IDEAL payment - Certificate out of date

Hi,

When I try to upload the supplied certificate to IDEAL web site, it says " Check security: Valid until!"

I checked the certificate and it says it is valid until aug 2006.

Any ideas on the best way to create a new certificate and does this need to have an expiry date.

Thanks
andy

Hi Andy,

I don't know if it's the best way, but this thread contains an example on how to create certificates: http://www.zen-cart.nl/forums/index.php?topic=1021.msg10387#msg10387

It's in Dutch, but I think/hope it's not to difficult to understand.

does this need to have an expiry dateI am not sure, but I think it does. I do know you can make a cert that's valid for ten years, of course that might be less secure than creating a new cert every year or so.

Thanks Paul,

Not sure if I missed something in the translation, this is what i tried.
Can you check.

Thanks

OpenSSL> genrsa -des3 -out merchantprivatekey.pem -passout pass:Test1 1024
Loading 'screen' into random state - done
Generating RSA private key, 1024 bit long modulus
........++++++
...++++++
e is 65537 (0x10001)

worked fine and have output file, merchantprivatekey.pem

Then

C:\Server\Apache2\bin>openssl
OpenSSL> req -x509 -config openssl.cnf -new -key merchantprivatekey.pem -passin pass:Test1 -days 365 -out merchantprivatecert.cer

error on line -1 of openssl.cnf
6112:error:02001002:system library:fopen:No such file or directory:.\crypto\bio\bss_file.c:122:fopen('openssl.cnf','rb')
6112:error:2006D080:BIO routines:BIO_new_file:no such file:.\crypto\bio\bss_file.c:125:6112:error:0E078072:configuration file routines:DEF_LOAD:no such file:.\crypto\conf\conf_def.c:197:error in req
OpenSSL>

I vaguely remember I had to copy the openssl.cnf file from one location to another one time (or add it's path in req -x509 -config openssl.cnf -new -key merchantprivatekey.pem -passin pass:Test1 -days 365 -out merchantprivatecert.cer).

Do you know what the current path to your openssl.cnf file is?

Hi Paul,

Your memories were enough, found cnf file and used full path name in command, works fine.

Thanks
Andy

Well that was a bit premature.

IDeal accpeted the certificate, but i still get.....

iDealBetaal veilig en snel via het betaalvenster van uw eigen bank.
Kies uw bank...Could not get banks. Error: Invalid electronic signature (SE2700)

Any ideas.......:frusty:

Thanks
Andy

:clap:.....got it....must have been the details i used when creating the cert......I have Banks listed.......whooooo....

Regards
Andy

Glad to hear it works after all :smile: