In line preceeded with #### and support blind copied to protect their email
address.

Do you have a response from GeoTrust yet on what servers are actually
supported and which ones should be in the cert.conf file - as highlighted in
my previous email ?

1)      If the email address is invalid (I actually put the fax number in as all
the other entry pages are formatted phone number then fax number and I was
not reading what was there) These orders failing at the client side and
going to pending in the RWI but the order detail was not being attached, so
even though I can correct the contact details for the user I can not then
submit the order. This is the cause of the "Order contains no active order
items" error.

2)      I am entering United Kingdom in my coutry but this is being converted to
Great Britain in the contact details. This is wrong. If I had choosen Great
Britain as my country it should have been converted to United Kingdom.
The ISO assignment for the United Kingdom is (incorrectly) defined as GB.
The correct legal entity is the United Kingdom not Great Britain. Great
Britain includes the Isle of Man and the Channel Islands which have their
own governments.

3)      I get "Failed to create order: Cannot fulfill order." at the client side
but in the RWI I get:-
28-NOV-2002 11:52:21   Certificate request has being sent to supplier
28-NOV-2002 11:52:22   Supplier rejected the request
28-NOV-2002 11:52:22   Certificate request not accepted by supplier

I assume that this means that the CSR has a problem but the error handling
needs fixing-up in the client for this. In the RWI these orders are then
flagged as Cancelled - shouldn't they be rejected ?

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Kim Phelan
Sent: 28 November 2002 22:03
To: Rob Macleod; [EMAIL PROTECTED]
Subject: RE: And still more New Cert Problems


I appreciate your feedback, and I have answered your questions below. I have
numbered each of your concerns to make it easier to track.  My responses are
prefixed with >>>>

Keep in mind, that these types of issues are best addressed through
support - they are better equipped to track and respond consistently (but we
still appreciate this forum, as it allows us to answer the same to a wider
audience)

Kim Phelan
Product Manager
Tucows, Inc.


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Rob Macleod
Sent: Thursday, November 28, 2002 2:10 PM
To: [EMAIL PROTECTED]
Subject: And still more New Cert Problems


and some more .....

1) The Edit button does not allow you to change the certificate type or when
using QuickSSL or QuickSSL Premium the domain name.

>>>> This is a current limitation, but it is temporary (i.e. we know, and
we're fixing)

2) I have the setting turned on to email me when orders fail and go to
pending but I am not receieving an email when this happens with the
certificates.

>>>> The setting you are describing is for domain orders.  You will get an
email when the order is rejected by the supplier for certs, take a look at
your settings for certificates to see if this is enabled, if you are not
receiving
it as you are supposed to, please let Support know, we'll investigate.

#### If an order fails and is cancelled or goes to pending, or I cancel it
from the RWI, ot email is sent nor are there any configuration options
available on the new system for this.
Why are the layouts different - The OpenSRS "interface" is becoming more
fragmented and inconsistent. Given that both the client & RWI are the user
interface they should meet the standard criteria for such - namely that they
are consistent and intuitive - I do not see a sensible reason for the the
difference between Domain and Certificate.

3) I finally got one order to go through. I then received an email from
GeoTrust instructing me to go to a GeoTrust branded site, complete with "Buy
Now" options, to approve the cert and then another GeoTrust email when the
cert is issued.
Is this going to remain like this or are we going to have a more reseller
friendly option ?

>>>> I'll talk to Geotrust to make a more generic view for the approver.

#### And the emails ?

4) Now that the order is Completed and shows as such in the order summary
but if I go into the detail of the order ID it shows that it is still in
progress. The OrderID contains 1 ItemID which shows as Complete.

>>>> Known issue - the item IS actually completed, and the order as well. We
are working to resolve the inconsistency in the views.

5) If I use the RWI I cannot add an item and process it, I have to save it
to pending then process the order on a seperate page.

>>>> Excellent point.  We'll take it into consideration to be able to
process immediately at the end of one order item (thus expediating the final
step).

As a general comment, we do this so you can continue to add items to your
order and review; this paves the way to be able to buy multiple products (of
different types) from the same order (i.e. "shopping cart").

