Coder Social home page Coder Social logo

narkoz / azericard Goto Github PK

View Code? Open in Web Editor NEW
13.0 13.0 5.0 29 KB

Ruby interface to AzeriCard online payment processing system

Home Page: https://narkoz.github.io/azericard

License: BSD 2-Clause "Simplified" License

Ruby 100.00%
azerbaijan azericard payment-processing ruby-gem

azericard's People

Contributors

narkoz avatar rakvium avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar

azericard's Issues

SSL connection error

In the middle of April, 2015 AzeriCard switched from SSLv3 to TLSv1 and changed their certificate.
As for now, all POST requests for process Azericard payment being failed with response_code: 0 and return_code: :ssl_connection_error.

AzeriCard switched cipher from RC-4 to ECDHE-RSA-AES256-GCM-SHA384

# openssl s_client -connect mpi.3dsecure.az:443
CONNECTED(00000003)
depth=1 C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = "Trustwave Organization Validation SHA256 CA, Level 1", emailAddress = [email protected]
verify error:num=20:unable to get local issuer certificate
verify return:0

---
Certificate chain
 0 s:/CN=mpi.3dsecure.az/O=AzeriCard Ltd/L=Baku/ST=Baku/C=AZ
   i:/C=US/ST=Illinois/L=Chicago/O=Trustwave Holdings, Inc./CN=Trustwave Organization Validation SHA256 CA, Level 1/[email protected]
 1 s:/C=US/ST=Illinois/L=Chicago/O=Trustwave Holdings, Inc./CN=Trustwave Organization Validation SHA256 CA, Level 1/[email protected]
   i:/C=US/O=SecureTrust Corporation/CN=SecureTrust CA

---
Server certificate
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgITBmobMSFmBwYkMSUZAAsEhMd5vDANBgkqhkiG9w0BAQsF
ADCBtTELMAkGA1UEBhMCVVMxETAPBgNVBAgTCElsbGlub2lzMRAwDgYDVQQHEwdD
aGljYWdvMSEwHwYDVQQKExhUcnVzdHdhdmUgSG9sZGluZ3MsIEluYy4xPTA7BgNV
BAMTNFRydXN0d2F2ZSBPcmdhbml6YXRpb24gVmFsaWRhdGlvbiBTSEEyNTYgQ0Es
IExldmVsIDExHzAdBgkqhkiG9w0BCQEWEGNhQHRydXN0d2F2ZS5jb20wHhcNMTUw
NTAxMDQzMTAzWhcNMTcwMjI3MTAzMTAzWjBdMRgwFgYDVQQDDA9tcGkuM2RzZWN1
cmUuYXoxFjAUBgNVBAoMDUF6ZXJpQ2FyZCBMdGQxDTALBgNVBAcMBEJha3UxDTAL
BgNVBAgMBEJha3UxCzAJBgNVBAYTAkFaMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4i3w6Wb2GV86eYOKAAC4Op665yRYp7X2AoEN4nHAlSuHc7dvY74F
WIKfULAxBS8kHjXj9eo6m0y7D1AraX423NebTGiMwJ5etzGwiw4hTxrkaFpHp104
P0yYI//k9usJEQh6p7hyo/ihEMCAu4zSBYv0BHZJVAItpKfDaSuaa+PGywZMAImJ
oIwjTsCTEcRCoUiYXkhuc3vtqkbQW+pa5ZLcArLzzz9KMqi0nk8ScyJoDcrfX9fL
DBQYOh+d4CAj15Hl2tncWSgGKRuh+nmCiUBTQTONIqqfyl6wXMPz9Jy5EfVCBLlx
9BB1Wm6eJbLE8Aax4kJW3IEjCb0vKYqm1wIDAQABo4IBjzCCAYswDAYDVR0TAQH/
BAIwADALBgNVHQ8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMB
MB0GA1UdDgQWBBSitNW8ZCTo4Yok1d7n0luPIVEWGTAfBgNVHSMEGDAWgBTKzh0Y
A3ceHPN8WLKacKgIgBb0rjBIBgNVHSAEQTA/MD0GDysGAQQBge0YAwMDAwQEAzAq
MCgGCCsGAQUFBwIBFhxodHRwczovL3NzbC50cnVzdHdhdmUuY29tL0NBMBoGA1Ud
EQQTMBGCD21waS4zZHNlY3VyZS5hejA2BgNVHR8ELzAtMCugKaAnhiVodHRwOi8v
Y3JsLnRydXN0d2F2ZS5jb20vT1ZDQTJfTDEuY3JsMHEGCCsGAQUFBwEBBGUwYzAm
BggrBgEFBQcwAYYaaHR0cDovL29jc3AudHJ1c3R3YXZlLmNvbS8wOQYIKwYBBQUH
MAKGLWh0dHA6Ly9zc2wudHJ1c3R3YXZlLmNvbS9pc3N1ZXJzL09WQ0EyX0wxLmNy
dDANBgkqhkiG9w0BAQsFAAOCAQEAn3OU+YGWz3VSRTvHLEcQNQmHdGrtO2zJkMCD
r1poPEsZ5B9U0sRup2r36HQvM+Q55b4fAj9Y4tRBJ9MAZHUVv0AW9GY6DJ1FF1qX
JVkHgdMnEtU8jFV74LRdxNgs0z6Pbsy/I2/HjF3Kmy72700V5pRcos59e5B2HiYP
Ql/kSZtkNvVG3UHFf69h9vuIYkpi4zl9QVUtYslxP8itwefX3PcShJJtfLnQVqSW
3L05kF8xF3rG7Vkwz1rjAnmamrcqVVVjyjBYJjTBfeY45+z9IaTARYi24lPm4sWX
LYF/XKKEycO+mmRQg2tLT28jdnMXkrE/4eOrQzDf8bL97A06Pg==
-----END CERTIFICATE-----
subject=/CN=mpi.3dsecure.az/O=AzeriCard Ltd/L=Baku/ST=Baku/C=AZ
issuer=/C=US/ST=Illinois/L=Chicago/O=Trustwave Holdings, Inc./CN=Trustwave Organization Validation SHA256 CA, Level 1/[email protected]

