Cybersource SSL Certificate Upgrade Announcement

[ozEworks]

Cybersource sent out this email

 

CyberSource's SSL certification authority (CA), Entrust, is mandating the use of new, higher strength SSL certificates. To this end, CyberSource will update its production systems with these new certificates on Monday, February 22nd, 2010. If you connect to CyberSource using an API whose connection is secured by SSL then you will need to trust these new SSL certificates. The impacted connection methods are below:

 

Simple Order API (SOAPI)

SOAP Toolkit API

Batch Upload API

Report Download API

Merchant Registration API

 

After February 22nd, these connection methods will no longer work in production if the new SSL certificates are not trusted in your environment.

 

If you are using an API coded for the Java programming language, please visit the following URL for instructions on how to update your certificates: http://www.cybersource.com/support/sslcert/

 

If you are using a different programming language then please find the 3 necessary certificates here:

 

Root: https://www.entrust.net/downloads/binary/entrust_ssl_ca.cer

First intermediate: https://www.entrust.net/downloads/binary/entrust_l1e_chain_root.cer

Second intermediate: https://www.entrust.net/downloads/binary/entrust_l1e.cer

 

Save all three to your local environment and update any keystores used by applications that connect to CyberSource.

 

If you use Windows and do not already have these certificates installed you can import them manually into a machine's default keystore using these steps:

 

Double click the .cer file > Install Certificate (button) > Next (button) > Next (button) > Finish (button)

 

Thank you,

CyberSource Customer Support

 

 

 

Does anyone know what they are telling people to do?