且构网

分享程序员开发的那些事...
且构网 - 分享程序员编程开发的那些事

authorize.net如何使用与不在众所周知的curl.haxx.se/ca/cacert.pem列表中的CA签名的证书?

更新时间:2022-05-27 22:22:23

更新:由于

Update: this should no longer be necessary because Authorize.net has updated its production servers' certificates.

您可能已经发现它突然停止工作,因为Ubuntu ca-certificates软件包在最近的更新中刚刚放弃了对它们的支持:

You may have found this to stop working all of a sudden because the Ubuntu ca-certificates package just dropped support for them in the most recent update:

http://changelogs.ubuntu.com/changelogs/pool/main/c/ca-certificates/ca-certificates_20141019ubuntu0.12.04.1/changelog

http://changelogs.ubuntu.com/changelogs/pool/main/c/ca-certificates/ca-certificates_20141019ubuntu0.14.04.1/changelog

前几天,我和我的同事在与客户的交流中遇到了麻烦-他们的捐款突然停止了工作.

My coworkers and I encountered this with a client just the other day--their donations suddenly stopped working.

真正的解决方案是Authorize.net需要更新其证书.但是,与此同时,您可以仅添加一个缺少的证书.我在此处整理了有关如何在Ubuntu中执行此操作的注释:

The real solution is that Authorize.net needs to update their certificate. However, in the meantime, you can just add the one missing certificate. I put together notes on how to do this in Ubuntu here:

https://aghstrategies.com/content/SSL3_GET_SERVER_CERTIFICATE

我还在 https上保存了一个根证书(尽管可能不安全). ://github.com/agh1/ca-certificate-for-authorize.net

再次,我希望这只是一个短期解决方案,直到他们获得新证书为止,但这将是一个很好的权宜之计.

Again, my hope is that this only needs to be a short-term solution until they get a new certificate, but this will be a good stop-gap.