---
No client certificate CA names sent

---
SSL handshake has read 3308 bytes and written 431 bytes

---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: EC3AA0C9C8FC1BF0FA28074F6A95596DF956F11DB676D12198BF736E07E0DB76
    Session-ID-ctx: 
    Master-Key: 6F6C1FF805A56D2BDA4747C940980D0CEF1F4501B1114B74F973438A2557D1543E82289E007A4F2ED91321797EA41309
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 300 (seconds)
    TLS session ticket:
    0000 - 9d e5 1d d8 98 78 f4 7f-b6 41 cf 0f 2d 0c 4b 03   .....x...A..-.K.
    0010 - 97 26 8e cc 42 a8 66 75-99 e4 69 a1 1c ac 21 94   .&..B.fu..i...!.
    0020 - e2 5f df 27 1a c9 c2 f1-81 7b 5e 56 20 9c 74 15   ._.'.....{^V .t.
    0030 - 23 60 40 14 64 77 57 dc-00 d4 3d 8b cb 77 32 6b   #`@.dwW...=..w2k
    0040 - 4c 4f 64 9e 11 6a ce 8e-e8 19 72 d9 c3 a5 e5 ed   LOd..j....r.....
    0050 - a2 62 a0 98 be 77 ba 5c-fa 89 c4 26 09 11 b2 d0   .b...w.\...&....
    0060 - 20 4f 60 15 55 a3 89 2b-b8 64 b7 78 1e 5c 30 63    O`.U..+.d.x.\0c
    0070 - 24 ea 3a e8 eb d8 9b ab-14 73 7e 2b 2c 88 88 a3   $.:......s~+,...
    0080 - 7f d7 7e 9d 8c ab d5 13-a3 40 ce 19 15 57 1f 10   [email protected]..
    0090 - 93 7e 4f e3 17 3a 44 9b-01 ab 1c 00 7b 02 9c d9   .~O..:D.....{...
    00a0 - 28 ac ce 46 40 85 bb bd-d6 a3 ff 30 70 c2 3f 89   ([email protected].?.
    00b0 - 9a 35 fa 93 f8 19 f7 13-d0 8b 5e a6 09 ba 3d 9f   .5........^...=.

    Start Time: 1436358716
    Timeout   : 300 (sec)
    Verify return code: 20 (unable to get local issuer certificate)

AzeriCard switching to TLSv1.2

AzeriCard switching to TLSv1.2 completely, from 1st of June, 2015.
At now, both of TLSv1 and TLSv1.2 are working on production:

Hostname was found in DNS cache
Hostname in DNS cache was stale, zapped
  Trying 134.19.214.249...
Connected to mpi.3dsecure.az (134.19.214.249) port 443 (#15)
successfully set certificate verify locations:
  CAfile: none
  CApath: /etc/ssl/certs
SSLv3, TLS handshake, Client hello (1):
SSLv3, TLS handshake, Server hello (2):
SSLv3, TLS handshake, CERT (11):
SSLv3, TLS handshake, Server finished (14):
SSLv3, TLS handshake, Client key exchange (16):
SSLv3, TLS change cipher, Client hello (1):
SSLv3, TLS handshake, Finished (20):
SSLv3, TLS change cipher, Client hello (1):
SSLv3, TLS handshake, Finished (20):
SSL connection using TLSv1.2 / RC4-SHA
Server certificate:
     subject: CN=mpi.3dsecure.az; O=AzeriCard Ltd; L=Baku; ST=Baku; C=AZ
     start date: 2015-05-01 04:31:03 GMT
     expire date: 2017-02-27 10:31:03 GMT
     subjectAltName: mpi.3dsecure.az matched
     issuer: C=US; ST=Illinois; L=Chicago; O=Trustwave Holdings, Inc.; CN=Trustwave Organization Validation SHA256 CA, Level 1; [email protected]
     SSL certificate verify ok.
upload completely sent off: 206 out of 206 bytes
Server Apache is not blacklisted
Connection #15 to host mpi.3dsecure.az left intact

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.