[SOLVED] CIC Crédit Mutuel - incorrect Secret Key signature

10 years 1 month ago - 9 years 8 months ago #243474 by vincimoz
Hello,

I started today to test CIC Crédit Mutuel gateway.

I succeeded to acccess to the CIC Crédit Mutuel test gateway (paiement.creditmutuel.fr/test/paiement.cgi) and simulate a single payement.
But when I returned to my website with the appropriate link, this message was displayed:
"The Secret Key signature is incorrect. Please contact site administrator to check error log."

In the CBSubs log history, I seen in the message field:
"ciccreditmutuel: md5check or transaction does not match with gateway. Please check Secret Key setting: The Secret Key signature is incorrect. Please contact site administrator to check error log."

I called CIC Crédit Mutuel hotline who confirmed all my CIC Credit Mutuel settings are correct (Virtual EPT Number provided, Site Code provided, initial security code provided as HMAC Secret, encryption with SHA1), told me all is fine from their side so the issue would be on my side.

As I don't see what is wrong, could you help me?

Best Regards,
Alain

Site config: Joomla! 2.5.11 ; CB 1.0 ; CBSubs 3.0.0

Please Log in to join the conversation.

10 years 1 month ago #243511 by krileon
Please PM backend super administrator login credentials and will take a look as I need to review the IPN information sent by CIC Crédit Mutuel.


Kyle (Krileon)
Community Builder Team Member
Before posting on forums: Read FAQ thoroughly + Read our Documentation + Search the forums
CB links: Documentation - Localization - CB Quickstart - CB Paid Subscriptions - Add-Ons - Forge
--
If you are a Professional, Developer, or CB Paid Subscriptions subscriber and have a support issue please always post in your respective support forums for best results!
--
If I've missed your support post with a delay of 3 days or greater and are a Professional, Developer, or CBSubs subscriber please send me a private message with your thread and will reply when possible!
--
Please note I am available Monday - Friday from 8:00 AM CST to 4:00 PM CST. I am away on weekends (Saturday and Sunday) and if I've missed your post on or before a weekend after business hours please wait for the next following business day (Monday) and will get to your issue as soon as possible, thank you.
--
My role here is to provide guidance and assistance. I cannot provide custom code for each custom requirement. Please do not inquire me about custom development.

Please Log in to join the conversation.

10 years 3 weeks ago - 10 years 3 weeks ago #243624 by krileon
Have reviewed your install and CIC Crédit Mutuel does not appear to be configured correctly. There are no IPNs coming from CIC Crédit Mutuel, which is absolutely needed to activate the subscription as PDT does not return any information. Please ensure you've configured CIC Crédit Mutuel correctly as instructed in the CBSubs documentation.

Also note you're using the notify URL as recommended https, but your host does not provide a valid https certificate (self signed will not work). Please change the notify URL within CIC Crédit Mutuel to http and see if that resolves the issue of IPNs failing. The payment actually should not be allowed to complete unless the IPN was successful, but since it's bypassing this step entirely it means CIC Crédit Mutuel is no configured correctly.

During my tests you can see on the payment page "Return code: payetest CGI2: NOT OK". This means the IPN response failed and likely just due to the URL being https instead of http.


Kyle (Krileon)
Community Builder Team Member
Before posting on forums: Read FAQ thoroughly + Read our Documentation + Search the forums
CB links: Documentation - Localization - CB Quickstart - CB Paid Subscriptions - Add-Ons - Forge
--
If you are a Professional, Developer, or CB Paid Subscriptions subscriber and have a support issue please always post in your respective support forums for best results!
--
If I've missed your support post with a delay of 3 days or greater and are a Professional, Developer, or CBSubs subscriber please send me a private message with your thread and will reply when possible!
--
Please note I am available Monday - Friday from 8:00 AM CST to 4:00 PM CST. I am away on weekends (Saturday and Sunday) and if I've missed your post on or before a weekend after business hours please wait for the next following business day (Monday) and will get to your issue as soon as possible, thank you.
--
My role here is to provide guidance and assistance. I cannot provide custom code for each custom requirement. Please do not inquire me about custom development.

Please Log in to join the conversation.

10 years 3 weeks ago #243635 by vincimoz
Hello,

Thanks a lot for your test on my site and your help.

So I requested CIC Crédit Mutuel to replace return URL from https to http (I can't do myself).

I hope URL in http will solve this incorrect Secret Key signature issue.

However, I'm surprise that you said my CIC Crédit Mutuel gateway configuration was incorrect.
I downloaded "CBSubs GPL 3.0 Extra Payment Gateways package" and installed "CIC Credit Mutuel - cbplug_processor_ciccreditmutuel-300.zip", then I followed all instructions inside manual 3.0 concerning CIC Crédit Mutuel, then I checked all settings with CIC Crédit Mutuel helpdesk who told me all settings were correct (Virtual EPT Number provided, Site Code provided, initial security code provided as HMAC Secret, encryption with SHA1).
What is or could be wrong in my installation or configuration?

Best Regards,
Alain

Please Log in to join the conversation.

10 years 3 weeks ago - 10 years 3 weeks ago #243739 by vincimoz
Hello,

I followed your advise (replacing return URL from https to http), but there are still incorrect Secret Key signature, so the payment isn't completed due to "Return code: payetest CGI2: NOT OK" and now we have also an error 500 (internal error of server) as response of my CGI of confirmation.

So I checked with the CIC Crédit Mutuel hotline that:
- confirmed me all my settings are corrects (Virtual EPT Number, Site Code, initial security code as HMAC Secret, encryption with SHA1. And I can ensure you I configured CIC Crédit Mutuel correctly as instructed in the CBSubs documentation). But, you told me in PM that my installation of CIC Crédit Mutuel does not appear to be configured correctly.
Could you tell me what is incorrect?

- told me the expected return would be: version=2, cdr=1 or 0 (as explained in their technical documentation) and advised to check implementation of my CGI2 URL.
Could you investigate the implementation of your CGI2 URL?

Anyway, could you tell me what I need to do to solve this issue?

Thanks in advance for your reply,
Best Regards,
Alain

Please Log in to join the conversation.

10 years 3 weeks ago #243834 by krileon
The notif.php seams to be missing from your installation. It should be located at the following location.

components/com_comprofiler/plugin/user/plug_cbpaidsubscriptions/processors/ciccreditmutuel/notif.php

It should throw a 404 error if accessed directly or a 501 if the request data is invalid. A 500 error implies it's not there or something on your site is blocking its access (maybe htaccess?).


Kyle (Krileon)
Community Builder Team Member
Before posting on forums: Read FAQ thoroughly + Read our Documentation + Search the forums
CB links: Documentation - Localization - CB Quickstart - CB Paid Subscriptions - Add-Ons - Forge
--
If you are a Professional, Developer, or CB Paid Subscriptions subscriber and have a support issue please always post in your respective support forums for best results!
--
If I've missed your support post with a delay of 3 days or greater and are a Professional, Developer, or CBSubs subscriber please send me a private message with your thread and will reply when possible!
--
Please note I am available Monday - Friday from 8:00 AM CST to 4:00 PM CST. I am away on weekends (Saturday and Sunday) and if I've missed your post on or before a weekend after business hours please wait for the next following business day (Monday) and will get to your issue as soon as possible, thank you.
--
My role here is to provide guidance and assistance. I cannot provide custom code for each custom requirement. Please do not inquire me about custom development.

Please Log in to join the conversation.

Moderators: beatnantkrileon
Time to create page: 0.228 seconds

Facebook Twitter LinkedIn