CiviCRM Community Forums (archive)

I need to use Intuit QuickBooks payment processor to align with our school's existing finance system. The directions posted on the wiki are very helpful and I'm most of the way there

/confluence/display/CRM/Setting+up+Intuit+QuickBooks+Payment+Processor+for+CiviCRM

I am stuck on the last part of Step 8.

CA Certificate – this is used by your server to verify Intuit’s server. It can be added to your keystore. Your keystore is a list of all of the certificates which your computer considers to be valid.

example (assumes you pasted the CA into the file /tmp/intuit.ca):
cat /tmp/intuit.ca >> /etc/ssl/certs/ca-certificates.crt

Intuit Certificate – this is the certificate presented by your application to the Intuit website to authenticate the system. It should be put in a SECURE place that your web server has access to.

Example (Certificate is located at):
/tmp/pems/intuit.pem (NOTE: For test applications, your Intuit certificate should be named as intuit-test.pem)

Your intuit.pem will be a combination of the key that you created in step 8 and the signed certificate provided by Intuit. You can achieve this by executing

cat /path/abc.com.key >> /tmp/pems/intuit.pem - PEM files need to be stored in /tmp/pems/intuit.pem

I am hosting the site on a shared server at CiviHosting (which has been FANTASTIC, can't recommend more highly). I have gotten my CA Certificate and my Intuit Certificate, but I have no idea what to do with them. My CA certificate "can be added to my keystore." Is that on my personal computer or on my server? I can't access /etc/ssl/certs/ on my server. And without command line access to my server I'm not sure what to do with this line:

cat /path/abc.com.key >> /tmp/pems/intuit.pem - PEM files need to be stored in /tmp/pems/intuit.pem

I have all the steps past Step 8 completed, and just need to get a valid connection ticket to have everything working. I have to launch in three weeks for the new school year, any advice is greatly appreciated.

Thanks!
Lisa

Hi Hershel,

I'm not sure it's a matter of telling Civi where it is (at this point) as much as it is getting Intuit to see it so they'll give me a connection ticket to input into Civi's QuickBooks configuration. Now that I'm reading again (for the 78th time) I think I created the .pem incorrectly, for starters.

"Your intuit.pem will be a combination of the key that you created in step 8 and the signed certificate provided by Intuit."

I think you created the key and sent it to me, I know you sent me a Certificate Request and I'm not sure if this is the same thing. I tried using that in the .pem but I'm still not getting a blank connection ticket when I execute step 9.

The worst part is that this is a testing version and I'm doing to need to do this all over again when I'm ready to go live.

Thanks for any additional thoughts you might have.

Lisa

The CiviCRM wiki page does actually say

PEM files need to be stored in /tmp/pems/intuit.pem

so perhaps that location is required. We put the file there for you now. Can you try it now and see if it works?

Well files in /tmp are inherently subject to deletion.

But I found in civicrm/CRM/Core/Payment/IntuitQuickbooks.php this code:

        if ( $this->_mode == 'live' ) {
          $this->_setParam( 'pemFile' , '/tmp/pems/intuit.pem' );
        } else {
          $this->_setParam( 'pemFile' , '/tmp/pems/intuit-test.pem' );
        }

As I wrote above, there has to be somewhere to tell the code where the .pem file is. I see now that it's hard-coded.

I changed that to use a different hard-coded location, which is in your account space yet not accessible via the web. Contact me offline for that location.

Anyhow, can you test now?

Hershel - not yet, the file generated by intuit.php (ticket.txt) is still blank.

Lobo - I'd so much rather use something else. I've sent an email to the director to see if using PayPal is a show stopper. It will not be happy news for the Business Director.

I believe we were not successful in the end.