topic Re: SSL Migration, PHP + CURL Tests Fail with Error in Integration and Testing

SSL Migration, PHP + CURL Tests Fail with Error

aksuska — Wed, 23 Oct 2024 21:51:17 GMT

I am trying to test peer verification against the new certificate but it always fails with "SSL certificate problem: self signed certificate in certificate chain". This usually means that the CA file is invalid, but I am using the recommended cert: "DigiCert Global Root G2". Here are the calls:

$curl_request = curl_init($post_url);

curl_setopt($curl_request, CURLOPT_POSTFIELDS, json_encode($request));

curl_setopt($curl_request, CURLOPT_HEADER, 0);

curl_setopt($curl_request, CURLOPT_TIMEOUT, 45);

curl_setopt($curl_request, CURLOPT_RETURNTRANSFER, 1);

curl_setopt($curl_request, CURLOPT_SSL_VERIFYHOST, 2);

curl_setopt($curl_request, CURLOPT_CAINFO, getcwd() . '/auth_net_cert.pem');

curl_setopt($curl_request, CURLOPT_HTTPHEADER, Array("Content-Type: application/json"));

try

{

$jsonResponse = curl_exec($curl_request);

}

Re: SSL Migration, PHP + CURL Tests Fail with Error

aksuska — Thu, 24 Oct 2024 22:13:37 GMT

I was able to solve this by not specifying the CA file at:

curl_setopt($curl_request, CURLOPT_CAINFO, getcwd() . '/auth_net_cert.pem');

And instead relying on the OS having the appropriate CA chain installed. This issue is that the DigiCert chain includes a self signed certificate, which cannot be used in this manner. Self-signed certificates have to be manually added to the trust store used by the OS or SSL implementation because they are implicitly untrusted.

Re: SSL Migration, PHP + CURL Tests Fail with Error

dipespat — Thu, 21 Nov 2024 06:22:28 GMT

Hello aksuska,

As per below article the cert migration is yet to release: https://support.authorize.net/knowledgebase/Knowledgearticle/?code=KA-05545