Posting in the Magento forums has been disabled pending the implementation of a new and improved forum solution which should better serve the community.

For new questions please post at magento.stackexchange.com, the community-run support site for the Magento community. We will be providing updates on the new forum solution soon. For questions or concerns please email community@magento.com.

Magento Forum

RapidSSL and Google Checkout
 
alex.bsc
Guru
 
Total Posts:  340
Joined:  2008-06-06
 

I have read that many Magento users use RapidSSL with great success.

One crucial question though - does RapidSSL work with Google Checkout?

 
Magento Community Magento Community
Magento Community
Magento Community
 
webcitz
Sr. Member
 
Avatar
Total Posts:  128
Joined:  2008-11-10
Appleton, WI
 

I’ve never heard of a situation where the brand of SSL had any issue being used on a website offering payment through Google Checkout or PayPal Express. Both payment systems are third party and the security of the credit card and payment information is provided by that third company. Unless you are wanting to protect the security of the customer’s billing/shipping addresses while being passed to your server, there is no reason to have an SSL installed if you are only offering Google Checkout as a payment option. Google Checkout has their own SSL that is used during the payment process.

 
Magento Community Magento Community
Magento Community
Magento Community
 
alex.bsc
Guru
 
Total Posts:  340
Joined:  2008-06-06
 

Unfortunately I have a little too much experience with GC and Magento, including SSL issues to accept your suggestion, but thanks for chipping in.  Yes, it will work without it if you use flat rate shipping but no, it will not if you use e.g. table rate.

GC requires an ACCREDITED SSL certificate (available on Google Checkout’s list of approved root cert suppliers) in order to negotiate with your site’s back end and to receive appropriate shipping cost info. It WILL fail if you do not have it installed and use e.g. table rate shipping.

Hence my question - if I want SSL for buyer assurance I could use any cert, this is correct, and RapidSSL definitely fits this use case.  However, if I want GC to work properly with table rates, I need a Google Checkout compatible SSL cert.  Supposedly RapidSSL’s root cert is on the GC approved list (I forget who issues it on behalf of RapidSSL) but I want to have someone who uses RapidSSL with GC testify that it does indeed work and GC does not throw up errors in the GC back end (logs), and fail, ignoring table rate shipping rates (resulting in shipping=0).

Thanks again.  I believe this is a valuable thread that will clear up this ambiguity.

 
Magento Community Magento Community
Magento Community
Magento Community
 
trogfish
Member
 
Total Posts:  42
Joined:  2008-12-03
 

Tread carefully!
A couple of years ago I tried the RapidSSL and GC combination and could not get it to work.  It was the early, first implementations of GC in magneto and i cannot clearly say it was directly because of the RapidSSL or other glitches.
However, I tried to contact the support people at RapidSSl via both phone and email about the GC requirements and got absolutely no repsonse..... crickets.  The phone person “thought it should work..”

So, I am using someone else… I suggest using someone you can actually confirm on the official GC list support page.

(I am now with Entrust, inc.)

Good Luck.

 
Magento Community Magento Community
Magento Community
Magento Community
 
alex.bsc
Guru
 
Total Posts:  340
Joined:  2008-06-06
 

I got the exact same response from them but I presume this refers to webcitz’ usage example which means nothing in this case - they just confirm that yes you can install SSL on your site, but do not confirm if GC recognises and whitelists their (root) certificates.  Their responses are rather ambiguous and when prompted to clarify you receive no further response.

FYI I also experienced GC problems in the early days and eagerly awaited each new release which constantly got GC bugfixes which ‘should’ resolve GC issues but never did. I even participated in the testing for the module.

Eventually, this was fixed so yes, there did used to be a GC problem on Magento’s side which caused a supported SSL cert to fail at that time. I know for a fact this works now (so Magento is working fine with GC inc table rates) so this leaves the SSL cert open to source cheaper than my existing set-up.

Hence RapidSSL people - has someone got RapidSSL to work with Google Checkout and is using Table Rates?

 
Magento Community Magento Community
Magento Community
Magento Community
 
Turnkeye
Enthusiast
 
Avatar
Total Posts:  908
Joined:  2008-12-20
URL: turnkeye.com
 

Hi,

Google Checkout accept only certain SSL certificates.

