Ecommerce software home
Shopping Cart Software Forum for Ecommerce Templates
Shopping Cart Software Forum for Ecommerce Templates
Home | Profile | Register | Active Topics | Members | Search | FAQ
Username:
Password:
Save Password
Forgot your Password?



Find us on Facebook

Follow us on Twitter

View our YouTube channel


 All Forums
 Technical
 PHP (Unix / Linux / Apache) versions
 Authorize.net and is phasing out the MD5 based tra
 New Topic  Reply to Topic
 Printer Friendly
Author Previous Topic Topic Next Topic  

dhagood100
Starting Member

USA
39 Posts

Posted - 01/11/2019 :  10:08:28  Show Profile
Got this today from Authorize.Net, how does this affect ECT?

Authorize.Net is phasing out the MD5 based transHash element in favor of the SHA-256 based transHashSHA2. The setting in the Merchant Interface which controls the MD5 Hash option will be removed by the end of January 2019, and the transHash element will stop returning values at a later date to be determined.

We have identified that you have this feature configured and may be relying on MD5 based transHash in transaction responses for verifying the sender is Authorize.Net.

Please contact and work with your web developer or solutions provider to verify if you are still utilizing MD5 based hash and if still needed to move to SHA-256 hash via Signature Key

David Hagood

Andy
Administrator

94741 Posts

Posted - 01/11/2019 :  10:19:30  Show Profile
Hi David

Let me check that with Vince for you and we'll post back if you'd like to subscribe to this thread.

Andy

Please feel free to review / rate our software
Go to Top of Page

Vince
Administrator

37356 Posts

Posted - 01/11/2019 :  10:33:43  Show Profile
Hi David
I'll start looking into this first thing next week and will post back here when we have the changes finished.

Vince

Click Here for Shopping Cart Software
Click Here to sign up for our newsletter
Click Here for the latest updater
Go to Top of Page

tgorski
Ecommerce Template Expert

USA
728 Posts

Posted - 01/16/2019 :  10:13:18  Show Profile
Good Question! ... we look forward to your post, guys!

Tim Gorski
Go to Top of Page

Bob88
Ecommerce Template Expert

958 Posts

Posted - 01/18/2019 :  07:09:55  Show Profile
Do you have any rough estimate as to when there will be an update? Less than 2 weeks until Authorize stops working. Thanks.
Go to Top of Page

Andy
Administrator

94741 Posts

Posted - 01/18/2019 :  08:45:31  Show Profile
Hi Bob

We use authorize.net too so I'm sure it will be ready in plenty of time.

Andy

Please feel free to review / rate our software
Go to Top of Page

Andy
Administrator

94741 Posts

Posted - 01/24/2019 :  08:26:19  Show Profile
This is now available in 6.9.6 and 7.0.3 https://www.ecommercetemplates.com/support/topic.asp?TOPIC_ID=111230

Andy

Please feel free to review / rate our software
Go to Top of Page

Dermontti
New Member

USA
81 Posts

Posted - 01/24/2019 :  09:36:58  Show Profile
Quick question I hope you can answer on this issue:

If we are using AIM, is this a problem for us? Do I need to do the update before the end of the month? Or is it only required if using SIM?

We didn't get an email from Authorize.NET for this one. At first, I thought that might be an error on their part, but perhaps we're not using this MD5 element in our AIM setup.

Does this seem correct? What should I check?

Are you folks that received the mail all using SIM?
Go to Top of Page

Andy
Administrator

94741 Posts

Posted - 01/24/2019 :  09:40:04  Show Profile
That's right, you wouldn't be using the MD5 Hash for your AIM set up so you're fine there. I would still update if you can to get any new features / fixes though.

Andy

Please feel free to review / rate our software
Go to Top of Page

Dermontti
New Member

USA
81 Posts

Posted - 01/24/2019 :  09:47:27  Show Profile
Further notes:
I checked my settings in the Authorize.NET account page, and I do not have a hash value set under MD5 hash. I guess this means we're not currently using it. True?

Another question, which doesn't appear to be quite so time sensitive:
This page:
https://developer.authorize.net/api/upgrade_guide/
indicates that both AIM and SIM are deprecated, suggesting that people should move to a newer Authorize.NET API. There aren't any deadlines or end of life dates mentioned. I bring it up here to make sure it's on your radar for the future.
Go to Top of Page

Andy
Administrator

94741 Posts

Posted - 01/24/2019 :  09:50:46  Show Profile
No, you won't be using it.

Yes that is something on our radar but there's certainly no urgency here.

Andy

Please feel free to review / rate our software
Go to Top of Page

dhagood100
Starting Member

USA
39 Posts

Posted - 01/24/2019 :  10:12:00  Show Profile
New email from Authorize net. Seems the are going to phase now.

"Phase 1 - Starting later this month to early February 2019, we will remove ability to configure or update MD5 Hash setting in the Merchant Interface. There are no changes to the existing API response.
Phase 2 - Stop sending the MD5 Hash data element in the API response. This change will require that applications support the SHA-512 hash via signature key. Dates for phase 2 will be announced later but is expected in the next 2-3 months."

The email..

Authorize.Net is phasing out the MD5 hash, an older method used by shopping carts, payment modules and plugins to verify that transaction responses are genuine and from Authorize.Net. We have identified that you have this feature configured and may be relying on this older method.

Please contact your web developer or solutions provider and confirm if you are using an MD5-based hash. If so, you should begin plans for moving to SHA-512 hash via Signature Key.

The MD5 Hash will phase out in two phases:

Phase 1 - Starting later this month to early February 2019, we will remove ability to configure or update MD5 Hash setting in the Merchant Interface. There are no changes to the existing API response.
Phase 2 - Stop sending the MD5 Hash data element in the API response. This change will require that applications support the SHA-512 hash via signature key. Dates for phase 2 will be announced later but is expected in the next 2-3 months.

Please refer to our support article: MD5 Hash End of Life & Signature Key Replacement for more details and information on this change.

Thank you for your attention to this matter and for being an Authorize.Net merchant.

Sincerely,
Authorize.Net


David Hagood
Go to Top of Page

RayCramblit
Advanced Member

USA
108 Posts

Posted - 01/29/2019 :  19:13:10  Show Profile
I do NOT want to screw this up so I wanted to clarify my understanding on the MD5 update with Authorize.net.

My client is using the "Payment Provider" as Auth.net AIM. The Auth.net SIM setting option is not being used on this cart.

I updated the PHP cart to v7.0.3. Do I need to do anything with the coming Authorize.net update since they are not using the Auth.net SIM as their payment provider?

My client wants to do this update thing Thursday (it's Tuesday) so I need a prompt reply. (I ALWAYS get prompt replies here but just had to throw that comment in).

Ray Cramblit
Go to Top of Page

Andy
Administrator

94741 Posts

Posted - 01/30/2019 :  00:04:03  Show Profile
Hi Ray

You don't need to do anything - you can updated on Thursday and you don't need to make any authorize.net related changes if you are using AIM.

Andy

Please feel free to review / rate our software
Go to Top of Page
  Previous Topic Topic Next Topic  
 New Topic  Reply to Topic
 Printer Friendly
Jump To:
Shopping Cart Software Forum for Ecommerce Templates © 2002-2018 ecommercetemplates.com Go To Top Of Page
This page was generated in 0.03 seconds. Snitz Forums 2000