topic Re: Intermittent DPM timeout - payment notification stopped at SSL negotiation in Integration and Testing

Intermittent DPM timeout - payment notification stopped at SSL negotiation

ragnarok77 — Tue, 29 Dec 2015 15:57:27 GMT

We received more than tens DPM timeouts on our production web site during the Christmas. And over the last months we've received probably 80 timeouts. In comparison, we got less than 5 timeouts in the first 11 months of year.

We did a tracing on our network. When the timeout occurred, we did receive a request from Authorize.net. However the request stopped at the SSL certificate negotiation step. We are using the DigiCert SHA2 Extended Validation Server CA. It seems some of Authorize.net's servers don't trust the certificate.

The same issue occurred about five years ago, when we first switched to DigiCert. We contacted the support multiple times but they didn't understand the issue. Eventually we posted a similar message on this forum and Authorize.net acknowledged it was the issue and fixed it.

Re: Intermittent DPM timeout - payment notification stopped at SSL negotiation

Lilith — Tue, 29 Dec 2015 16:53:53 GMT

I've escalated this issue and we'll confirm that we have the necessary certs installed on the servers used for DPM.

But to confirm--are you using https://secure.authorize.net/gateway/transact.dll, or are you using https://secure2.authorize.net/gateway/transact.dll?

The URLs have different setups for TLS negotiation, so it'd be helpful if we could narrow down which URL is giving you the intermittent issues.

Re: Intermittent DPM timeout - payment notification stopped at SSL negotiation

ragnarok77 — Tue, 29 Dec 2015 17:04:22 GMT

We are using https://secure.authorize.net/gateway/transact.dll

Re: Intermittent DPM timeout - payment notification stopped at SSL negotiation

Lilith — Tue, 29 Dec 2015 20:52:10 GMT

Thanks for confirming. I'll follow up once I hear a response on my ticket.

Re: Intermittent DPM timeout - payment notification stopped at SSL negotiation

Lilith — Wed, 30 Dec 2015 22:35:46 GMT

@ragnarok77 Could you confirm that the certificate you're referencing has this thumbprint, please?

DigiCert SHA2 Extended Validation Server CA Issuer: DigiCert High Assurance EV Root CA
Valid until: 22/Oct/2028
Serial #: 0C:79:A9:44:B0:8C:11:95:20:92:61:5F:E2:6B:1D:83
Thumbprint: 7E2F3A4F8FE8FA8A5730AECA029696637E986F3F

Re: Intermittent DPM timeout - payment notification stopped at SSL negotiation

ragnarok77 — Mon, 04 Jan 2016 19:10:47 GMT

Yes that's the certificate we are using.

Re: Intermittent DPM timeout - payment notification stopped at SSL negotiation

Lilith — Tue, 05 Jan 2016 15:47:35 GMT

Thanks, @ragnarok77 -- I've updated our internal ticket and will let you know as soon as I hear a further update.

Re: Intermittent DPM timeout - payment notification stopped at SSL negotiation

Lilith — Wed, 10 Feb 2016 23:04:54 GMT

@ragnarok77 We should be installing the certificate on our servers tonight. Let me know if you see improvement. Thanks.