Hi guys, .... anyone with ideas of how to export mpesa client-certificates from IE to firefox, and then successfully access the mpesa site on firefox ... or, anyone with ideas of how to access the mpesa site (ke.mpesa.com/ke) using curl on php? i've tried setting up the client-certifiate on curl, but still doesnt work.
About a year ago I converted the mpesa certificate to a Personal Information Exchange format (.p12) that is exportable to Firefox and the commonly used browser but I can't figure out I managed to do that. To convert it to .p12/pfx format you would need the private key that was used to generate the certificate which I highly doubt that you would get.
MPESA only works with Internet Explorer and windows XP try another Os or Browser and u will not make it On Wed, Oct 5, 2011 at 12:05 PM, Jesse M <jaysie05@gmail.com> wrote:
About a year ago I converted the mpesa certificate to a Personal Information Exchange format (.p12) that is exportable to Firefox and the commonly used browser but I can't figure out I managed to do that.
To convert it to .p12/pfx format you would need the private key that was used to generate the certificate which I highly doubt that you would get.
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
Hey guys, I would like to know more about this M-Pesa certificate / website topic. o_o ________________________________ From: Joseph Maina <mainasoft00@gmail.com> To: Skunkworks Mailing List <skunkworks@lists.my.co.ke> Sent: Wednesday, October 5, 2011 12:27 PM Subject: Re: [Skunkworks] mpesa on firefox MPESA only works with Internet Explorer and windows XP try another Os or Browser and u will not make it On Wed, Oct 5, 2011 at 12:05 PM, Jesse M <jaysie05@gmail.com> wrote: About a year ago I converted the mpesa certificate to a Personal Information Exchange format (.p12) that is exportable to Firefox and the commonly used browser but I can't figure out I managed to do that.
To convert it to .p12/pfx format you would need the private key that was used to generate the certificate which I highly doubt that you would get.
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://orion.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
If you can manage to convert it to PFX, you can run it on any browser and any operating system. Currently have one running on Firefox on a linux platform. The biggest challenge/limitation is how to convert it.
If you can manage to convert it to PFX, you can run it on any browser and any operating system. Currently have one running on Firefox on a linux platform. The biggest challenge/limitation is how to convert it. On Wed, Oct 5, 2011 at 12:43 PM, wesley kirinya <kiriinya2000@yahoo.com>wrote:
Hey guys,
I would like to know more about this M-Pesa certificate / website topic.
o_o
------------------------------ *From:* Joseph Maina <mainasoft00@gmail.com> *To:* Skunkworks Mailing List <skunkworks@lists.my.co.ke> *Sent:* Wednesday, October 5, 2011 12:27 PM *Subject:* Re: [Skunkworks] mpesa on firefox
MPESA only works with Internet Explorer and windows XP try another Os or Browser and u will not make it
On Wed, Oct 5, 2011 at 12:05 PM, Jesse M <jaysie05@gmail.com> wrote:
About a year ago I converted the mpesa certificate to a Personal Information Exchange format (.p12) that is exportable to Firefox and the commonly used browser but I can't figure out I managed to do that.
To convert it to .p12/pfx format you would need the private key that was used to generate the certificate which I highly doubt that you would get.
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
On Wed, Oct 5, 2011 at 12:27 PM, Joseph Maina <mainasoft00@gmail.com> wrote:
MPESA only works with Internet Explorer and windows XP
i have successfully used the mpesa site with Windows7 + Chrome , Win2k8 Server + Chrome , Win2k8server + Firefox, Windows7+Firefox try another Os or Browser and u will not make it
On Wed, Oct 5, 2011 at 12:05 PM, Jesse M <jaysie05@gmail.com> wrote:
About a year ago I converted the mpesa certificate to a Personal Information Exchange format (.p12) that is exportable to Firefox and the commonly used browser but I can't figure out I managed to do that.
To convert it to .p12/pfx format you would need the private key that was used to generate the certificate which I highly doubt that you would get.
