Authorize.net and MD5 encryption

  • Winston Baccus
  • Topic Author
  • Offline
  • Senior Member
  • Senior Member
More
5 years 3 months ago #121329 by Winston Baccus
Authorize.net and MD5 encryption was created by Winston Baccus
Authorize sent me a message that they are ending support for MD5 this month and that I am using it.

Is JoomDonation / EventBooking using MD5?

Please Log in or Create an account to join the conversation.

More
5 years 3 months ago #121331 by Mr. Dam
Replied by Mr. Dam on topic Authorize.net and MD5 encryption
Hi Winston,
What's your Joom Donation and EventBooking versions? Because in new versions of these extensions, we already updated Payment library to make Authorize.net to support TLS 1.2 with Md5
Thanks
Dam

Please Log in or Create an account to join the conversation.

  • Winston Baccus
  • Topic Author
  • Offline
  • Senior Member
  • Senior Member
More
5 years 3 months ago #121359 by Winston Baccus
Replied by Winston Baccus on topic Authorize.net and MD5 encryption
I'm up to date with both versions. Authorize.net wasn't specific in which processes we had that were using it. Here's what they sent:

Authorize.Net is phasing out the MD5 based transHash element in favor of the SHA-256 based transHashSHA2. The setting in the Merchant Interface which controls the MD5 Hash option will be removed by the end of January 2019, and the transHash element will stop returning values at a later date to be determined.

We have identified that you have this feature configured and may be relying on MD5 based transHash in transaction responses for verifying the sender is Authorize.Net.

Please contact and work with your web developer or solutions provider to verify if you are still utilizing MD5 based hash and if still needed to move to SHA-256 hash via Signature Key.

Please refer your developer or solution provider to our Transaction Hash Upgrade Guide for more details and information on this change.

Please Log in or Create an account to join the conversation.

More
5 years 3 months ago #121366 by Mr. Dam
Replied by Mr. Dam on topic Authorize.net and MD5 encryption
Please submit ticket on category: Joom Donation and send your site url with super admin account. We will check the problem with Authorize.net for you
Thanks
Dam

Please Log in or Create an account to join the conversation.

  • Tuan Pham Ngoc
  • Away
  • Administrator
  • Administrator
More
5 years 3 months ago #121367 by Tuan Pham Ngoc
Replied by Tuan Pham Ngoc on topic Authorize.net and MD5 encryption
Hello

Actually, this change does not affect our extensions. So you don't need to submit support ticket. Our extensions will still work well with this change, don't worry

Regards,

Tuan
The following user(s) said Thank You: Robert Vining

Please Log in or Create an account to join the conversation.

More
5 years 2 months ago #121613 by brianpeat
Replied by brianpeat on topic Authorize.net and MD5 encryption
I came in here worried about this also, but then checked the payment plugin config screen and sure enough, it doesn't use the hash feature so as Tuan said, it should be fine.
The following user(s) said Thank You: Robert Vining

Please Log in or Create an account to join the conversation.

Moderators: Mr. DamDũng Nguyễn Việt