question

devendra avatar image
devendra asked racheladmin Deactivated answered

Certificate exception while connecting with clover mini device.

Hi Team,

We are integrating xstore POS with clover Mini device. We are able to make connection with clover Mini device on Dev Kit, but for same code snipet in production we are not able to connect with clover mini device and getting the certificate exception. Refer attached screenshot for the exception.We are suspecting that this is causing due to wrong certificate. Can we use the same certificate in the production kit that we are using in dev kit. If not how can we get certificate for production kit?Also, we are using jre 1.8.0_172 in production kit whereas in dev kit using jre 1.8.0_112 . Could that be an issue, if so please let us know.

Thanks in advance!!

Regards,
Devendra
Clover MiniProduction
exception.png (378.2 KiB)
10 |2000
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

3 Answers

racheladmin avatar image
racheladmin Deactivated answered racheladmin Deactivated edited
@Devendra,

You're right, it's a cert problem. Please review https://docs.clover.com/build/secure-network-pay-display/, which explains the two certs and how to toggle SNPD's development certificate setting. Here's a code sample for adding both certs to your POS's trustStore: https://github.com/clover/remote-pay-java/blob/master/clover-connector-java-example-pos/src/main/java/com/clover/remote/client/lib/example/utils/SecurityUtils.java

When you check or uncheck "Enable Development Certificate" in SNPD's settings, you have to tap "Configure and Restart Server" for it to take effect. You can then make sure that the correct CA issued the device server's certificate by tapping "View Certificate Details." (For more information about the CAs, refer to https://docs.clover.com/build/secure-network-pay-display/.)


snpd-settings3.png (131.1 KiB)
view-certificate-details.png (204.9 KiB)
10 |2000
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

devendra avatar image
devendra answered
Hi Rachel,

Thanks for the info on certificates. However I have few below questions how to use them in better way:

  1. Is it advisable to create .truststore file at our POS side with both prod and dev certificates after downloading from your links and then use the same .truststore file in our code for connection?
  2. OR we can place both certificates at configured path in our machine (after downloading from your given links) and then load them in code in run time just like your code snippet?
  3. Also should we download certificates from your given link and use them, OR we should be using URL as one of the way in code snippet (e.g. https://www.clover.com/v2/env_device_ca_certificat... is there any possibility that these certificates will be updated in future and then again we have to download them again?
  4. As per your one of the comment before we are launching the app in prod environment, we need to fill testing and validation form. Is this mandatory process and why it is required? Just for our info.
  5. Also who is required to fill this form, we who are developing the code for semi-integration between Clover mini and POS (in sand box env), OR our client (in prod env) who will be the end user of this application?
Please let us know if any confusion on any of the above.

Thanks.
10 |2000
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

racheladmin avatar image
racheladmin Deactivated answered
You can download env_device_ca_certificate and device_ca_certificate, and load them like in the example. Eventually, the certificates will expire, but that's in 2026 for the development cert, by which time deployments that use it should have been phased out, and the end of 2029 for Clover Prod Terminal Server Root; however, as a practical matter, you shouldn't need to download them again.

Testing and validation is mandatory. As the integrator, you are required to complete that process. You can demonstrate the integration's features with your devkit; you don't need a prod merchant.
10 |2000
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Welcome to the
Clover Developer Community