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
n Wed, Oct 5, 2011 at 1:27 PM, Kiti Chigiri <kiti.chigiri@gmail.com> wrote:
On Wed, Oct 5, 2011 at 12:27 PM, Joseph Maina <mainasoft00@gmail.com> wrote:
MPESA only works with Internet Explorer and windows XP
i have successfully used the mpesa site with Windows7 + Chrome , Win2k8 Server + Chrome , Win2k8server + Firefox, Windows7+Firefox
Show us how .......
try another Os or Browser and u will not make it
On Wed, Oct 5, 2011 at 12:05 PM, Jesse M <jaysie05@gmail.com> wrote:
About a year ago I converted the mpesa certificate to a Personal Information Exchange format (.p12) that is exportable to Firefox and the commonly used browser but I can't figure out I managed to do that.
To convert it to .p12/pfx format you would need the private key that was used to generate the certificate which I highly doubt that you would get.
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
On Wed, Oct 5, 2011 at 1:27 PM, Kiti Chigiri <kiti.chigiri@gmail.com> wrote:
On Wed, Oct 5, 2011 at 12:27 PM, Joseph Maina <mainasoft00@gmail.com>wrote:
MPESA only works with Internet Explorer and windows XP
i have successfully used the mpesa site with Windows7 + Chrome , Win2k8 Server + Chrome , Win2k8server + Firefox, Windows7+Firefox
try another Os or Browser and u will not make it
On Wed, Oct 5, 2011 at 12:05 PM, Jesse M <jaysie05@gmail.com> wrote:
About a year ago I converted the mpesa certificate to a Personal Information Exchange format (.p12) that is exportable to Firefox and the commonly used browser but I can't figure out I managed to do that.
To convert it to .p12/pfx format you would need the private key that was used to generate the certificate which I highly doubt that you would get.
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
Hey John Doe, I have a suggestion/experiment for you. From the pieces of info other guys have shared: Joseph and Kiti say that it works on Windows only. I think the certificate is using some certificate authority that only Windows is familiar with. Windows has a certificate store which contains a list of trusted Certificate Authorities (CAs) that Windows OS trusts. IE can access this CA store without showing the dialog boxes. However other browsers have their own CA store, and that's why you may not be able to use them with certificates signed using the Windows CA. However Kiti says that those other browsers can work provided you are in a Windows environment, it would be good if Kiti tells us which versions of those browsers he's running because the newer versions could be accessing the Windows CA store besides their own CA store. Now, about curl: I think you have 2 options: 1. Export the Windows CA store bundle and let curl point to it. If that doesn't work, try option 2 below: 2. Windows can allow you to access it's CA store. You may need to make some modifications to curl and do a custom build. The modification will be to let CURL access the windows CA store and use it to authenticate the certificate that you're getting from M-Pesa. You can Google if there already exists such a build for curl before diving into its code. Hope that makes sense. O_O ________________________________ From: John Doe Smith Kamau KipNg'etich Jones <skunkworks.ku@gmail.com> To: Skunkworks Mailing List <skunkworks@lists.my.co.ke> Sent: Wednesday, October 5, 2011 11:37 AM Subject: [Skunkworks] mpesa on firefox Hi guys, .... anyone with ideas of how to export mpesa client-certificates from IE to firefox, and then successfully access the mpesa site on firefox ... or, anyone with ideas of how to access the mpesa site (ke.mpesa.com/ke) using curl on php? i've tried setting up the client-certifiate on curl, but still doesnt work. _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
What's going on here...? You mean I can access my m-pesa via the internet? Since when? @joseph, could you please give us some screenshots, since it is working on your side? Timo. On 10/5/11, wesley kirinya <kiriinya2000@yahoo.com> wrote:
Hey John Doe,
I have a suggestion/experiment for you. From the pieces of info other guys have shared:
Joseph and Kiti say that it works on Windows only. I think the certificate is using some certificate authority that only Windows is familiar with. Windows has a certificate store which contains a list of trusted Certificate Authorities (CAs) that Windows OS trusts. IE can access this CA store without showing the dialog boxes. However other browsers have their own CA store, and that's why you may not be able to use them with certificates signed using the Windows CA. However Kiti says that those other browsers can work provided you are in a Windows environment, it would be good if Kiti tells us which versions of those browsers he's running because the newer versions could be accessing the Windows CA store besides their own CA store.
Now, about curl: I think you have 2 options: 1. Export the Windows CA store bundle and let curl point to it. If that doesn't work, try option 2 below: 2. Windows can allow you to access it's CA store. You may need to make some modifications to curl and do a custom build. The modification will be to let CURL access the windows CA store and use it to authenticate the certificate that you're getting from M-Pesa. You can Google if there already exists such a build for curl before diving into its code.