#### Which is only applicable to the RWI - see my final comments against
item 8) re this.

6) If I add multiple item via the RWI then cancel them I have to cancel them
individiually, I cannot cancel an entire order.'

>>>> Since each order item goes through it's own processing separately, they
could be in different states at once (some cancellable and some not). This
is why we do not permit a cross order cancel.  We'll consider the ability to
cancel all
if all are cancellable (good suggestion!)

7) If I add multiple item via the RWI then cancel some of them when I submit
the order the cancelled orders and processed and fail !
Error (200) when processing item ID #824: Request completed successfully
Error (200) when processing item ID #825: Request completed successfully
Error (200) when processing item ID #826: Request completed successfully

>>>> I think we need to delve into this one further -
You can submit multiple orders for certs at once, even if some are
cancelled...
If you could please send Support the order details (I have tried this
function and could not duplicate your problem), we can investigate (don't
forget to mention whether you're using the Live or Test system).

#### It is on the test system - OrderIDs are 824, 825 & 826

8) Wildcard certifactes do not appear to work at all:-
Error (9007) when processing item ID #827: Order request failed: Error
Submitting Order. Invalid Field: OrderParameters, CSR Problem: Field
''isAssumedWildCard'' does not match the CSR (-2006): OrderParameters, CSR
Cannot fulfill order.

>>>> We have a check in our system that checks to see if the CSR is actually
a wildcard cert.
If it is not, it will error out. I believe that this is the case here as we
have successfully sold a number of wildcard certs so far without a problem.

You can check to ensure that your CSR is for a *.domain.com yourself, by
going to the Geotrust site at
 https://products.geotrust.com/ssl/quickssl.do - if you are unsure, you can
contact Support.

** Side note - yes, the error messages are ... not as sugar coated as they
could be. We strove for functionality first, and are working on aesthetics
now (currently in progress).

#### This is not documented in the how to generate a CSR - given the high
value (and thus high profit) of these items this is important that the
information provide is accurate and relevant - and the error is not handled
cleanly or accurately in the client. I am using the documentation provided
by OpenSRS & GeoTrust to do this - If I can't do it how can our customers -
failed orders lead to lost orders.
Error handling on the client side is not an aesthetic - it is a core
functional requuirement. If neither the customer or the reseller gets any
indication of why a transaction has failed, it generates unnecessary work
for both the resellers and OpenSRS while the customer may decide to go else
where as the process does not seem very "professional". It took me a number
of hours to determine that the email address which had been entered was
invaled and causing the failure - this sort of checking really should be
client side not server side anyway.

I think you should tell us that it is raw and functional and not
"complete" - together with a list of known issues and limitations - rather
than waiting for us to bitch about it.

9) As only one certificate can be ordered at a time the whole OrderID and
ItemID setup seems unwieldly, excessively confusing and unnecessary.

>>>> I'd like to reiterate: more than one item can be ordered at one time.
Imagine in the future, you want to order different types of products for one
customer, this order process will allow you to do so.
We will investigate streamlining a one-to-one scenario in future.

#### I think that it should be kept in mind that the RWI is a "Lite"
solution and unlikely to be utilised by high volume resellers (I know,
sadly, that I am not currently a high volume reseller, but I aim to be) the
focus/favour should be on a smooth and effecient solution for the automated
full integration customers and not the RWI - IMHO.

10) There are no configuration option for me to receive email when an order
is placed etc - when are these options going to be available ?

>>>> There are currently confirmations when orders are fulfilled, revoked
and cancelled. Order placement confirmation (and applicable options) to come
Q1 2003.

#### No there aren't - only the customer gets emails not the reseller and
then only on success.
There is no ability to configure these and no email is being sent to any
addrress when they are cancelled or fail neither reseller or customer - I
believe that these are critical

11) All in all this is not very impressive - It reminds me of my old school
reports "..could do much better..."

>>>> Understood.  We appreciate your feedback always and are continuing to
work on these issues as they arise.

Kim Phelan
Product Manager
Tucows, Inc.


Reply via email to