Magneto2.2 - Authorize.Net MD5 Hash to SHA-256

[jack_wilson2]

Hello, 

We got an email from the Authorize.Net regarding MD5 Hash, They mention like they are removing MD5 Hash and switch to SHA-256 after Jan 2019. Do we need to apply any changes to our Authorize.Net payment gateway? We are using Authorize.Net Direct Post with Authorize and Capture feature.

[andrea_wasik]

I have this same issue. Trying to set up a new Magento 2 installation to process payments through my authorize.net account however there is no longer an option to get an MD5 hash from authorize.net, therefore it appears that authorize.net is not going to work with Magento!

[wenabar]

We also have this issue. When will there be a release of Magento 2 to resolve this issue, which also involves the deprecated Direct Post method with Authorize.net?

[dbrooke1007]

Here is the latest from Authorize.Net, which came today in an email:

---------------------------------------------

Today we’re announcing final phase 2 dates when the gateway will stop populating the MD5 hash value.

• Phase 1 Complete
• Phase 2 - Stop sending the MD5 Hash data element in the API response. To continue verifying via hash, this will require applications to support the SHA-512 hash via signature key.
• Sandbox will be updated on March 7, 2019 to stop populating the MD5 Hash value, the field will still be present but empty.
• Production will be updated on March 14, 2019 to stop populating the MD5 Hash value, the field will still be present but empty.
We have updated documentation on our developer center, posted sample code on Github, and will have SDK updates completed by end of February.

Please refer to our support article: MD5 Hash End of Life & Signature Key Replacement for more details and information on this change.

Thank you for your attention to this matter.

Sincerely,
Authorize.Net

[dbrooke1007]

In all the threads about this issue, I have not seen one promising post about a solution. It appears to me that Adobe is not worried about it, thus one of us is going to have to create the solution.

[dbrooke1007]

Possible info for solution:

https://magento.stackexchange.com/questions/259175/authorize-net-transaction-hash-upgrade

[dbrooke1007]

This looks to be the most updated conversation on the subject:

https://github.com/magento/community-features/issues/127

[dbrooke1007]

https://support.magento.com/hc/en-us/articles/360024368392-Update-Authorize-Net-Direct-Post-from-MD5...

[anromeo]

Have you been able to install the patch? The links in that article appear to broken, and I cannot for the life of me figure out where they are actually located.

[sumeet_gorjia]

Hello @dbrooke1007 

Thank you for your helping reply.

Can you please share a screenshot of email, which you have received from Authorized.net?

We also got many issues and complains from many of our clients who have Authorized.net as the only payment gateway.

Thanks again.