Preparation

SkipJack certificate is trusted by Equifax. Since the standard java cartcerts file doesn't include Equifax public certificate, H-Sphere returns 'Connect error, untrusted server cert chain' when trying to connect to the merchant gateway. The following are the solutions:
A. If you have got the default java cacerts file and you have never changed it, you can simply replace it with the cacerts file offered by psoft:
/usr/java/<java home>/jre/lib/security/cacerts
B. If you need to keep your cacerts file, you can fix this problem using the keytool feature available in the standard java installation:

1. Download equifax.crt.cer file:
   wget http://www.psoft.net/shiv/files/merchants/equifax.crt.cer
2. Place equifax.crt.cer in the /usr/java/jdk1.3.1/jre/lib/security/ directory
3. As root, allow read/write access to the /usr/java/jdk1.3.1/jre/lib/security/cacerts file
   chmod 666 /usr/java/jdk1.3.1/jre/lib/security/cacerts
4. Log in as the cpanel user:
   su -l cpanel
5. Go to the /usr/java/jdk1.3.1/jre/lib/security/ directory:
   cd /usr/java/jdk1.3.1/jre/lib/security/
6. Run the following command:
   keytool -import -alias equifax -file equifax.crt.cer -keystore cacerts
7. When prompted, enter the password (the default password is: changeit)
8. When asked to trust the certificate, enter: yes
9. As root, change permissions back on the /usr/java/jdk1.3.1/jre/lib/security/cacerts file:
   chmod 444 /usr/java/jdk1.3.1/jre/lib/security/cacerts

Configuration

1. Select SkipJack in the Add New Gateway box.
2. Click the Add button.
3. Fill out the form that appears:

   

   • Title: give a name to this SkipJack connection
   • Server: the name of the SkipJack server
   • Port: the port of the SkipJack server
   • Account ID: the HTML Serial Number you are given by SkipJack
   • Developer Account ID: the ID you are given when you sign up for a trial SkipJack account
4. Click Submit Query