QuickBooks Merchant Service

[Del]

Del - You don't really give enough data. Lots of things *could* be the issue.

1. Desktop is what you signed up for at Intuit right?
2. You got a production (not testing) setup at Intuit right?

Also, you ask about ssl cert. You DO have correct and signed ssl for your domain right? If the cert for your domain in the shop does not match - there will be verification errors. I'm suspecting SSL issue for you...

I do have desktop at Intuit, and it is setup as production.
I did not know if with desktop if I would need to have a ssl cert for my domain. I do not have one, will get one next week and see if that fixes my problem.
In reading the instruction, I had a question as to if you needed to have a ssl cert if it was from the desktop and not the server. I guess that answer is that you need a ssl cert.

Thanks for the quick reply

Del

[cptok]

Were you thinking of not using SSL to capture CC information? That would not be a good thing at all. You do not need to exchange keys with Intuit for "Desktop", but you do need a correct cert for your domain. Not sure what you were intending - as in self-signed? Or mis-matched?

Get a signed cert for you domain and I think you'll be fine. And it will be a proper setup for accepting credit cards.

[Del]

I am still getting the following message when trying to process a cc payment.

“An error has occurred within our system while trying to process your credit card. Please try this transaction again. If the problem persists, please email [email protected] to place your order."

At Intuit I have signup for Desktop & for production
I have a ssl cert and it does show a lock on the page.

The Payment Module had the following values:
Credit Card Transactions via Quickbook Merchant Services
Enable Quickbooks Merchant Service Module
True
Hosted or Desktop
Desktop

App ID
183494931

Application Login
qbms.delsand.com

Connection Ticket
TGT-134-yI7l4O1wMQlLPYhRml5ZEg

SSL Certificate
/path/to/intuit.perm

Testing
False

Verify Credit Card with CVV2
True

Sort order of display.
5

Payment Zone
--none--

Set Order Status
Processing [2]

IP Address

My configure.php for admin has the following settings

define('HTTP_SERVER', 'http://delsand.com');
define('HTTPS_SERVER', 'https://delsand.com');
define('HTTP_CATALOG_SERVER', 'http://www.delsand.com');
define('HTTPS_CATALOG_SERVER', 'https://www.delsand.com');

// Use secure webserver for catalog module and/or admin areas?
define('ENABLE_SSL_CATALOG', 'true');
define('ENABLE_SSL_ADMIN', 'true');

The configure.php in the root has the following settings// Define the webserver and path parameters

// HTTP_SERVER is your Main webserver: eg-http://www.your_domain.com
// HTTPS_SERVER is your Secure webserver: eg-https://www.your_domain.com
define('HTTP_SERVER', 'http://www.delsand.com');
define('HTTPS_SERVER', 'https://www.delsand.com');

// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'true');

Is there a way to capture the error code that generates the error message?

[cptok]

First of all - you should remove the connection ticket and other personal login information from your post. Not good at all to publish that info.

Second - for desktop, you should not have a pem file listed in "SSL Certificate" for QBMS settings. That is for hosted only.

Finally - in your QBMS account, did you verify that you have enabled the "Web Store" button? That is critical or you will get errors. Please check/verify that setting.

[Del]

First of all - you should remove the connection ticket and other personal login information from your post. Not good at all to publish that info.

Second - for desktop, you should not have a pem file listed in "SSL Certificate" for QBMS settings. That is for hosted only.

Finally - in your QBMS account, did you verify that you have enabled the "Web Store" button? That is critical or you will get errors. Please check/verify that setting.

I took out the file name on the SSL Certificate.

I check again to be sure that I have Web Store button selected.

Can you think of anything else?

[Del]

More Information, I am on

Server OS: Windows NT ASPEN 5.2 build 3790

I just check with my server PHP Version 5.2.12

I have the following cURL information:
cURL Information libcurl/7.19.6 OpenSSL/0.9.8g zlib/1.2.3

Some where in the posts I think that I read it should be
curl and not libcurl
Could this be the problem?

[Del]

Got it working

The problem was in the curl call when the web server OS is windows

Default line from qbms.php:

curl_setopt($clientURL, CURLOPT_SSL_VERIFYPEER, 1);

Found a sample that stated this should not be so:
http://forums.oscommerce.com/topic/9...l-test-script/

Fixed line from qbms.php:
curl_setopt($clientURL, CURLOPT_SSL_VERIFYPEER, 0);

Thank you for your help and for this Forum

[cptok]

This is a very dangerous change. It has come up before in this thread and I DO NOT recommend anyone doing this. The reason that works is because you're stopping SSL cert validation (hence my original suggestion that you had SSL issue). To turn off that verification is a "hack" to make an incorrect SSL cert work anyway, and I do not recommend security eliminating hacks when dealing with credit card data. Do this entirely at your own risk - and accepting all potential consequences - but please do not recommend this as a solution to the QBMS crowd.

You are right however - this appears to be a Windows thing - so proper "fix" for this is to also use CURLOPT_CAINFO to provide validation info to curl.

[Del]

This is a very dangerous change. It has come up before in this thread and I DO NOT recommend anyone doing this. The reason that works is because you're stopping SSL cert validation (hence my original suggestion that you had SSL issue). To turn off that verification is a "hack" to make an incorrect SSL cert work anyway, and I do not recommend security eliminating hacks when dealing with credit card data. Do this entirely at your own risk - and accepting all potential consequences - but please do not recommend this as a solution to the QBMS crowd.

You are right however - this appears to be a Windows thing - so proper "fix" for this is to also use CURLOPT_CAINFO to provide validation info to curl.

Thanks for the suggestion of the proper fix.

The code change that was made
From:
curl_setopt($clientURL, CURLOPT_SSL_VERIFYPEER, 1);

To:
curl_setopt($clientURL, CURLOPT_CAINFO, 'c:\\Websites\\cert\\ca-bundle.crt');
curl_setopt($clientURL, CURLOPT_SSL_VERIFYPEER, 1);

This works correctly as far as I could tell, Again this for Window
servers.
Again I want to thank you for your help.

[cptok]

Thanks for the suggestion of the proper fix.

The code change that was made
From:
curl_setopt($clientURL, CURLOPT_SSL_VERIFYPEER, 1);

To:
curl_setopt($clientURL, CURLOPT_CAINFO, 'c:\\Websites\\cert\\ca-bundle.crt');
curl_setopt($clientURL, CURLOPT_SSL_VERIFYPEER, 1);

This works correctly as far as I could tell, Again this for Window
servers.
Again I want to thank you for your help.

Now that's a fix! Nice updated post - and great way to deal with the Windows issue of verifying peers. I may add that as a commented line for windows users to a new interim release. They will, as you did, have to make sure that have a ca-cert bundle and reference it correctly.

I am also thinking of updating the QBMS XML version - nothing serious as it does not use any of the enhanced XML functions - but nice to keep more/less current.