Error establishing SSL connection
Posted by - NA -, Last modified by Wayne Smith on 27 January 2011 12:43 PM
With Miva Merchant 4.14 and above, during the Checkout process, when the credit card information is submitted for payment, I am getting this error: "Unable to authorize payment: Unable to connect to 'https://secure.somesite.com': Error establishing SSL connection: certificate verify failed". What causes this error, and how can I fix it?
This error is caused by an incorrect installation of the Miva Empresa security certificates directory. The security certificates directory (certs) is a directory of libraries that is stored on the server which allows Miva Empresa to perform secure transactions with other web sites. The certs directory is packaged in the Miva Empresa Virtual Machine distribution.
Now, because this directory is generally shared and stored in a central location on the server, individual merchants usually don't have access to them.
They can only be enabled and modified by someone with administrative access to the server. Usually, this would be one of Miva's Hosting Partners (or your host provider).
Specifically, this will happen when the certs have not been added to the Miva Empresa configuration on the server. Basically, to fix this problem, an administrator will need to access the Miva Empresa Configuration on the server:
â€¢ Linux/Unix - Miva Configuration File or Apache Configuration File
â€¢ Windows NT/2000 - Internet Services Manager
For Linux/Unix - Miva Configuration File - add the following line to your mivavm.conf: cadir=/path/to/certs*
For Linux/Unix - Apache Configuration File - add the following line to your httpd.conf and restart Apache: SetEnv MvCONFIG_DIR_CA /path/to/certs*
For Windows NT/2000 - Internet Services Manager - under the Miva VM tab in a site's Properties in IIS, the field labeled "Look for SSL root certificates in the following directory:" should be filled in with the path to the CERTS directory (usually C:\Program Files\Miva\Miva Empresa\CERTS).
* New in v5.12 of Miva Merchant Empresa
* If your UNIX distribution uses OpenSSL v0.9.x, you must change the value of HTTP_MvCONFIG_DIR_CA to end in "openssl-0.9"
* If your UNIX distribution uses OpenSSL v1.0.x, you must change the value of HTTP_MvCONFIG_DIR_CA to end in "openssl-1.0"
* If your UNIX distribution uses OpenSSL v0.9.x, you must change the value of cadir to end in "openssl-0.9"
* If your UNIX distribution uses OpenSSL v1.0.x, you must change the value of cadir to end in "openssl-1.0"