Google Checkout currently accepts an SSL certificate whose root certificate is from any of the following Certificate Authorities (CA):

http://checkout.google.com/support/sell/bin/answer.py?hl=en&answer;=57856


API authentication and security: Accepted SSL certificates:

* AAA Certificate Services - Comodo CA Limited
* ABA.ECOM Root CA
* AddTrust Class 1 CA Root
* AddTrust External CA Root
* AddTrust Public Services Root
* AddTrust Qualified CA
* America Online Root CA 1
* America Online Root CA 2
* AOL Time Warner Root CA 1
* AOL Time Warner Root CA 2
* Autoridad Certificadora de la Asociacion Nacional del Notariado Mexicano, A.C.
* Autoridad Certificadora del Colegio Nacional de Correduria Publica Mexicana, A.C.
* Baltimore CyberTrust Code Signing Root
* Baltimore CyberTrust Root
* Belgacom E-Trust Primary CA
* beTRUSTed Root CA
* beTRUSTed Root CA - Baltimore Implementation
* beTRUSTed Root CA - Entrust Implementation
* beTRUSTed Root CA - RSA Implementation
* C&W;HKT SecureNet CA Class A
* C&W;HKT SecureNet CA Class B
* C&W;HKT SecureNet CA Root
* C&W;HKT SecureNet CA SGC Root
* Certiposte Classe A Personne
* Certiposte Serveur
* Certisign Autoridade Certificadora AC1S
* Certisign Autoridade Certificadora AC2
* Certisign Autoridade Certificadora AC3S
* Certisign Autoridade Certificadora AC4
* Certplus Class 1 Primary CA
* Certplus Class 2 Primary CA
* Certplus Class 3 Primary CA
* Certplus Class 3P Primary CA
* Certplus Class 3TS Primary CA
* Certum Root CA
* Comodo AAA Services root
* Comodo Secure Services root
* Comodo Trusted Services root
* Deutsche Telekom Root CA 1
* Deutsche Telekom Root CA 2
* DigiCert Assured ID Root CA
* DigiCert Global Root CA
* DigiCert High Assurance EV Root CA
* DigiNotar Root CA
* Digital Signature Trust Co. Baltimore EZ by DST
* Digital Signature Trust Co. DST (ANX Network) CA
* Digital Signature Trust Co. DST (UPS) Root CA
* Digital Signature Trust Co. DSTCA E1
* Digital Signature Trust Co. DSTCA E2
* Digital Signature Trust Co. DST-Entrust GTI CA
* Digital Signature Trust Co. Global CA 1
* Digital Signature Trust Co. Global CA 2
* Digital Signature Trust Co. Global CA 3
* Digital Signature Trust Co. Global CA 4
* Digital Signature Trust Co. National Retail Federation DST (NRF) Root CA
* Entrust Root Certification Authority
* Entrust.net CA (2048)
* Entrust.net Client CA
* Entrust.net Secure Server CA
* Equifax Secure CA
* Equifax Secure eBusiness CA-1
* Equifax Secure eBusiness CA-2
* Equifax Secure Global eBusiness CA-1
* EUnet International Root CA
* FESTE, Public Notary Certs
* FESTE, Verified Certs
* First Data Digital Certificates Inc. CA
* FNMT Clase 2 CA
* GeoTrust Global CA
* GeoTrust Primary Certification Authority
* GlobalSign Root CA
* GlobalSign Root CA - R2
* Go Daddy Class 2 CA
* GTE CyberTrust Global Root
* GTE CyberTrust Root
* GTE CyberTrust Root 5
* IPS Chained CAs root
* IPS CLASE1 root
* IPS CLASE3 root
* IPS CLASEA1 root
* IPS CLASEA3 root
* IPS Seguridad CA
* IPS Servidores root
* IPS Timestamping root
* Microsoft Root CA
* NetLock Expressz Class C Tanusitvanykiado
* NetLock Kozjegyzoi Class A Tanusitvanykiado
* NetLock Uzleti Class B Tanusitvanykiado
* Network Solutions Certificate Authority
* PTT Post Root CA
* QuoVadis Root CA
* RSA Data Security Secure Server CA
* RSA Root Certificate 1
* RSA Security 1024 v3
* RSA Security 2048 v3
* Saunalahden Serveri CA
* Secure Certificate Services - Comodo CA Limited
* Secure Global CA
* Secure Server CA - RSA Data Security, Inc.
* SecureNet CA Class A
* SecureNet CA Class B
* SecureNet CA Root
* SecureNet CA SGC Root
* SecureSign Root CA1
* SecureSign Root CA2
* SecureSign Root CA3
* SecureTrust CA
* Security Communication Root CA
* Servicios de Certificacion - A.N.C.
* SIA Secure Client CA
* SIA Secure Server CA
* Sonera Class 1 Root CA
* Sonera Class 2 Root CA
* Staat der Nederlanden Root CA
* Starfield Class 2 CA
* StartCom Certification Authority
* Swisskey Root CA
* Symantec Root CA
* TC TrustCenter Germany Class 2 CA
* TC TrustCenter Germany Class 3 CA
* TC TrustCenter Class 1 CA
* TC TrustCenter Class 2 CA
* TC TrustCenter Class 3 CA
* TC TrustCenter Class 4 CA
* TC TrustCenter Time Stamping CA
* TDC Internet Root CA
* TDC OCES Root CA
* Thawte Personal Basic CA
* Thawte Personal Freemail CA
* Thawte Personal Premium CA
* Thawte Premium Server CA
* Thawte Primary Root CA
* Thawte Server CA
* Thawte Time Stamping CA
* Trusted Certificate Services - Comodo CA Limited
* TURKTRUST Certificate Services Provider Root 1
* TURKTRUST Certificate Services Provider Root 2
* UTN - DATACorp SGC
* UTN-USER First-Network Applications
* UTN-USERFirst-Client Authentication and Email
* UTN-USERFirst-Hardware
* UTN-USERFirst-Object
* ValiCert Class 1 VA
* ValiCert Class 2 Policy VA
* ValiCert Class 3 Policy VA
* Verisign Class 1 Public Primary CA
* Verisign Class 1 Public Primary CA - G2
* VeriSign Class 1 Public Primary CA - G3
* Verisign Class 1 Public Primary OCSP Responder
* Verisign Class 2 Public Primary CA
* VeriSign Class 2 Public Primary CA - G2
* VeriSign Class 2 Public Primary CA - G3
* Verisign Class 2 Public Primary OCSP Responder
* Verisign Class 3 Public Primary CA
* VeriSign Class 3 Public Primary CA - G2
* VeriSign Class 3 Public Primary CA - G2
* VeriSign Class 3 Public Primary CA - G3
* VeriSign Class 3 Public Primary CA - G5
* Verisign Class 3 Public Primary OCSP Responder
* VeriSign Class 4 Public Primary CA - G2
* Verisign Class 4 Public Primary CA - G3
* Verisign Secure Server OCSP Responder
* Verisign Time Stamping Authority CA
* ViaCode CA Data
* Visa eCommerce Root
* Visa International Global Root 2
* Xcert EZ by DST
* XRamp Global Certification Authority

