I have a call into Geotrust about the servers, but expect to hear back after Thanksgiving. They do assure me that the type of server does not actually drive the generation of the cert, instead it is used for support later.
1- Re: Order empty Items, We are currently working on this issue. 2- GB vs UK. Tucows uses ISO 3166 for our list, and UK is not actually an ISO code, instead it is GB. BUT...seems that in the display it is showing Great Britain instead of United Kingdom as it should. I'll log this issue. 3- We agree- orders going to rejected instead are more intuitive. I am currently re-evaluating rejection and how to improve the handling in short order. As for the other issues listed below, we have a team working specifically on the certs issues, and expect to publish a patch release mid-December to address many of those issues. Kim Phelan Product Manager Tucows, Inc. [EMAIL PROTECTED] -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Rob Macleod Sent: Thursday, November 28, 2002 7:44 PM To: [EMAIL PROTECTED] Cc: Kim Phelan Subject: RE: And still more New Cert Problems In line preceeded with #### and support blind copied to protect their email address. Do you have a response from GeoTrust yet on what servers are actually supported and which ones should be in the cert.conf file - as highlighted in my previous email ? 1) If the email address is invalid (I actually put the fax number in as all the other entry pages are formatted phone number then fax number and I was not reading what was there) These orders failing at the client side and going to pending in the RWI but the order detail was not being attached, so even though I can correct the contact details for the user I can not then submit the order. This is the cause of the "Order contains no active order items" error. 2) I am entering United Kingdom in my coutry but this is being converted to Great Britain in the contact details. This is wrong. If I had choosen Great Britain as my country it should have been converted to United Kingdom. The ISO assignment for the United Kingdom is (incorrectly) defined as GB. The correct legal entity is the United Kingdom not Great Britain. Great Britain includes the Isle of Man and the Channel Islands which have their own governments. 3) I get "Failed to create order: Cannot fulfill order." at the client side but in the RWI I get:- 28-NOV-2002 11:52:21 Certificate request has being sent to supplier 28-NOV-2002 11:52:22 Supplier rejected the request 28-NOV-2002 11:52:22 Certificate request not accepted by supplier I assume that this means that the CSR has a problem but the error handling needs fixing-up in the client for this. In the RWI these orders are then flagged as Cancelled - shouldn't they be rejected ? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Kim Phelan Sent: 28 November 2002 22:03 To: Rob Macleod; [EMAIL PROTECTED] Subject: RE: And still more New Cert Problems I appreciate your feedback, and I have answered your questions below. I have numbered each of your concerns to make it easier to track. My responses are prefixed with >>>> Keep in mind, that these types of issues are best addressed through support - they are better equipped to track and respond consistently (but we still appreciate this forum, as it allows us to answer the same to a wider audience) Kim Phelan Product Manager Tucows, Inc. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Rob Macleod Sent: Thursday, November 28, 2002 2:10 PM To: [EMAIL PROTECTED] Subject: And still more New Cert Problems and some more ..... 1) The Edit button does not allow you to change the certificate type or when using QuickSSL or QuickSSL Premium the domain name. >>>> This is a current limitation, but it is temporary (i.e. we know, and we're fixing) 2) I have the setting turned on to email me when orders fail and go to pending but I am not receieving an email when this happens with the certificates. >>>> The setting you are describing is for domain orders. You will get an email when the order is rejected by the supplier for certs, take a look at your settings for certificates to see if this is enabled, if you are not receiving it as you are supposed to, please let Support know, we'll investigate. #### If an order fails and is cancelled or goes to pending, or I cancel it from the RWI, ot email is sent nor are there any configuration options available on the new system for this. Why are the layouts different - The OpenSRS "interface" is becoming more fragmented and inconsistent. Given that both the client & RWI are the user interface they should meet the standard criteria for such - namely that they are consistent and intuitive - I do not see a sensible reason for the the difference between Domain and Certificate. 3) I finally got one order to go through. I then received an email from GeoTrust instructing me to go to a GeoTrust branded site, complete with "Buy Now" options, to approve the cert and then another GeoTrust email when the cert is issued. Is this going to remain like this or are we going to have a more reseller friendly option ? >>>> I'll talk to Geotrust to make a more generic view for the approver. #### And the emails ? 4) Now that the order is Completed and shows as such in the order summary but if I go into the detail of the order ID it shows that it is still in progress. The OrderID contains 1 ItemID which shows as Complete. >>>> Known issue - the item IS actually completed, and the order as well. We are working to resolve the inconsistency in the views. 