topic Re: TSL 1.2 compatibility question with transact.dll in Integration and Testing

TSL 1.2 compatibility question with transact.dll

wesg92 — Tue, 05 Dec 2017 02:46:50 GMT

Hello,

An ecommerce website I manage is currently using classic ASP and posting to https://secure.authorize.net/gateway/transact.dll for our transactions. Is this compatible with TSL 1.2, or will I need to make changes? If so, what changes must be made?

I've contacted Authorize.net, but they directed me to post here.

Thanks,

Wes

Re: TSL 1.2 compatibility question with transact.dll

bhav — Tue, 05 Dec 2017 21:41:58 GMT

@wesg92 Yes, Transact endpoint https://secure.authorize.net/gateway/transact.dll supports TLS12. Make sure to set the SecurityProtocol to TLS 1.2 before sending the request.

Here is the Eg:

ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls12;

Please let us know if you are facing any issue.

-Bhavana

Re: TSL 1.2 compatibility question with transact.dll

wesg92 — Wed, 06 Dec 2017 03:43:38 GMT

Gotcha, not quite sure where that fits.

Here is my code:

Const SXH_OPTION_IGNORE_SERVER_SSL_CERT_ERROR_FLAGS = 2

Const SXH_SERVER_CERT_IGNORE_ALL_SERVER_ERRORS = 13056

Set xml = Server.CreateObject("MSXML2.ServerXMLHTTP")

xml.setOption SXH_OPTION_IGNORE_SERVER_SSL_CERT_ERROR_FLAGS, SXH_SERVER_CERT_IGNORE_ALL_SERVER_ERRORS

xml.open "POST", "https://secure.authorize.net/gateway/transact.dll", false

xml.send vPostData

strStatus = xml.Status

strRetval = xml.responseText

Set xml = nothing

Thanks,

Wes

Re: TSL 1.2 compatibility question with transact.dll

RichardH — Wed, 06 Dec 2017 04:26:36 GMT

Hello @wesg92

Our sandbox is configured to only support a TLS 1.2 connection for testing a connection.

You should also review our API best practices. Depending on your platform, tools and services, you may need to upgrade some of all of your systems to support TLS 1.2.

Richard

Re: TSL 1.2 compatibility question with transact.dll

wesg92 — Thu, 07 Dec 2017 01:38:40 GMT

I don't see anything in there detailing what code changes, if any, that I need to make. It's vague and nothing references classic ASP.

Re: TSL 1.2 compatibility question with transact.dll

wesg92 — Tue, 19 Dec 2017 00:58:31 GMT

Any other thoughts or help? I'm really not sure how best to proceed here. Thank you.

Re: TSL 1.2 compatibility question with transact.dll

RichardH — Tue, 19 Dec 2017 19:46:58 GMT

@wesg92

The information at the link below may be helpful.

https://stackoverflow.com/questions/33761919/tls-1-2-in-net-framework-4-0

Richard

Re: TSL 1.2 compatibility question with transact.dll

wesg92 — Wed, 20 Dec 2017 01:39:35 GMT

@RichardH

Thanks, but that looks to be referencing ASP.NET, and I'm using classic ASP.

Re: TSL 1.2 compatibility question with transact.dll

NexusSoftware — Wed, 20 Dec 2017 03:20:33 GMT

Set httpRequest = Server.CreateObject("MSXML2.ServerXMLHTTP.6.0")

Re: TSL 1.2 compatibility question with transact.dll

wesg92 — Thu, 28 Dec 2017 20:12:55 GMT

"Set httpRequest = Server.CreateObject("MSXML2.ServerXMLHTTP.6.0")"

Thank you. I saw this in another thread as well. Assming that is the only change that is needed?

Re: TSL 1.2 compatibility question with transact.dll

NexusSoftware — Thu, 28 Dec 2017 20:18:51 GMT

In your particular case, of course the change would be:

Set xml = Server.CreateObject("MSXML2.ServerXMLHTTP.6.0")"

If your server's Schannel and registry setttings are for TLS1.2, then with the modification above, you should be good to go.

Re: TSL 1.2 compatibility question with transact.dll

wesg92 — Thu, 04 Jan 2018 02:27:10 GMT

Of course, thanks!

Re: TSL 1.2 compatibility question with transact.dll

wesg92 — Wed, 10 Jan 2018 02:09:17 GMT

Another question.

How can I test TLS 1.2? Can I just post to https://test.authorize.net/gateway/transact.dll with the updated object creation code?

Thanks,

Wes

Re: TSL 1.2 compatibility question with transact.dll

RichardH — Wed, 10 Jan 2018 03:10:27 GMT

@wesg92 wrote:

Another question.

How can I test TLS 1.2? Can I just post to https://test.authorize.net/gateway/transact.dll with the updated object creation code?

Thanks,

Wes

Yes! The sandbox endpoint only supports a TLS 1.2 connection, so if you're able to connect at the URL above, you should be good.

Richard

Re: TSL 1.2 compatibility question with transact.dll

tbowenwso — Thu, 01 Mar 2018 03:20:31 GMT

I am trying to update my code for TLS 1.2 support. But I'm getting an error:

The system cannot locate the resource specified.

on my "Send" command. Specifically, the code is:

   Set xml = Server.CreateObject ("MSXML2.XMLHTTP.6.0")
   xml.open "POST", "https://secure.authorize.net/gateway/transact.dll?" & vPostData & "", false
   xml.send ""

This code has always worked until today. Instead I get the above error if I set the code to fail on errors. If I set it to resume, I just get an empty response string.

I've teid other Server Objects, including "MSXML2.ServerXMLHTTP.6.0", "WinHttp.WinHttpRequest.5.1", "Microsoft.XMLHTTP", and "MSXML2.ServerXMLHTTP" (although some of those give me a different error: An error occurred in the secure channel support).

I have verified through http://ssl-checker.online-domain-tools.com/ that my server is supporting TLS 1.2, and that 1.1 and 1.0 are disabled.

My code was working fine until today, when Authorize.net stopped supporting 1.1 and 1.0. It hasn't changed since. I'm out of things to try here. Any idea of what the "system cannot locate the resource specified" error points me to?

Please, any help is GREATLY appreciated. My store has been down all day.

Thanks,

Tom

Re: TSL 1.2 compatibility question with transact.dll

bsgrewal — Tue, 06 Mar 2018 11:00:06 GMT

i am also facing same problem with Classic ASP.

Please HELP

Thanks

Re: TSL 1.2 compatibility question with transact.dll

bsgrewal — Thu, 08 Mar 2018 10:51:38 GMT

Any luck??

ARB subscription no deduction on create

RaziaSale — Thu, 12 Jul 2018 06:28:44 GMT

I have imlemented ARB for suscription. Its walys gives success message but transaction status N/A. I have put start date which is current date and it not deducting money in production. Please help me.