Getting error from First Data via Payeezy about SSL certificate failed

[tonyreynolds]

I am getting a failure to process credit card transactions through payeezy. The error is

Aug-03-2018 10:33:14 payeezyjszc 0.95
=====================================

Comm results: 60 SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed


My SSL seems to be in good order and working. The error was sporadic, but now seems to be consistent. Might have started on 8/1.

The site is https://www.obiecue.com

Any suggestions?

Tony

[DrByte]

That "60" error typically means your hosting company's server isn't properly set up for modern TLS/SSL for outbound communications (ie: via CURL)
Get your hosting company involved.

[tonyreynolds]

That "60" error typically means your hosting company's server isn't properly set up for modern TLS/SSL for outbound communications (ie: via CURL)
Get your hosting company involved.

That is the problem. Thanks for your response.

Tony

[tonyreynolds]

That "60" error typically means your hosting company's server isn't properly set up for modern TLS/SSL for outbound communications (ie: via CURL)
Get your hosting company involved.

I still having on ongoing issue with this problem and I can't seem to get it corrected. When I run and SSL check against the domain
at:

https://www.ssllabs.com/ssltest/anal...?d=obiecue.com

It appears to indicate everything is working properly. Any ideas or suggestions?

The domain is Obiecue.com

and the error I am getting is:

Aug-09-2018 06:22:00 payeezyjszc 0.95
=====================================

Comm results: 60 SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed



Tony

[tonyreynolds]

That "60" error typically means your hosting company's server isn't properly set up for modern TLS/SSL for outbound communications (ie: via CURL)
Get your hosting company involved.

I still having on ongoing issue with this problem and I can't seem to get it corrected. When I run and SSL check against the domain
at:

https://www.ssllabs.com/ssltest/anal...?d=obiecue.com

It appears to indicate everything is working properly. Any ideas or suggestions?

The domain is Obiecue.com

and the error I am getting is:

Aug-09-2018 06:22:00 payeezyjszc 0.95
=====================================

Comm results: 60 SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed



Tony

Does anyone think this solution would help?

https://www.zen-cart.com/showthread....er-certificate


Tony

[mc12345678]

Does anyone think this solution would help?

https://www.zen-cart.com/showthread....er-certificate

Tony

From what is provided at that link, it appears that it would/may help. As has I think been said/referenced, the issue appears to be between your server and other servers... I note that you have a SSL certificate that customers would see exists by visiting your site with https:, but your site is not configured to use that certificate at this time. Again, that "https:" certificate is different than the issue being reported, just something along similar lines.

[tonyreynolds]

From what is provided at that link, it appears that it would/may help. As has I think been said/referenced, the issue appears to be between your server and other servers... I note that you have a SSL certificate that customers would see exists by visiting your site with https:, but your site is not configured to use that certificate at this time. Again, that "https:" certificate is different than the issue being reported, just something along similar lines.

an you elaborate on what you mean in regards to that the site is not configured to use the ssl certificate at this time?

Thanks

Tony

[mc12345678]

an you elaborate on what you mean in regards to that the site is not configured to use the ssl certificate at this time?

Thanks

Tony

Well, one way I typically test a site to see if https: is enabled is to attempt to go to the contact_us page... Newer templates/ZC versions attempt to load that page with https: if it is enabled... Your site did not do that, so I "dropped" looking further. I see that if I go to the login page that https: is in fact used. So, it *does* appear that ENABLE_SSL is set to true in your includes/configure.php, but either your template or your install is still using older code.

[tonyreynolds]

Just a quick followup on the contact us page, how should it be configured to go https. This site has been around a while and upgraded multiple times and I would like the contact us page to reflect a secure information exchange. Any more suggestions to close out this thread?

Tony

[mc12345678]

Just a quick followup on the contact us page, how should it be configured to go https. This site has been around a while and upgraded multiple times and I would like the contact us page to reflect a secure information exchange. Any more suggestions to close out this thread?

Tony

While there are multiple other locations to look so that clicking on a contact us link will first attempt to connect via https:, the main "catch" of this is found in comparison of your existing version of the following file with that from a default/vanilla version of Zen Cart:
includes/modules/pages/contact_us/header_php.php

There are even some "improvements" implemented on more recent versions that likely would still work on your older 1.5.4 site.