Google Checkout API Error on co-hosted server

[ppooch]

We get an error from Goole :

{We encountered an error trying to access your server at https://shopsite.hostcentric.com/ss8.1/ ... 1879634177 -- the error we got is: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: basic constraints check failed: pathLenConstraint violated - this cert must be the last cert in the certification path }

The problem comes from the Notification Callback URL ID changing constantally in Shopsite, so that Google cannot ever find us - We receive NO orders in Shopsite that are placed on Google Checkout.

Our hosting company said that this was a Shopsite error that has not been fixed - Can anybody help or verify this?

Thanks!

[robm]

What kind of SSL certificate do you have? Google Checkout does not support a few low cost ones such as xramp. Reference:

http://checkout.google.com/support/sell ... topic=8671

The error you're getting may be related to your SSL certificate not being supported by Google. The callback URL is encrypted, and does change each time you look at it in the backoffice, but any URL you see will always work (you do not have to update it each time with Google), so this is not the issue.

[robm]

From looking at the SSL cert in your URL, it appears to be UTN-USERFirst-Hardware, which is on the approved list, but maybe their cert. is not configured correctly, as the google error message indicates a problem with the cert. path. Maybe have your host look at:

http://checkout.google.com/support/sell ... tx=sibling

[loren_d_c]

As Rob mentions, the "sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: basic constraints check failed: pathLenConstraint violated - this cert must be the last cert in the certification path" error would be an error caused by the secure certificate on your server, which is a hosting issue, not a ShopSite issue. The Google callback is unable to even reach the ShopSite thankyou.cgi at this point because of the cert issues.

FYI, if by "the Notification Callback URL ID changing constantally in Shopsite" you are referring to the gbstoreid value in the Notification Callback URL displayed to you in the ShopSite settings for Google Checkout, this is NOT an issue. Each time ShopSite displays this encrypted value it will appear differently, however each of the different values still maps back to your same ShopSite storeid (your login name) so it doesn't matter that it 'appears' to be different in encrypted form. The version of this encrypted value you saw when you entered the URL in Google Checkout will still work for Google Checkout later, even if you see a different encrypted version of it when you go back and look at the ShopSite screen. Note that this only applies to the gbstoreid value, if other aspects of your callback URL are changed by your hosting company (for example, if they move your store from the 'ss8.1' directory to a 'ss8.2' directory later when they upgrade you to a new ShopSite version, then this WOULD require you to update the setting in your Google Checkout account with the new callback URL with that new 'ss8.2' directory in the path.

-Loren