close
    Contents

    SSL

    SSL (Secure Sockets Layer) is used to established an encrypted link between our servers and your client.

    SSL Certificates

    To be able to create an SSL connection we use SSL Certificates.

    OpenSSL

    Some merchants use OpenSSL to verify our SSL certificates.

    Since a server can have more than one certificate you will need to use the -servername argument to specify the host that you are checking.

    Examples

    openssl s_client -servername api.na.bambora.com -connect api.na.bambora.com:443
    
    openssl s_client -servername www.beanstream.com -connect www.beanstream.com:443
    

    GeoTrust Local Certificate

    OpenSSL may output the following:

    ...
    depth=1 /C=US/O=GeoTrust Inc./CN=GeoTrust SSL CA - G3
    verify error:num=20:unable to get local issuer certificate
    verify return:0
    ...
    ---
    

    You can resolve this by doing the following:

    1. Download the latest GeoTrust_Global_CA.pem from GeoTrust
    2. Run OpenSSL with the -CAfile argument pointing to the downloaded file

    Examples

      openssl s_client -servername api.na.bambora.com -connect api.na.bambora.com:443 -CAfile "FILEPATH/GeoTrust_Global_CA.pem"
    
     openssl s_client -servername www.beanstream.com -connect www.beanstream.com:443 -CAfile "FILEPATH/GeoTrust_Global_CA.pem"