#jlcbada-terminal-reader

1 messages Β· Page 1 of 1 (latest)

celest perch
#

What exactly is the nature of the failure>

#

it has worked before in this location, or not?

#

Is the reader able to get online?

#

If you can get to the network status screen and its on the same network, the POS needs to be able to reach the device

#

Two checks you can do from the POS:
1/ nslookup 10-0-0-80.123abc.device.stripe-terminal-local-reader.net replacing the 10-0-0-80 with the dash-separated IP address of your reader
2/ ping 10-0-0-80.123abc.device.stripe-terminal-local-reader.net same IP address replacement

#

if the first fails, you might have an issue block DNS rebinding on your network

#

if the first works, but the second fails, your netowkr might be prevent connections between devices

static anvil
#

Hi @celest perch
the error im getting is like this

  • ping the ip works
  • ping the hostname works
  • nslookup hostname : - im not sure whats an error response here. it gives me a Non-authoritative answer - i guess thats a positive response?

if i copy over the POST HTTP request and do it in postman, its 200 OK

but in the webpage it goes net::ERR_FAILED

Please advise @celest perch

autumn granite
#

can you share a clearer screenshot of that?
also can you share your terminal window logs for this (like your macOS terminal) for 1/ and 2/

static anvil
#

hi @autumn granite i DM you a loom video of how our IT guy trouble shoot. please check. let me know if that helps. it covers all your request and maybe more

#

@celest perch trying to send to you but seems i wasnt permitted? Let me know pls how i can send over a loom

autumn granite
#

looking one sec

autumn granite
#

oh that is a 15 min video

I also cannot copy/paste IDs or dig into anything from the video

would it be possible for them to the full text of what they got in their laptop terminal window for the three things

  • ping the ip works
  • ping the hostname works
  • nslookup hostname : - im not sure whats an error response here. it gives me a Non-authoritative answer - i guess thats a positive response?
static anvil
#

sure
Hang on
so first, the error message in the screenshot
stated as this:

POST https://192-168-1-223.jfnziev3gipl3zbko4sl.device.stripe-terminal-local-reader.net:4443/protojsonservice/JackRabbitService net::ERR_FAILED

the warning message is

(index):1 Could not communicate with the Reader. Please make sure your reader is online and on the same network as your device, and that the host `https://192-168-1-223.jfnziev3gipl3zbko4sl.device.stripe-terminal-local-reader.net` is resolvable by your DNS provider. See https://support.stripe.com/questions/terminal-connectivity-issues for more details.
  • Ping the IP Works
C:\WINDOWS\system32>ping 192.168.1.223

Pinging 192.168.1.223 with 32 bytes of data:
Reply from 192.168.1.223: bytes=32 time=264ms TTL=64
Reply from 192.168.1.223: bytes=32 time=501ms TTL=64
Reply from 192.168.1.223: bytes=32 time=744ms TTL=64
Reply from 192.168.1.223: bytes=32 time=986ms TTL=64

Ping statistics for 192.168.1.223:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 264ms, Maximum = 986ms, Average = 623ms
#
  • Ping the hostname works
C:\WINDOWS\system32>ping 192-168-1-223.jfnziev3gipl3zbko4sl.device.stripe-terminal-local-reader.net

Pinging 192-168-1-223.jfnziev3gipl3zbko4sl.device.stripe-terminal-local-reader.net [192.168.1.223] with 32 bytes of data:
Reply from 192.168.1.223: bytes=32 time=223ms TTL=64
Reply from 192.168.1.223: bytes=32 time=450ms TTL=64
Reply from 192.168.1.223: bytes=32 time=691ms TTL=64
Reply from 192.168.1.223: bytes=32 time=960ms TTL=64

Ping statistics for 192.168.1.223:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 223ms, Maximum = 960ms, Average = 581ms

