How I fixed my problems on a Centos Server.
First of, there IS NO SUPPORT. You are on your own.
If you get something working, be nice to your colleagues and Post it here.
I was sent chasing up a dozen blind alleys.
Authnet has made 2 changes:
- Security Hash Algorithm 2 (SHA-2) [using] EnTrust’s SHA-256, 2048-bit certificate
- Requiring root certificates from 3 different vendors
About the first problem
I was running on an 7-year old server with openssl 97.
When I tested the server the test showed that had SHA-2/SHA256/2048-bit configuration.
It still failed however.
I moved the program to a different server with openssl 1.01, and got something other than complete failure.
So there's at least a benchmark: Openssl 97 fails, openssl 101 works.
About the second problem.
Authnet advises "INSTALLING these new root certs"
After a lot of study, I realized I was too stupid to do this.
If you are using CURL/php, however, there IS a workaround that isn't too hard.
Download this zipfile from github.
https://github.com/AuthorizeNet/sdk-php/archive/master.zip
Unzip this file from the archive:
sdk-php-master\lib\ssl\cert.pem
This file contains all the required certs, assembled for you by Authnet. (good luck finding this out!)
Now I'm not sure about the proper form for a .pem file, so I edited it to look like the cert file used by fiefox.
Common Name: GeoTrust Global CA
-----BEGIN CERTIFICATE-----
blah blah
----END CERTIFICATE ----
I'm not sure the editing was required, but I did it and it worked, so I'm telling you.
Upload this file to your server.
Make your CURL look like
$myCurlElement=curl_init();
//other curl stuff
curl_setopt($myCurlElement, CURLOPT_CAINFO, "/Path/To/cert.pem");
After these changes, everything worked fine.
It only took me 20 hours of beating my head against a wall to figure this out.
These changes MIGHT have been better documented and explained. They Might.
They Might have given us some gd NOTICE, like an email with "THIS MEANS YOU" Stamped all over it.
FWIW, I use a cheap COMODO SSL cert (the $9 version from Namecheap) and it works fine after these changes. On the recommendation of Authnet's tech support I tried switching to an expensive $150 cert from Geotrust and it failed.
