Resolved Payment gate issue in checkout

Hello,

Which payment provider are you using? The empty list usually means that no response is received from the payment provider.

ING Advanced

Hi Roland,

Also extra info. Things were fine untill 08:00 yesterday. We still had a succesfull order then. And after 08:00, blank list.

Hello,

Since you are using ING Advanced, check the certificates you are using. Login to the dashboard of ING Advanced and on the Certificates tab you can check when your certificate expires. It sounds to me that the certificate has expired.

Hi Roland,

Thanks for the fast reply! I've clicked everywhere but I can see an expiry date. Should I look where my screenshot is? (attached)
I know my developer renewed the certificate yesterday, but I can't see if this was succesfull in the ING dashboard.
I will confirm this when my developer comes online.

Q: Does your software fetch the bank list automatically? Via 'directory request'. I got an email from IDEAL that this should be the way, and we check and decided that indeed your software works that way. But just double checking now.

Hello,

Yes, we retrieve the bank list via a `directory request` because it keeps changing, so do not want to hardcode it into the code. This is also the reason I believe it has something to do with the certificates because there is no data coming back.

Your developer can look at the file libraries/Jdideal/Psp/Advanced.php on line 112, that is where the bank list is retrieved. You can also see if there is any info in the Transactions list by clicking on the Show button at the end to see the log of the transaction if there is any further information there.

Tnx Roland!!

Hello Roland,

My name is Michal, Im Jasperts developer.

I have generated priv key and certificate using this code:
genrsa –aes128 –out priv.pem –passout pass:OUR-PASSWORD 2048
req –x509 –sha256 –new –key priv.pem –passin pass:OUR-PASSWORD 1825 –out cert.cer

Then uploaded both files into this location: /web/libraries/Jdideal/Psp/Advanced/certificates
Also uploaded certificate to https://ideal.secure-ing.com PROFILE->SECURITY

Still when i go to checkout i see blank list of banks.

Also updated Private key password with new one in Joomla RO Payments Profile 'iDeal Advanced'.

also in logs just found:

2021-12-14 10:52:34 - PHP Warning: openssl_verify(): supplied key param cannot be coerced into a public key in /var/www/clients/client1/web11/web/libraries/Jdideal/Psp/Advanced/xmlseclibs.php on line 496

line 529 in file: \libraries\Jdideal\Psp\Advanced\xmlseclibs.php

public function verifySignature($data, $signature) {
switch ($this->cryptParams['library']) {
case 'openssl':
return true;//$this->verifyOpenSSL($data, $signature); // hack
break;
}
}

When i made this change banks are now listed in dropdown in checkout.

Hello,
This works because you bypass the security check which also makes the payment connection insecure. A payment without certificate is not possible as far as I know.
As you can see from the message in the log, there is an issue with the certificates being used. The certificate created should be uploaded at the bank and in the profile.

So we did. In bank and on server we have same certificate.

I see first connection using present certificate which is on bank and our server and all is fine. transaction is made but then bank trys to connect one more time using other fingerprint and that generated error in logs:

[2021-12-14 13:24:41] Could not find certificate with fingerprint [82B0F73A134678830882FE0CE741AC45F63F0DE6]

We have now only 1 certificate in bank settings. Could this be old one still there somewhere in system?

Please let us know if You still offer support for implementation.

Hello,
There should be only one active certificate at the bank and in the profile. This must be the same certificate.
Yes, we still offer the installation service via our shop.

In january 2022 there is a package of new certificates from banks. One is for the ING as i see beside of the cert we generated which seems to be fine...bank is looking for a certificate on our server. fingerprint [82B0F73A134678830882FE0CE741AC45F63F0DE6]
This is the certificate!
And we have it in /web/libraries/Jdideal/Psp/Advanced/certificates
File is called: ingbank-5.cer

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----


Why bank doesnt see it? Please compare attached screen of the fingerprint in above cert.

Hello,

There are different kind of certificates. First there is the certificate that the bank supplies and is included in RO Payments and lives in the folder libraries/Jdideal/Psp/Advanced/certificates. Second there is the certificate that you need to generate that is uploaded to the bank and into RO Payments.

You cannot just put a certificate file in the folder libraries/Jdideal/Psp/Advanced/certificates because it will not be picked up. The new certificate is not required until at least 14 January 2022. However if you want to use it now, you can replace the file ing_sepa1.cer with your ingbank-5.cer. Make sure to rename ingbank-5.cer to ing_sepa1.cer. Perhaps good to make a backup of the existing certificate.

Let me know if that helps.

Hello, Thank You for reply.

"You cannot just put a certificate file in the folder libraries/Jdideal/Psp/Advanced/certificates because it will not be picked up." <= Well Ideal checkout offered a patch with files and no info so all the way i must guess what to do...

[2021-12-14 13:24:41] Could not find certificate with fingerprint [82B0F73A134678830882FE0CE741AC45F63F0DE6]

After renaming certificate it worked and above error is not visible anymore. Still when and what should rename the certificates....???


As for banks list we still cant understand why its not showing without the workaround. Certificate matches between plugin and ing advanced gate.
Any other place to look for?

Hello,

Well Ideal checkout offered a patch

That is not our code so you will not have any specific instructions what to do. That patch contains a certificate that is not mandatory until next year. The upcoming release of RO Payments will have this new certificate included.

When you login to the ING Dashboard and go to Profile -> Security tab. What is the end date of the certificate you see there?

As for banks list we still cant understand why its not showing without the workaround.

What is the error you get on retrieving the bank list?