Authorize.net Infrastructure and SHA-2 Certificate Upgrades

Authorize.net is a popular credit card processor often found in ecommerce programs such as OpenCart, PrestaShop. osCommerce, ZenCart, and many others. Authorize.net recently announced that they have started infrastructure and certificate upgrades that can impact your ecommerce/online business transactions. In order to help development parties using Authorize.net to prepare for the upgrade, the Authorize.net Sandbox (testing servers) environment has been upgraded with the intended changes. The changes to the Sandbox account allow users to test their current installation to see if an update is required. The following list explains the requirements needed for modules using Authorize.net:

• Certificate store must includes certificates for Root 2 - GeoTrust Global CA
• Security transport— the part that negotiates TLS— must support SHA-256
• Firewall is not set to whitelist Authorize.Net IP addresses for outbound connections
• Plugin/Extension/Module should not connect directly to Authorize.Net using an IP address

Certificates purchased through Web Hosting Hub meet three of the requirements. The fourth requirement is a parameter specified within configuration used by the plugin/extension/module making the connection to Authorize.net. Web Hosting Hub is not responsible for the configuration of the application/module/plugin/extension used to connect to Authorize.net. Please test your current installation with the Sandbox site that Authorize.net has provided. If you find that your installation does NOT work with in the Sandbox environment, then you must contact the module/plugin/extension developer for an update.

Remember that the update has ONLY been applied to the Sandbox environment. Authorize.net has not announced when the update will apply to their production environment. Transactions using SHA-1 certificates will still be processed until the update has been applied to the production environment.

For more information on using or creating a Sandbox account, please see Authorize.net - Sandbox Account page.

To see the official Authorize.net announcement, please go to Authorize.net begins infrastructure and SHA-2 Certificate Upgrades