IDEAL payment - Certificate out of date

[gandalf]

Hi,

When I try to upload the supplied certificate to IDEAL web site, it says " Check security: Valid until!"

I checked the certificate and it says it is valid until aug 2006.

Any ideas on the best way to create a new certificate and does this need to have an expiry date.

Thanks
andy

[paulm]

Hi Andy,

I don't know if it's the best way, but this thread contains an example on how to create certificates: http://www.zen-cart.nl/forums/index....10387#msg10387

It's in Dutch, but I think/hope it's not to difficult to understand.

does this need to have an expiry date

I am not sure, but I think it does. I do know you can make a cert that's valid for ten years, of course that might be less secure than creating a new cert every year or so.

[gandalf]

Thanks Paul,

Not sure if I missed something in the translation, this is what i tried.
Can you check.

Thanks

OpenSSL> genrsa -des3 -out merchantprivatekey.pem -passout pass:Test1 1024
Loading 'screen' into random state - done
Generating RSA private key, 1024 bit long modulus
........++++++
...++++++
e is 65537 (0x10001)

worked fine and have output file, merchantprivatekey.pem

Then

C:\Server\Apache2\bin>openssl
OpenSSL> req -x509 -config openssl.cnf -new -key merchantprivatekey.pem -passin pass:Test1 -days 365 -out merchantprivatecert.cer

error on line -1 of openssl.cnf
6112:error:02001002:system library:fopen:No such file or directory:.\crypto\bio\bss_file.c:122:fopen('openssl.cnf','rb')
6112:error:2006D080:BIO routines:BIO_new_file:no such file:.\crypto\bio\bss_file.c:125:6112:error:0E078072:configuration file routinesEF_LOAD:no such file:.\crypto\conf\conf_def.c:197:error in req
OpenSSL>

[paulm]

I vaguely remember I had to copy the openssl.cnf file from one location to another one time (or add it's path in req -x509 -config openssl.cnf -new -key merchantprivatekey.pem -passin pass:Test1 -days 365 -out merchantprivatecert.cer).

Do you know what the current path to your openssl.cnf file is?

[gandalf]

Hi Paul,

Your memories were enough, found cnf file and used full path name in command, works fine.

Thanks
Andy

[gandalf]

Well that was a bit premature.

IDeal accpeted the certificate, but i still get.....

iDealBetaal veilig en snel via het betaalvenster van uw eigen bank.
Kies uw bank...Could not get banks. Error: Invalid electronic signature (SE2700)

Any ideas.......

Thanks
Andy

[gandalf]

.....got it....must have been the details i used when creating the cert......I have Banks listed.......whooooo....

Regards
Andy

[paulm]

Glad to hear it works after all