C:\WINDOWS\system32>ping 192-168-1-223.device.stripe-terminal-local-reader.net

Pinging 192-168-1-223.device.stripe-terminal-local-reader.net [192.168.1.223] with 32 bytes of data:
Reply from 192.168.1.223: bytes=32 time=300ms TTL=64
Reply from 192.168.1.223: bytes=32 time=543ms TTL=64
Reply from 192.168.1.223: bytes=32 time=782ms TTL=64
Reply from 192.168.1.223: bytes=32 time=1020ms TTL=64

Ping statistics for 192.168.1.223:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 300ms, Maximum = 1020ms, Average = 661ms
  • Nslookup hostname
C:\WINDOWS\system32>nslookup 192-168-1-223.device.stripe-terminal-local-reader.net
Server:  Fios_Quantum_Gateway.fios-router.home
Address:  192.168.1.1

Non-authoritative answer:
Name:    192-168-1-223.device.stripe-terminal-local-reader.net
Address:  192.168.1.223

pls help me @autumn granite @celest perch me know if you need anything else

#

Hi @unique ridge if you have time, can you please into this as well? thanks!

unique ridge
#

@static anvil I'll do my best but please be patient, the channel is extremely busy right now so it will take a while

#

@static anvil okay I'm pairing with someone on my team. They confirmed that the commands you ran indicate everything should be working. They asked that you confirm with your developer that those commands were ran directly from the device that is connecting to the reader, and not from another unrelated computer. Can you have them confirm this?

static anvil
#

yes that is correct. @unique ridge
the computer where i ran the commands and the terminal are connected both on the same network. same subnet
we are highly on a desparate situation. if paid support is necessary to resolve the issue asap. we are highly interested to it

unique ridge
static anvil
#

i did @unique ridge I chatted with them, but they said they dont have paid support at the moment so i was hoping i could find it here.

unique ridge
#

This is a public Discord server, this is definitely not a place to get "paid support"

unique ridge
#

You need to run those exact commands on the device that connects to the reader. Not on another unrelated computer

static anvil
#

@unique ridge ok let me rephrase

#

@unique ridge
the device(computer), where i got the aforementioned logs, is the one used to connect to the reader.
that same device(computer) and the terminal are connected both on the same network. same subnet.
hopefully that made it all clear?

unique ridge
#

yes

static anvil
#

awesome! (crossing fingers we be able to resolve this)

unique ridge
#

@static anvil can you share the Terminal reader id the tmr_123?

static anvil
#

ofcourse!tmr_D4PdjwZ85FbqDa @unique ridge

unique ridge
#

Thanks, we're looking. I want to be honest, I have no clue if we'll find anything relevant and you might have to go through support anyway.

static anvil
#

cross fingers! πŸ™

unique ridge
#

@static anvil and this has never worked in that store/it's a new store with a different network and devices right?

static anvil
#

it worked before! then suddenly not.. for some unknown reason.. we not able to figure out @unique ridge

unique ridge
#

try nslookup 192-168-1-223.jfnziev3gipl3zbko4sl.device.stripe-terminal-local-reader.net

#

when did it stop working? was it the same device/reader?

static anvil
#

yes. same device

unique ridge
#

no pictures please

static anvil
#
C:\WINDOWS\system32>nslookup 192-168-1-223.jfnziev3gipl3zbko4sl.device.stripe-terminal-local-reader.net
Server:  Fios_Quantum_Gateway.fios-router.home
Address:  192.168.1.1

Non-authoritative answer:
Name:    192-168-1-223.jfnziev3gipl3zbko4sl.device.stripe-terminal-local-reader.net
Address:  192.168.1.223

@unique ridge

static anvil
unique ridge
#

(sorry, back and forth internally in parallel with my team and other engineers on the Terminal product)

static anvil
#

@unique ridge i completely understand! πŸ™

unique ridge
#

do you have other computers on that network? Are you wired or wifi? Also can you try other devices/readers?

