且构网

分享程序员开发的那些事...
且构网 - 分享程序员编程开发的那些事

authorize.net 怎么会使用由不在众所周知的 curl.haxx.se/ca/cacert.pem 列表中的 CA 签名的证书?

更新时间:2022-02-28 22:03:55

更新:这不再是必要的,因为 Authorize.net 已更新其生产服务器的证书.

您可能会发现它突然停止工作,因为 Ubuntu ca-certificates 软件包在最近的更新中放弃了对它们的支持:

You may have found this to stop working all of a sudden because the Ubuntu ca-certificates package just dropped support for them in the most recent update:

http://changelogs.ubuntu.com/changelogs/pool/main/c/ca-certificates/ca-certificates_20141019ubuntu0.12.04.1/changelog

http://changelogs.ubuntu.com/changelogs/pool/main/c/ca-certificates/ca-certificates_20141019ubuntu0.14.04.1/changelog

前几天我和我的同事在一个客户身上遇到了这个问题——他们的捐款突然停止了.

My coworkers and I encountered this with a client just the other day--their donations suddenly stopped working.

真正的解决方案是 Authorize.net 需要更新他们的证书.但是,与此同时,您可以只添加一个缺少的证书.我在此处汇总了有关如何在 Ubuntu 中执行此操作的说明:

The real solution is that Authorize.net needs to update their certificate. However, in the meantime, you can just add the one missing certificate. I put together notes on how to do this in Ubuntu here:

https://aghstrategies.com/content/SSL3_GET_SERVER_CERTIFICATE

我还在 https 上保存了一个根证书(尽管它可能不安全)://github.com/agh1/ca-certificate-for-authorize.net

同样,我希望这只是一个短期解决方案,直到他们获得新证书,但这将是一个很好的权宜之计.

Again, my hope is that this only needs to be a short-term solution until they get a new certificate, but this will be a good stop-gap.