JBAS-1503 Avoid setting SILENTPOSTURL (TLS issues)
authorBill Erickson <berickxx@gmail.com>
Wed, 17 Aug 2016 12:45:23 +0000 (08:45 -0400)
committerBill Erickson <berickxx@gmail.com>
Thu, 21 Mar 2019 19:46:23 +0000 (15:46 -0400)
Force PP to use evgmobile via PP manager since it is not requiring
the use of TLS 1.2.  In other words, avoid setting the SILENTPOSTURL
from the apache host.

Signed-off-by: Bill Erickson <berickxx@gmail.com>
Open-ILS/src/perlmods/lib/OpenILS/WWW/EGCatLoader/PayflowHosted.pm

index a80b646..80f4923 100644 (file)
@@ -75,7 +75,8 @@ sub create_xact_token {
         $pf_params{CANCELURL} = "$host/eg/opac/biblio/main_fines";
         $pf_params{RETURNURL} = "$host/eg/opac/payflow/pay_receipt/$tokenid";
         $pf_params{ERRORURL}  = "$host/eg/opac/biblio/main_fines/$tokenid";
-        $pf_params{SILENTPOSTURL} = "$host/eg/opac/payflow/silent_post";
+        # KCLS uses evgmobile for now to avoid TLS 1.2.  REVISIT.
+        #$pf_params{SILENTPOSTURL} = "$host/eg/opac/payflow/silent_post";
     }
 
     my $api_server = $live_api_server;