I'm using SSL with Curl to communicate with Authorize.net for credit card transactions.
Today, I renewed my OWN server's SSL certificate.
Tonight I got a call from someone that said he couldn't get his order through. It turns out that I am no longer getting a response from Authorize.net through Curl. I was dumbfounded as I thought I had changed nothing and this must be a problem with Authorize.net. Then I remembered I renewed my SSL certificate today. So just on a whim I added the follwing line to my curl/php code and suddelny it all started working again:
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
Now my question is, what does MY SERVER's certificate have to do with this??!!! When curl makes the SSL request, doesn't it ask for the remote server's certificate? Isn't this option to verify the remote server's certificate?
Today, I renewed my OWN server's SSL certificate.
Tonight I got a call from someone that said he couldn't get his order through. It turns out that I am no longer getting a response from Authorize.net through Curl. I was dumbfounded as I thought I had changed nothing and this must be a problem with Authorize.net. Then I remembered I renewed my SSL certificate today. So just on a whim I added the follwing line to my curl/php code and suddelny it all started working again:
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
Now my question is, what does MY SERVER's certificate have to do with this??!!! When curl makes the SSL request, doesn't it ask for the remote server's certificate? Isn't this option to verify the remote server's certificate?