5) If I use the RWI I cannot add an item and process it, I have to save it to pending then process the order on a seperate page. >>>> Excellent point. We'll take it into consideration to be able to process immediately at the end of one order item (thus expediating the final step). As a general comment, we do this so you can continue to add items to your order and review; this paves the way to be able to buy multiple products (of different types) from the same order (i.e. "shopping cart"). #### Which is only applicable to the RWI - see my final comments against item 8) re this. 6) If I add multiple item via the RWI then cancel them I have to cancel them individiually, I cannot cancel an entire order.' >>>> Since each order item goes through it's own processing separately, they could be in different states at once (some cancellable and some not). This is why we do not permit a cross order cancel. We'll consider the ability to cancel all if all are cancellable (good suggestion!) 7) If I add multiple item via the RWI then cancel some of them when I submit the order the cancelled orders and processed and fail ! Error (200) when processing item ID #824: Request completed successfully Error (200) when processing item ID #825: Request completed successfully Error (200) when processing item ID #826: Request completed successfully >>>> I think we need to delve into this one further - You can submit multiple orders for certs at once, even if some are cancelled... If you could please send Support the order details (I have tried this function and could not duplicate your problem), we can investigate (don't forget to mention whether you're using the Live or Test system). #### It is on the test system - OrderIDs are 824, 825 & 826 8) Wildcard certifactes do not appear to work at all:- Error (9007) when processing item ID #827: Order request failed: Error Submitting Order. Invalid Field: OrderParameters, CSR Problem: Field ''isAssumedWildCard'' does not match the CSR (-2006): OrderParameters, CSR Cannot fulfill order. >>>> We have a check in our system that checks to see if the CSR is actually a wildcard cert. If it is not, it will error out. I believe that this is the case here as we have successfully sold a number of wildcard certs so far without a problem. You can check to ensure that your CSR is for a *.domain.com yourself, by going to the Geotrust site at https://products.geotrust.com/ssl/quickssl.do - if you are unsure, you can contact Support. ** Side note - yes, the error messages are ... not as sugar coated as they could be. We strove for functionality first, and are working on aesthetics now (currently in progress). #### This is not documented in the how to generate a CSR - given the high value (and thus high profit) of these items this is important that the information provide is accurate and relevant - and the error is not handled cleanly or accurately in the client. I am using the documentation provided by OpenSRS & GeoTrust to do this - If I can't do it how can our customers - failed orders lead to lost orders. Error handling on the client side is not an aesthetic - it is a core functional requuirement. If neither the customer or the reseller gets any indication of why a transaction has failed, it generates unnecessary work for both the resellers and OpenSRS while the customer may decide to go else where as the process does not seem very "professional". It took me a number of hours to determine that the email address which had been entered was invaled and causing the failure - this sort of checking really should be client side not server side anyway. I think you should tell us that it is raw and functional and not "complete" - together with a list of known issues and limitations - rather than waiting for us to bitch about it. 9) As only one certificate can be ordered at a time the whole OrderID and ItemID setup seems unwieldly, excessively confusing and unnecessary. >>>> I'd like to reiterate: more than one item can be ordered at one time. Imagine in the future, you want to order different types of products for one customer, this order process will allow you to do so. We will investigate streamlining a one-to-one scenario in future. #### I think that it should be kept in mind that the RWI is a "Lite" solution and unlikely to be utilised by high volume resellers (I know, sadly, that I am not currently a high volume reseller, but I aim to be) the focus/favour should be on a smooth and effecient solution for the automated full integration customers and not the RWI - IMHO. 10) There are no configuration option for me to receive email when an order is placed etc - when are these options going to be available ? >>>> There are currently confirmations when orders are fulfilled, revoked and cancelled. Order placement confirmation (and applicable options) to come Q1 2003. #### No there aren't - only the customer gets emails not the reseller and then only on success. There is no ability to configure these and no email is being sent to any addrress when they are cancelled or fail neither reseller or customer - I believe that these are critical 11) All in all this is not very impressive - It reminds me of my old school reports "..could do much better..." >>>> Understood. We appreciate your feedback always and are continuing to work on these issues as they arise. Kim Phelan Product Manager Tucows, Inc.