Hope that makes sense.
O_O
________________________________ From: John Doe Smith Kamau KipNg'etich Jones <skunkworks.ku@gmail.com> To: Skunkworks Mailing List <skunkworks@lists.my.co.ke> Sent: Wednesday, October 5, 2011 11:37 AM Subject: [Skunkworks] mpesa on firefox
Hi guys,
.... anyone with ideas of how to export mpesa client-certificates from IE to firefox, and then successfully access the mpesa site on firefox
... or, anyone with ideas of how to access the mpesa site (ke.mpesa.com/ke) using curl on php? i've tried setting up the client-certifiate on curl, but still doesnt work. _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
@Timothy, The option being discussed here is only for those businesses which have bill numbers, the 6-digit number. They use this to manage the funds online. Regards, On Wed, Oct 5, 2011 at 2:42 PM, Timothy Mutugi <timothymutugi@gmail.com> wrote:
What's going on here...?
You mean I can access my m-pesa via the internet?
Since when?
@joseph, could you please give us some screenshots, since it is working on your side?
Timo.
On 10/5/11, wesley kirinya <kiriinya2000@yahoo.com> wrote:
Hey John Doe,
I have a suggestion/experiment for you. From the pieces of info other guys have shared:
Joseph and Kiti say that it works on Windows only. I think the certificate is using some certificate authority that only Windows is familiar with. Windows has a certificate store which contains a list of trusted Certificate Authorities (CAs) that Windows OS trusts. IE can access this CA store without showing the dialog boxes. However other browsers have their own CA store, and that's why you may not be able to use them with certificates signed using the Windows CA. However Kiti says that those other browsers can work provided you are in a Windows environment, it would be good if Kiti tells us which versions of those browsers he's running because the newer versions could be accessing the Windows CA store besides their own CA store.
Now, about curl: I think you have 2 options: 1. Export the Windows CA store bundle and let curl point to it. If that doesn't work, try option 2 below: 2. Windows can allow you to access it's CA store. You may need to make some modifications to curl and do a custom build. The modification will be to let CURL access the windows CA store and use it to authenticate the certificate that you're getting from M-Pesa. You can Google if there already exists such a build for curl before diving into its code.
Hope that makes sense.
O_O
________________________________ From: John Doe Smith Kamau KipNg'etich Jones <skunkworks.ku@gmail.com> To: Skunkworks Mailing List <skunkworks@lists.my.co.ke> Sent: Wednesday, October 5, 2011 11:37 AM Subject: [Skunkworks] mpesa on firefox
Hi guys,
.... anyone with ideas of how to export mpesa client-certificates from IE to firefox, and then successfully access the mpesa site on firefox
... or, anyone with ideas of how to access the mpesa site (ke.mpesa.com/ke) using curl on php? i've tried setting up the client-certifiate on curl, but still doesnt work. _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
For those of you requesting for a screen shot; Firefox on windows 7
Hi, Thanks for the many replies... didnt expect so much feedback :-) ... just need help exporting the cert correctly from IE, then converting it to IE. Would anyone mind sharing the procedure with everyone on the list... btw, do I need to export the client-certificate only, or would I also need to export the vodacom server cert? On 10/5/11, Timothy Mutugi <timothymutugi@gmail.com> wrote:
Ooooh, OK, Thanks guys...:-)
Timo.
On 10/5/11, Jesse M <jaysie05@gmail.com> wrote:
For those of you requesting for a screen shot;
Firefox on windows 7
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
On 10/5/11 11:37 AM, John Doe Smith Kamau KipNg'etich Jones wrote:
... or, anyone with ideas of how to access the mpesa site (ke.mpesa.com/ke) using curl on php? i've tried setting up the client-certifiate on curl, but still doesnt work.