#

@static anvil can you quickly start your app and try to connect again, we want to see if we can find logs for that attempt

static anvil
#

they are both in wifi
yes there are other devices(computers, tablets, smartphones, etc) connected to the network

i have another terminal

tmr_EW2XZwPemnCndF
unique ridge
#

does tmr_EW2XZwPemnCndF work fine?

static anvil
#

same issue @unique ridge
we brought the other device to troubleshoot. but same issue

but in our main branch, our POS and reader works smoothly

static anvil
#

done.. were you able to catch any logs @unique ridge

unique ridge
#

So right now you have one computer that has an app with JS SDK, it's connected in WI-FI to your network, and 2 P400 readers are on WI-FI too, same network and none of them work?

static anvil
#

@unique ridge web app yes.
before it worked.

#

if i replicate the HTTP POST request via postman it goes 200 OK though. which is reeeally weird.

unique ridge
#

What browser are you using exactly? Exact OS version and browser version. Does it work in incognito?

static anvil
unique ridge
#

@static anvil do you have another browser on that computer?

static anvil
#

microsoft edge?

unique ridge
#

yeah, can you try loading the same URL in edge? Trying to rule out an issue with Chrome

static anvil
unique ridge
#

yes

static anvil
#

same response

Error 404: Not Found
Not Found

is that unexpected?

unique ridge
#

well clearly your computer can talk to the reader, ping it, post to it via postman, but for some reason Chrome and Edge can't

static anvil
#

for microsoft edge

Hmmm… can't reach this page192-168-1-223.jfnziev3gipl3zbko4sl.device.stripe-terminal-local-reader.net took too long to respond

for chrome

This site can’t be reached192-168-1-223.jfnziev3gipl3zbko4sl.device.stripe-terminal-local-reader.net took too long to respond.
unique ridge
#

Try clearing chrome's DNS cache: Navigate to chrome://net-internals/#dns and press the "Clear host cache" button.

static anvil
#

clicked the button multiple times (i dont see any reaction though) 4443 in chrome is 404; 443 is unreachable

unique ridge
#

thx

#

Can your app work in Edge instead of Chrome? Like if you try to connect/pay in Edge does the same issue happen?

static anvil
#

im gonna do that. hang on

#

same error @unique ridge

POST https://192-168-1-223.jfnziev3gipl3zbko4sl.device.stripe-terminal-local-reader.net:4443/protojsonservice/JackRabbitService net::ERR_FAILED
unique ridge
#

@static anvil do you have wireshark on that computer? To try and narrow down where the HTTPS requests are being blocked

static anvil
#

first time heard of it. give me 5min ill try to download that

#

do you want me to send the logs here? @unique ridge ?

unique ridge
#

No, that will have sensitive info. I'm not sure who I am speaking to and whether you're a dev but hopefully you would read them and find interesting tidbits

static anvil
#

im a dev. but this is the first time ive used this.. and im not really good at networking. I couple of reds though

unique ridge
#

can you share some info in DM with me?

static anvil
#

not sure how to paste the filter result..
can i screenshot? @unique ridge ?

unique ridge
#

sure

static anvil
#

whereas 225 is the computer's IP

#

now im gonna do that again with cloudfare DNS in my computer

unique ridge
#

if you do cloudflare, re-purge the DNS in Chrome (and restart all of Chrome to be safe)

static anvil
#

ok doing that

#

here it is
with cmd nslookup for proof of dns change

#

@unique ridge

unique ridge
#

yep sorry, we're looking. Doesn't make sense to us just yet 😦

#

Did anything change on your end before this broke, like upgrading the reader, upgrading your router, etc.?

static anvil
#

im gonna ask my tech guys @unique ridge

#

but seems no

unique ridge
#

@static anvil can you inspect the packet labeled "Encrypted Alert", looks suspicious to us and we're thinking there might be more details on that one

