|
CheckSig Code & Specification
CheckSig is an application used to verify signatures returned with eSec
Payment Gateway transactions.
CheckSig is a web-based application that expects to be given the
value of the "referenceid" parameter, the authorisation id from the
financial institution, and a signature (all of which may be extracted from the
Payment Gateway transaction response), and the transaction amount (which must be
provided by the merchant's purchasing system).
The querystring parameters that must be provided to the CheckSig URL are as
follows:
| EPS_MERCHANTID |
The eSec merchant ID to which the payment was sent |
| EPS_TEST |
"true" or "false" flag, denoting the test status of the payment |
| referenceID |
The reference id of the transaction |
| authID |
The authorisation id of the transaction, returned in the payment response |
| amount |
The amount of the transaction, in Australian cents, e.g. $12.15 = "1215" |
| signature |
The signature returned with the payment response |
The following command line parameters are optional and may be used to modify
the default operation of the CheckSig program:
The result of the signature verification may be determined by parsing the
HTML output page for the strings:
"The signature attached to this transaction has been successfully authenticated."; OR
"The signature attached to this transaction cannot be authenticated."
Example CheckSig URL
https://sec.aba.net.au/cgi-bin/service/checksig?EPS_MERCHANT=informedtech&EPS_TEST=true&authID=004808&referenceID=4594%3b%20%2015693&amount=10&signature=ZjeqsuqFRyyBp%2b0kTC0zlvnGShYWbJ84rCf1xix%2b983l4n5A2F6eWtpuPNavOqTyHcNLS8cntIlSDNpr4OPpgS1Z17Yu7wyEF1qZxW0nqxrZi/gHIJDJ%2bDAdSBDHvK8wqDD9xs2XZKvYusjsivHXFMRGAPH48jrxRiJaJOQ1VU8=
|
