TSL 1.2 compatibility question with transact.dll

[wesg92]

Hello,

An ecommerce website I manage is currently using classic ASP and posting to https://secure.authorize.net/gateway/transact.dll for our transactions. Is this compatible with TSL 1.2, or will I need to make changes?  If so, what changes must be made?

I've contacted Authorize.net, but they directed me to post here.

Thanks,

Wes

[bhav]

@wesg92  Yes, Transact endpoint https://secure.authorize.net/gateway/transact.dll supports TLS12. Make sure to set the SecurityProtocol to TLS 1.2 before sending the request.

Here is the Eg:

ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls12;

Please let us know if you are facing any issue.

-Bhavana

[wesg92]

Gotcha, not quite sure where that fits.

Here is my code:

Const SXH_OPTION_IGNORE_SERVER_SSL_CERT_ERROR_FLAGS = 2

Const SXH_SERVER_CERT_IGNORE_ALL_SERVER_ERRORS = 13056

Set xml = Server.CreateObject("MSXML2.ServerXMLHTTP")

xml.setOption SXH_OPTION_IGNORE_SERVER_SSL_CERT_ERROR_FLAGS, SXH_SERVER_CERT_IGNORE_ALL_SERVER_ERRORS

xml.open "POST", "https://secure.authorize.net/gateway/transact.dll", false

xml.send vPostData

strStatus = xml.Status

strRetval = xml.responseText

Set xml = nothing

Thanks,

Wes

[RichardH]

Hello @wesg92

Our sandbox is configured to only support a TLS 1.2 connection for testing a connection.

You should also review our API best practices.  Depending on your platform, tools and services,  you may need to upgrade some of all of your systems to support TLS 1.2.

Richard

[wesg92]

I don't see anything in there detailing what code changes, if any, that I need to make.  It's vague and nothing references classic ASP.

[wesg92]

Any other thoughts or help?  I'm really not sure how best to proceed here.  Thank you.

[RichardH]

@wesg92

The information at the link below may be helpful.

https://stackoverflow.com/questions/33761919/tls-1-2-in-net-framework-4-0

Richard

[wesg92]

@RichardH

Thanks, but that looks to be referencing ASP.NET, and I'm using classic ASP.

[NexusSoftware]

Set httpRequest = Server.CreateObject("MSXML2.ServerXMLHTTP.6.0")

[wesg92]

"Set httpRequest = Server.CreateObject("MSXML2.ServerXMLHTTP.6.0")"

Thank you.  I saw this in another thread as well.  Assming that is the only change that is needed?