[ic] missing credit card number on occasional orders

Neil Hambleton interchange-users@icdevgroup.org
Fri Dec 20 09:52:00 2002


> Neil Hambleton wrote:
>
> >About once a week a customer submits an order successfully, and the order
> >email is sent out, but with missing credit card deatils.
> >The order appears normal and can be viewed through the back-office.
> >Unfortunately there is no record of the credit card number anywhere.
> >The vast majority of orders are OK, but this occasional problem is
causing
> >some concern.
> >
> >In the error log I get:
> >192.234.241.102 5XbjaLGg:192.234.241.102 - [20/December/2002:01:00:04
+0800]
> >action-hq /cgi-bin/action-hq/process.html PGP failed with status 0:
> >
> >In the tmp/ directory I get 2 files created.
> >-rw-rw----    1 interch  interch         0 Dec 20 01:00
> >pgp.5XbjaLGg.32688.out
> >-rw-rw----    1 interch  interch       210 Dec 20 01:00
> >pgp.5XbjaLGg.32688.err
> >
> >pgp.5XbjaLGg.32688.err contains:
> >Pretty Good Privacy(tm) Version 6.5.8
> >(c) 1999 Network Associates Inc.
> >Uses the RSAREF(tm) Toolkit, which is copyright RSA Data Security, Inc.
> >Export of this software may be restricted by the U.S. government.
> >
> >It seems to relate to an PGP error (Status 0), yet most orders go through
> >encyption OK.
> >Since the .out file is empty, I presume there is no way to retrieve the
> >credit card number. But does anyone have any idea what is going wrong,
and
> >how I can avoid this in future?
> >
> >Thanks,
> >Neil
> >
> >IC 4.8.6
> >Redhat 7.3
> >
> >_______________________________________________
> >interchange-users mailing list
> >interchange-users@icdevgroup.org
> >http://www.icdevgroup.org/mailman/listinfo/interchange-users
> >
> >
> This has been gone over many times in the list....

Oops. Will widen my search criteria and be a bit more persistent next time.
Sorry.

> It seems AFAIR that
> PGP fails when there is a high load on the processor...

Looking at the pattern of when it has happened, I suspect you're right.

> The usual fix
> is to switch to "rpc" mode.  Don't foget to add
> MaxServers 0
>

Thanks for the advice, much appreciated. Will take a look at that.

Thanks again,
Neil