Hello,
I am running a Magento 2 store (CE v2.3.2) and I received this notice from DigiCert:
https://support.authorize.net/knowledgebase/Knowledgearticle/?code=KA-05545
I am trying to figure out if this affects our store or not. To my knowledge, we never set up any CA certs with their Entrust certificates to being with, but maybe that is built into Magento 2 somehow? Looking for some help as I don't understand the SSL stuff well. Thanks in advance!
To determine if the notice from DigiCert affects your Magento 2 store, it's essential to understand the context of the notice and how SSL certificates function within your store setup. Here’s a brief overview:
The notice from DigiCert concerns the deprecation of certain Certificate Authority (CA) certificates and their potential impact on secure connections. Specifically, they mention issues with Entrust certificates, which can affect websites if they rely on these certificates for secure communication.
Magento 2, by default, supports SSL certificates for secure transactions. However, it does not inherently manage the CA certificates. If your store uses SSL certificates issued by Entrust, or if you’ve ever set up any CA certificates associated with DigiCert or Entrust, you should verify the certificates currently installed on your server.
You can check the SSL certificate in use by:
If you determine that your site is affected or you require assistance in updating your SSL, it may be beneficial to consult a web security expert or your hosting provider for guidance.
Thank you for your reply. I understand that my website has its own SSL Certificate, which is working fine. The notice from Authorize.Net indicates that we may have to somehow set up a certificate with them for transactions. I have never had to set any of this up before (with their current Entrust SSL) - but I am unsure if somehow, out of the box, Magento 2.3.2 had that set up already? We're just using the Authorize.net option that was built into Magento by default.
I'm wondering if, perhaps, this change they're making will not affect us because of how the transaction is sent to Authorize.net from Magento?