[SOLVED] CIC Crédit Mutuel - incorrect Secret Key signature

Hello,

I started today to test CIC Crédit Mutuel gateway.

I succeeded to acccess to the CIC Crédit Mutuel test gateway ( paiement.creditmutuel.fr/test/paiement.cgi ) and simulate a single payement.
But when I returned to my website with the appropriate link, this message was displayed:
"The Secret Key signature is incorrect. Please contact site administrator to check error log."

In the CBSubs log history, I seen in the message field:
"ciccreditmutuel: md5check or transaction does not match with gateway. Please check Secret Key setting: The Secret Key signature is incorrect. Please contact site administrator to check error log."

I called CIC Crédit Mutuel hotline who confirmed all my CIC Credit Mutuel settings are correct (Virtual EPT Number provided, Site Code provided, initial security code provided as HMAC Secret, encryption with SHA1), told me all is fine from their side so the issue would be on my side.

As I don't see what is wrong, could you help me?

Best Regards,
Alain

Site config: Joomla! 2.5.11 ; CB 1.0 ; CBSubs 3.0.0

Please PM backend super administrator login credentials and will take a look as I need to review the IPN information sent by CIC Crédit Mutuel.

Have reviewed your install and CIC Crédit Mutuel does not appear to be configured correctly. There are no IPNs coming from CIC Crédit Mutuel, which is absolutely needed to activate the subscription as PDT does not return any information. Please ensure you've configured CIC Crédit Mutuel correctly as instructed in the CBSubs documentation.

Also note you're using the notify URL as recommended https, but your host does not provide a valid https certificate (self signed will not work). Please change the notify URL within CIC Crédit Mutuel to http and see if that resolves the issue of IPNs failing. The payment actually should not be allowed to complete unless the IPN was successful, but since it's bypassing this step entirely it means CIC Crédit Mutuel is no configured correctly.

During my tests you can see on the payment page "Return code: payetest CGI2: NOT OK". This means the IPN response failed and likely just due to the URL being https instead of http.

Hello,

Thanks a lot for your test on my site and your help.

So I requested CIC Crédit Mutuel to replace return URL from https to http (I can't do myself).

I hope URL in http will solve this incorrect Secret Key signature issue.

However, I'm surprise that you said my CIC Crédit Mutuel gateway configuration was incorrect.
I downloaded "CBSubs GPL 3.0 Extra Payment Gateways package" and installed "CIC Credit Mutuel - cbplug_processor_ciccreditmutuel-300.zip", then I followed all instructions inside manual 3.0 concerning CIC Crédit Mutuel, then I checked all settings with CIC Crédit Mutuel helpdesk who told me all settings were correct (Virtual EPT Number provided, Site Code provided, initial security code provided as HMAC Secret, encryption with SHA1).
What is or could be wrong in my installation or configuration?

Best Regards,
Alain

Hello,

I followed your advise (replacing return URL from https to http), but there are still incorrect Secret Key signature, so the payment isn't completed due to "Return code: payetest CGI2: NOT OK" and now we have also an error 500 (internal error of server) as response of my CGI of confirmation.

So I checked with the CIC Crédit Mutuel hotline that:
- confirmed me all my settings are corrects (Virtual EPT Number, Site Code, initial security code as HMAC Secret, encryption with SHA1. And I can ensure you I configured CIC Crédit Mutuel correctly as instructed in the CBSubs documentation). But, you told me in PM that my installation of CIC Crédit Mutuel does not appear to be configured correctly.
Could you tell me what is incorrect?

- told me the expected return would be: version=2, cdr=1 or 0 (as explained in their technical documentation) and advised to check implementation of my CGI2 URL.
Could you investigate the implementation of your CGI2 URL?

Anyway, could you tell me what I need to do to solve this issue?

Thanks in advance for your reply,
Best Regards,
Alain

The notif.php seams to be missing from your installation. It should be located at the following location.

components/com_comprofiler/plugin/user/plug_cbpaidsubscriptions/processors/ciccreditmutuel/notif.php

It should throw a 404 error if accessed directly or a 501 if the request data is invalid. A 500 error implies it's not there or something on your site is blocking its access (maybe htaccess?).