Sep 29, 2017; 03:57
Steve Piercy - Website Builder
curl and TLS v1.2 on macOS 10.12.6 issue and AuthorizeNet_AIM
A colleague reported an issue on macOS 10.12.6, Lasso 8.6.3, and
AuthorizeNet_AIM when using -curl and its -tlsv1.2 options. The
error message will be similar to the following:
curl: (35) Unknown SSL protocol error in connection to test.authorize.net:-9836
macOS builds curl with OpenTransport instead of OpenSSL. Silly
Apple... AFAIK, this issue does not affect other platforms.
I've created an issue on my project repository with a temporary
workaround. This is for the Lasso 8 version only.
https://github.com/stevepiercy/AuthorizeNet_AIM/issues/5
The Lasso 9 version (AuthorizeNet_AIM_9) does not implement
--tlsv1.2 via curl, so it is not affected by this issue.
However, if you are not using tlsv1.2, you might want to get
around to it sooner than later as earlier versions may stop
working. PCI DSS requires disablement of SSL/early TLS by June
30, 2018.
https://blog.pcisecuritystandards.org/are-you-ready-for-30-june-2018-sayin-goodbye-to-ssl-early-tls
AuthorizeNet will disable TLS 1.0 and 1.1 no later than February
28, 2018.
https://support.authorize.net/authkb/index?page=content&id=A1623
--steve
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
Steve Piercy Website Builder Soquel, CA
<web@stevepiercy.com> <http://www.stevepiercy.com/>
#############################################################
This message is sent to you because you are subscribed to
the mailing list Lasso Lasso@lists.lassosoft.com
Official list archives available at http://www.lassotalk.com
To unsubscribe, E-mail to: <Lasso-unsubscribe@lists.lassosoft.com>
Send administrative queries to <Lasso-request@lists.lassosoft.com>
Oct 03, 2017; 10:28
Maxwell Klein
Re: curl and TLS v1.2 on macOS 10.12.6 issue and AuthorizeNet_AIM