 
Magento Community Magento Community
Magento Community
Magento Community
 
alex.bsc
Guru
 
Total Posts:  340
Joined:  2008-06-06
 

Thanks for the post.  Google Checkout’s supported SSL certs is indeed
http://checkout.google.com/support/sell/bin/answer.py?hl=en&answer;=57856.

RapidSSL I believe uses:

‘Equifax Secure eBusiness CA-1’ suggesting that it does indeed work.

That’s all fine and dandy but for the quantity of people who claim they use RapidSSL with Magento, I have yet to find one to confirm that yes, it works with Google Checkout, hence this thread.

 
Magento Community Magento Community
Magento Community
Magento Community
 
mrbenbanks
Jr. Member
 
Total Posts:  1
Joined:  2010-03-06
 

Hello,

I had this issue with Rapid and resolved it by installing an intermediate certificate in CPANEL (although there are various other how to’s for apache, iis etc...)

The issue was that Google check the certificate by looking at:

- Geo Trust
- Rapid
- [your domain]

So first thing is to go to this site and checkout your domain. If the last section (chains) has a warning against it then you need to install the intermediate certificate. http://www.digicert.com/help/

If there is a warning, then look at this site about installing the intermediate cert.

Go to https://knowledge.rapidssl.com and search for “Intermediate Install” or Intermediate Install cpanel”

The actual CA bundle is here: https://knowledge.rapidssl.com/library/VERISIGN/ALL_OTHER/RapidSSL%20Intermediate/RapidSSL_CA_bundle.pem

Once installed, go back and re-do the check above.  Then open the cert in your browser and check the order of the trust chain. It should be as above.

Hope this helps.

Thanks,

Ben

 
Magento Community Magento Community
Magento Community
Magento Community
 
WebhostUK LTD
Sr. Member
 
Avatar
Total Posts:  163
Joined:  2009-08-27
UK
 
alex.bsc - 16 November 2010 10:47 AM

I have read that many Magento users use RapidSSL with great success.

One crucial question though - does RapidSSL work with Google Checkout?

Yes we it works fine, We use the combination in our billing system.

 
Magento Community Magento Community
Magento Community
Magento Community
 
OliviaSSLGuru
Jr. Member
 
Total Posts:  4
Joined:  2010-11-14
 

Yes. I am using both, RapidSSL and Google checkout. Even, i was a bit skeptical in trying both, as i had read a lot about gc not supporting rapidssl. But i gave it a try, as i didn\’t mind wasting $8.99 rapidssl cert and i knew that if it worked, it will be a big benefit for me. And it did really worked and i had installed an intermediate cert on my panel.

 
Magento Community Magento Community
Magento Community
Magento Community
 
Davis_Joseph
Jr. Member
 
Total Posts:  5
Joined:  2012-05-29
USA
 
alex.bsc - 16 November 2010 10:47 AM

I have read that many Magento users use RapidSSL with great success.

One crucial question though - does RapidSSL work with Google Checkout?

RapidSSL is under GeoTrust Global CA root so definitely RapidSSL Certificate works fine with Google Checkout.

Get RapidSSL certificate at http://www.sslmatrix.com/ssl-brands/rapidssl

 
Magento Community Magento Community
Magento Community
Magento Community
Magento Community
Magento Community
Back to top