think i may have done wrong. for me to post the contents of the file seems superfluous and unnecessary. if you got the file from my site as i suggested, you should be good to go.

best.

[marcopolo]

you only need to replace 1 file...

all of the research that i have done suggests that file has the correct certificates.

i will be monitoring the situation very closely on the 23rd and 24th. and if there is a problem, i will be posting the situation here as well as any solutions.

with regards to what you should be seeing, feel free to do your own research and correct anything you think i may have done wrong. for me to post the contents of the file seems superfluous and unnecessary. if you got the file from my site as i suggested, you should be good to go.

best.

I downloaded your file and when I compared it to the pem file I already have on the server it is the same? Can you confirm the file you have available to downland "cert-mcj9hl.pem" is actually the new version.

[allmart]

I downloaded your file and when I compared it to the pem file I already have on the server it is the same? Can you confirm the file you have available to downland "cert-mcj9hl.pem" is actually the new version.

Hello,

Pardon my ignorance, but where does one install this certificate?

Thanks,

[carlwhat]

I downloaded your file and when I compared it to the pem file I already have on the server it is the same? Can you confirm the file you have available to downland "cert-mcj9hl.pem" is actually the new version.

we all make mistakes!

good catch. thank you.

the new file name is:

cert-3rlvqi.pem

for those of you who have already ordered and created an account, please just login and go to your downloads page.

you will see the new file there ready for download.

as indicated in the products description, here is how to change the file:

the certificates file contained here needs to replace the existing file in this location:

YOUR_STORE_ROOT/includes/modules/payment/authorizenet/authorizenet-sdk/lib/ssl/cert.pem

there is only 1 file that needs to be replaced.

when you download the file, you want to rename the file to cert.pem and upload it to the directory above using an FTP manager.

the file has been tested and has been in production for a few weeks now without problem.

apologies about the little extra work.

and thanks to marcopolo for the good catch!

[allmart]

we all make mistakes!

good catch. thank you.

the new file name is:

cert-3rlvqi.pem

for those of you who have already ordered and created an account, please just login and go to your downloads page.

you will see the new file there ready for download.

as indicated in the products description, here is how to change the file:

the certificates file contained here needs to replace the existing file in this location:

YOUR_STORE_ROOT/includes/modules/payment/authorizenet/authorizenet-sdk/lib/ssl/cert.pem

there is only 1 file that needs to be replaced.

when you download the file, you want to rename the file to cert.pem and upload it to the directory above using an FTP manager.

the file has been tested and has been in production for a few weeks now without problem.

apologies about the little extra work.

and thanks to marcopolo for the good catch!

Many thanks to all!!!

[swguy]

@carlwhat Are you sure you have updated your client sites with the new cert? It seems as though they were saying that the new cert wouldn't work until the cutover, so I thought we'd all have to scramble and do it at the last minute.

[carlwhat]

@carlwhat Are you sure you have updated your client sites with the new cert? It seems as though they were saying that the new cert wouldn't work until the cutover, so I thought we'd all have to scramble and do it at the last minute.

100% sure. without question.

best.