Eway Payment plugin

Hi,

We're using the eway plugin in Membership Pro but the bank payment gateway now only accepts TLS 1.2.

This protocol is running on our server but defaults to TLS 1.1 meaning transactions are refused. Can the eway payment gateway force TLS 1.2 for the transaction?

Thanks

Hi Jeff

What version of Membership Pro you are using? The eway payment plugin in latest version does force to use TLS 1.2, so maybe you still use old version of the extension?

Regards,

Tuan

Hi Tuan,

I have upgraded to the latest version, before I test do you mean the eway or eway Rapid extension? The eway extension is still listed as version one, this is the one we are using.

Thanks

Hi,

Payment still fails with latest version of Membership Pro. error message "Forbidden" at www.eway.com.au/gateway_cvn/xmlpayment.asp

Hi Jeff

The forbidden error might cause by something with Eway account

Could you please try to call Eway, ask them to see why we receive that error? They should be able to check their system and tell us why we receive the error and guide us to correct it

Regards,

Tuan

Hi Tuan,
Response from eway

"A "forbidden" error could also occur with invalid API credentials, could you please confirm the API endpoint being submitted to and the credetials (API key and password) being used so we can help rule this out as a possible cause and hopefully help isolate it to TLS. "

Are you able to assist with the "API endpoint".

Hello Jeff

The API endpoint which we are using is www.eway.com.au/gateway_cvn/xmlpayment.asp

Look like Eway calls it as Legacy API if I remember correctly

Please talk to them and get back to us with the result

Regards,

Tuan

Hi Tuan,

Eway have confirmed the following;

"The endpoint you are currently using will only return the 403 forbidden error when using a protocol other than TLS 1.2."

So it appears the payment plugin is not forcing TLS 1.2.

Thanks

Hi Jeff

We are already force TLS 1.2 on our code. Maybe it is because server doesn't support TLS 1.2 yet? Could you please submit a support ticket sending us super admin account of your site so that we can double check the code on your site to be sure?

Tuan