Shared SSL Enhancements

Shared Enhancements
 
 
The shared SSL enhancement allows certain (but not all) gateways to be used in a shared ssl environment.

The extension allows COM based gateways to use shared SSL. A COM based gateway is any gateway interface that does not actually leave your site. Examples of these include:

• Verisign Payflowpro
• Authorizenet AIM
• Linkpoint COM wrapper
• Echo COM
• and many others

For more information on shared SSL, please click here

Using SSL Enhancement
 

The enhancement involves using an updated file called sslresult.asp and a new file called ssldecline.asp.

• Download and install the SSL enhancement code if needed
• Follow instructions in Developer's Guide for installing SSLshopcheckout.asp. This is section 32.4 of the VP-ASP 5.0 Developer's Guide
• Change the normal install instructions for the gateway that would normally say something like set Shop Configuration
  xcheckout=pfpshopcheckout.asp
  you make this
• xcheckout=sslshopcheckout.asp
  xpaymenturl=pfpshoppayment.asp
• The payment file is totally dependent on the gateway. Each gateway has a different name. For example it may be anaimshoppayment.asp
• An alternative to xpaymenturl is to actually edit sslresult.asp and change. It is your choice as to which is easier for you.
  Forwardurl="pfpshoppayment.asp"
• Change where to go in case the credit card is declined.
  Edit the pfpshoppayment.asp. The file name is the same as entered in the xpaymenturl above and is dependent on the gateway you are using. For example it could be anaimshoppayment.asp etc.
• backurl="anaimshopcheckout.asp"
  and change to
  backurl="ssldecline.asp" 

How it works
 

• The customer shops normally.
• When they come to enter their card details they go to sslshopcheckout.asp on the "secure server"
• On return they go to sslresult.asp. It decides whether the gateway code should be called by looking at the xpaymenturl.
• The gateway code (say Verisign PayflowPro), then validates the credit card
• If the card is successful the shopping completes normally
• If the card fails, ssldecline.asp is called. It displays why the card failed and gives the customer a chance to try again or cancel the order.

How do you know if it works
 

If you run a test and you put in the credit card details in sslshopcheckout.asp and if you put in an invalid card and error message appears in file ssldecline.asp, then it is working.

For a real card, VP-ASP should automatically direct to file shopthanks.asp and the payment type should be the name of your gateway such as Verisign or Authorizenet etc.