Authorize.net new SHA-2 encryption.

[SAV_Isaac]

Hi,

 

Authrize.net has upgraded their security to SHA-2 Wednesday night and since then we have not been able to process credit cards through our website shopping cart.

We use Oscommerce 2.2-MS2. And Authorize.net AIM module to process payments.

 

We've talked ot A.net and to our host Godaddy, upgraded our SSL and so far nothing has worked.

 

How do we get this setup so it will work with our website?

 

Thanks!

See below Bulletin: Important: Security Certificate Upgrades on May 26th

Authorize.Net is upgrading our infrastructure to enhance system performance and security. On May 26, 2015, we are upgrading to new security certificates, which are signed using Security Hash Algorithm 2 (SHA-2) and 2048-bit signatures. Most modern operating systems and web servers support certificates that use SHA-2, however, there is a concern that older software—especially software based on outdated versions of Java—may not.

Please contact your web developer or solution provider as soon as possible to find out if your website or payment solution will support the new security certificates.

If any updates are necessary, please refer your web developer to this blog post in our Developer Community, which has all of the certificate information they will need for this update. Our sandbox environment has already been updated so that your developer can validate that your solution will continue to work using SHA-2 signed certificates, prior to May 26th.

After the update is complete on May 26th, any website or payment solution that cannot validate SHA-2 signed certificates will fail to connect to Authorize.Net's servers.

[burt]

You are on an ancient version of osCommerce which does not help matters...

 

More reading (2.3, but some of it might be suitable for your 2.2):

http://library.oscommerce.com/Package&en&authorizenet

 

Try updating your auth.net modules from this addon:

http://addons.oscommerce.com/info/5662