[2015] Help with updates as requested by Authorized.net

[carlwhat]

Thank you for this info, but question was about current situations for those who for some reason did not update and how may have issue with authorize.net update.

my understanding is that you do NOT need to do anything with regards to this update from authorize.net.

in addition, as you are right up against the deadline, i would suggest to not do anything and see if you can still process credit cards in the next couple of days. if you then have problems you can troubleshoot those problems, as they would almost definitely be related to authorize.net. if you were to change something now, and then have problems, without doing some digging, it might be more difficult to tell if your problems were related to the change you made versus the change from authorize.net.

hope that helps.

[kobra]

After authorize.net deadline for SHA-2 we will think to move/update our shopping cart to latest more reliable

You are using a version that support was stopped 3yesrs ago
The authorize.net file has changed in every release since 1.3.9x

1.5.0 - 19511 2011-09-14 18:45:01Z
1.5.1 - Tue Aug 28 16:48:39 2012 -0400 Modified in v1.5.1
1.5.3 - Tue Jun 3 2014 -0500 Modified in v1.5.3
1.5.4 - Tue Sep 9 2014 -0500 Modified in v1.5.4

Unfortunately, one can not just use a later file in an older version with any confidence

The fact that it has been stated that one needs to do nothing could be version dependent and as support for your version ceased 3 years ago it might not be being addressed
Might take the next couple of days to upgrade
https://www.zen-cart.com/entry.php?3...d-of-upgrading
https://www.zen-cart.com/content.php...-zen-cart-site

[DrByte]

hello all.

does this mean that to comply with email from authorize.net about changes "...As part of our continuous upgrades to enhance system performance and security, on September 21, 2015, we are upgrading api.authorize.net to new security certificates, which are signed using Security Hash Algorithm 2 (SHA-2) and 2048-bit signatures..."
No changes needed except Optional fix as in our post: https://www.zen-cart.com/showthread....ge-Summer-2015
Sorry for repeated questions, but what maybe obvious for you not so easy for many ;-).
We have more then one zen-cart 1.39 and authorize.net our payment option if something will not work all sites will not be able to process payment.

Thank you for help and understanding.

No changes are required to Zen Cart in relation to any SHA-256 industry changes.

BUT you and your hosting company ought to ensure your SERVER is ready. I posted some guidance on how to prepare the server, here: https://www.zen-cart.com/showthread....icates-in-2015 (most of that applies regardless of whether you're using PayPal at all or not)

[mprough]

I have a 1.5.5 cart that authorize.net said they needed to update their endpoints. They sent this (https://support.authorize.net/s/arti...ork-Change-FAQ).

~Melanie

[DrByte]

I have a 1.5.5 cart that authorize.net said they needed to update their endpoints. They sent this (https://support.authorize.net/s/arti...ork-Change-FAQ).

~Melanie

Quoting from that article, you can see that the transact.dll URL that ZC's AIM/SIM modules use is NOT changing. No action required.

The API endpoints not on Akamai will not be changing or impact and will continue to function as they do today.

• 
  
  • Needed Action: No actions or changes.

• 
  
  • Production API Urls:
    
    • https://api.authorize.net/xml/v1/request.api
    • https://api.authorize.net/soap/v1/Service.asmx
    • https://secure.authorize.net/gateway/transact.dll

[mprough]

Quoting from that article, you can see that the transact.dll URL that ZC's AIM/SIM modules use is NOT changing. No action required.

I feel you, but Authorize.net reached out to the merchant and told him to update his endpoints.