topic Re: Intermittent SSL errors with AIM in Integration and Testing

Intermittent SSL errors with AIM

danielfarrell — Mon, 06 Aug 2012 17:28:23 GMT

Friday evening we started getting intermittent SSL errors when connecting to the API servers. We use the active merchant library(http://activemerchant.org/) from ruby in two different apps and those both had the same issue. About 1/11 connections that were attempted threw this error:

SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed

This was consistent between both applications, and neither got any updates related to this on Friday. What I've seen online is that people who previously got this error got it because some of the servers were not sending along the intermediate certificate. That would be consistent with what I am seeing. When I tested with ssl_strict=false this morning the errors stopped, but that is not a solution I want to depend on.

Any thoughts?

Re: Intermittent SSL errors with AIM

tdavis1198 — Mon, 06 Aug 2012 17:38:31 GMT

We have exact same issue. The failure frequency seems to be increasing. We called authorize but they say there is no problem but there clearly is

Re: Intermittent SSL errors with AIM

standev — Mon, 06 Aug 2012 17:49:30 GMT

We are also experiencing the same intermittent problems since Aug 3. We are also accessing AIM using the ActiveMerchant plugin. We are running ruby version 1.9.3p125.

Same exception message:

SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed

This is critical as 20% of our transactions are failing. This seems to be related to misconfigured SSL certificates on the secure.authorize.net servers (and not related to AIM requests specifically).

Re: Intermittent SSL errors with AIM

jholton — Mon, 06 Aug 2012 18:31:57 GMT

Same problem for us. Happens approximately 20% of the time.

It started around 6 PM EDT on Aug 3.

OpenSSL::SSL::SSLError: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed

Re: Intermittent SSL errors with AIM

RichardH — Mon, 06 Aug 2012 18:57:19 GMT

To help us further troubleshoot this issue, could you identify your Certificate Authority (CA)?

Re: Intermittent SSL errors with AIM

danielfarrell — Mon, 06 Aug 2012 19:19:36 GMT

It's your CA that is in question here, not ours. That error happens when the software tries to make an SSL connection to your server to process a transaction. It does not have anything to do with our SSL/CA stuff.

Re: Intermittent SSL errors with AIM

standev — Mon, 06 Aug 2012 19:29:00 GMT

Yes, I believe it has to do with the SSL certificate(s) on https://secure.authorize.net/gateway/transact.dll, which is where the AIM API calls are being made to. These are server side calls from our software to your servers; it has nothing to do with our SSL/CA on our own web servers.

Re: Intermittent SSL errors with AIM

mattw922 — Mon, 06 Aug 2012 19:56:12 GMT

Same issue here. We have seen this error 241 times in the last 4 days.

Re: Intermittent SSL errors with AIM

mattw922 — Mon, 06 Aug 2012 20:37:58 GMT

Just confirmed with a former employee of ours that this exact issue happened a little over a year ago, and the problem was that Authorize added a new server with a bad SSL cert.

Re: Intermittent SSL errors with AIM

tdavis1198 — Mon, 06 Aug 2012 21:05:21 GMT

I think we all realized that this was the issue a few days ago. Now just waiting for the light bulb to go on at authorize

Re: Intermittent SSL errors with AIM

RichardH — Mon, 06 Aug 2012 21:31:26 GMT

A change was recently implemented that should correct this problem. Please confirm that you you are no longer seeing an error on your sites.

Re: Intermittent SSL errors with AIM

mattw922 — Mon, 06 Aug 2012 22:51:42 GMT

Haven't seen the problem since about noon pacific time. Will keep watching. Thanks.

Re: Intermittent SSL errors with AIM

standev — Tue, 07 Aug 2012 00:34:17 GMT

Last exception seen was at 1:30pm EDT today. Everything seems to be working correctly now. Thank you.

Re: Intermittent SSL errors with AIM

subimage — Thu, 26 Mar 2015 04:43:58 GMT

This seems to be happening again. Timeline for a fix?

Re: Intermittent SSL errors with AIM

selva — Tue, 07 Apr 2015 06:24:46 GMT

Yes this problem seems to be happening again