You could/should look at PesaPi - it has code that does exactly this: http://github.com/pluspeople/PesaPi .. Mike
Smith or is it Kamau or Jones.................dude you have so many names!! Anyways you can export the certificates in a staright away fashion. Just go to Control Panel(I assume you are using Windows XP) The double click 'Internet options' and then go to Content Tab Under the content Tab click on 'Certificates' Click on the Vodafone VME Cert that you want to Export Click on the Export buuton below and choose where to export the cert The save and now you have ur cert on the go which you can install it on another comp. Please note that windows 7 uses two certificate so you just need to request for another certificate. Best On Thu, Oct 6, 2011 at 11:07 AM, Michael Pedersen <sku@kaal.dk> wrote:
On 10/5/11 11:37 AM, John Doe Smith Kamau KipNg'etich Jones wrote:
... or, anyone with ideas of how to access the mpesa site (ke.mpesa.com/ke) using curl on php? i've tried setting up the client-certifiate on curl, but still doesnt work.
You could/should look at PesaPi - it has code that does exactly this: http://github.com/pluspeople/**PesaPi<http://github.com/pluspeople/PesaPi>
.. Mike
______________________________**_________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/**mailman/listinfo/skunkworks<http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks> ------------ Skunkworks Rules http://my.co.ke/phpbb/**viewtopic.php?f=24&t=94<http://my.co.ke/phpbb/viewtopic.php?f=24&t=94> ------------ Other services @ http://my.co.ke
-- Jackson Gathoni
@michael:: Yeah!! thanks for the contribution Michael!! You're code (specifically the regex and POST part... i.e posting stuff like the view_state, account data, etc) address issues I wouldn't have solved (or even discovered) myself!... would have run into lots of trouble. I hope you wouldn't mind me copying some bits of you're code :-). just the parts that involve loading the transaction page as I already have some regex to read the transaction records themselves. however (given the nature of my problem), i'm using curl_multi to make parallel curl requests as opposed to you're technique. if anyone's interested, I could bundle it up into a neat class with instructions on how to use it... @everyone else:: to use m-pesa on any other browser, you'll need to export you're certificate together with its private key. you cant normally do that, so you'll need a tool like this one [https://www.isecpartners.com/application-security-tools/jailbreak.html] to pull it off. you can then import the exported key-cert into any other browser.... be careful though. if anyone gets access to that export, they can impersonate you. On 10/6/11, Michael Pedersen <sku@kaal.dk> wrote:
On 10/5/11 11:37 AM, John Doe Smith Kamau KipNg'etich Jones wrote:
... or, anyone with ideas of how to access the mpesa site (ke.mpesa.com/ke) using curl on php? i've tried setting up the client-certifiate on curl, but still doesnt work.
You could/should look at PesaPi - it has code that does exactly this: http://github.com/pluspeople/PesaPi
.. Mike
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
On 10/6/11 1:33 PM, John Doe Smith Kamau KipNg'etich Jones wrote:
@michael:: You're code (specifically the regex and POST part... i.e posting stuff like the view_state, account data, etc) address issues I wouldn't have solved (or even discovered) myself!.... I hope you wouldn't mind me copying some bits of you're code :-). just the parts that involve loading the transaction page You are most welcome. It is released under BSD(lite) license - meaning that you are more than welcome to use the code in any way you see fit (commercial or not)..
Only requirement is that you never claim that you wrote (that part of) the code yourself - but always give due credit.
as I already have some regex to read the transaction records themselves.
The code currently in PesaPi is a bit weak on that point - so if yours is better then you are more than welcome to contribute it to the project. .. Mike
oh, hadnt read the licensing... and i like it. actually, the your code is much more elegant :-)... saves me days of frustration! On 10/6/11, Michael Pedersen <sku@kaal.dk> wrote:
On 10/6/11 1:33 PM, John Doe Smith Kamau KipNg'etich Jones wrote:
@michael:: You're code (specifically the regex and POST part... i.e posting stuff like the view_state, account data, etc) address issues I wouldn't have solved (or even discovered) myself!.... I hope you wouldn't mind me copying some bits of you're code :-). just the parts that involve loading the transaction page You are most welcome. It is released under BSD(lite) license - meaning that you are more than welcome to use the code in any way you see fit (commercial or not)..
Only requirement is that you never claim that you wrote (that part of) the code yourself - but always give due credit.
as I already have some regex to read the transaction records themselves.
The code currently in PesaPi is a bit weak on that point - so if yours is better then you are more than welcome to contribute it to the project.
.. Mike
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
participants (9)
-
Jac -
Jesse M -
John Doe Smith Kamau KipNg'etich Jones -
Joseph Maina -
Kiti Chigiri -
Michael Pedersen -
Paul M -
Timothy Mutugi -
wesley kirinya