#

the one 2 lines above the red line

static anvil
#

ok right click to that.. then? what option in the menu should i choose.. (sorry not really familiar with wireshark.. i dont see anything related to "inspect though")

autumn granite
#

@static anvil can you try clicking on the "Encrypted Alert" packet, there should be a "Transport layer security" section, expand that

static anvil
#

@autumn granite

Frame 1414: 88 bytes on wire (704 bits), 88 bytes captured (704 bits) on interface \Device\NPF_{91340893-288D-4098-922F-66673ED50A9E}, id 0
Ethernet II, Src: MurataMa_5d:9e:6d (d4:53:83:5d:9e:6d), Dst: IntelCor_c0:0a:1c (04:33:c2:c0:0a:1c)
Internet Protocol Version 4, Src: 192.168.1.223, Dst: 192.168.1.225
Transmission Control Protocol, Src Port: 4443, Dst Port: 64642, Seq: 4856, Ack: 760, Len: 31
Transport Layer Security
    TLSv1.2 Record Layer: Encrypted Alert
        Content Type: Alert (21)
        Version: TLS 1.2 (0x0303)
        Length: 26
        Alert Message: Encrypted Alert

autumn granite
#

thanks, one more thing

Open your browser dev tools e.g. Chrome dev tools, go to the Network tab, and click on the failing request and tell us what you're seeing (there should be sub tabs for Preview and Response IIRC)

static anvil
#

please forgive me doing screenshots on this
its hard to put it in text let me know if you have anything your interested so i copy paste the texts

#

this is the whole associated headers into the failing request @autumn granite

autumn granite
#

can you share the Response tab view as well? screenshot is fine

static anvil
#

no value.. its a net::ERR_FAILED

POST https://192-168-1-223.jfnziev3gipl3zbko4sl.device.stripe-terminal-local-reader.net:4443/protojsonservice/JackRabbitService net::ERR_FAILED

it will just give something like this

#

based on what @unique ridge and I have gone so far.. we come up with this:
well clearly your computer can talk to the reader, ping it, post to it via postman, but for some reason Chrome and Edge can't

#

not sure why my browsers cant talk to the reader. @autumn granite

autumn granite
#

yep that is the understanding from the internal teams too, it might be something browser specific

a couple more things

#

1/ can you try Firefox?

static anvil
#

sure ill download it!

autumn granite
#

2/ do you have any extensions running on Chrome in incognito mode?
can you try a Guest session in Chrome too?

static anvil
#

ok im gonna do those two.

autumn granite
static anvil
#

@autumn granite here is for 3

#

it freakin WORK FOR FIREFOX!!!!

#

im gonna try to pay

#

@autumn granite

autumn granite
#

did collecting PM and processPayment() work too?

static anvil
#

im currently very far into the location.. someone is going there right now with a card. once there i will initiate swipe

#

@autumn granite

#

maybe in less than 30min

static anvil
#

our guys not yet in the location..
but i also managed to pull it of in CHROME!

#

@autumn granite

#

i disabled these in chrome://flags

#

and these request were 200 OK

#

now im waiting for my guy if we can actually use it

#

@autumn granite is this because of chrome update? stripe sdk needs update? or ?

celest perch
#

oh wow

#

Just to confirm, you didnt need to change anything for this to work in firefox, correct?

static anvil
#

😍 🀞 till we get PM

#

you are right @celest perch

celest perch
#

We're hoping you can help us take a look at the certificate use by chrome

#

Might take a few steps, so just bear with me

static anvil
#

@celest perch just give me the steps.. you want me to enable those flags before doing anything prior?

celest perch
#

If you go to: https://192-168-1-223.jfnziev3gipl3zbko4sl.device.stripe-terminal-local-reader.net:4443/ you'll hopefully see the "not secure" ui in chrome

static anvil
#

i did not.

#

actually that is a 404 not found text only

#

i reported that to @unique ridge

celest perch
#

even with the 404, it should show the not secure ui

static anvil
#

uhmm.. lets see. hang on. i will revert the flags and load that page in chrome

celest perch
#

like this

#

mine is 201 because thats my reader IP

static anvil
#

sorry mine is different?

celest perch
#

that might be due to the flag, but either way can you open that "connection is secure" view and try to navigate to the certificate

static anvil
#

actually i have already reverted my changes on the flag.. and i have the issue back in connecting to the reader

#

may i know your chrome version? @celest perch

celest perch
#

Version 95.0.4638.54 (Official Build) (x86_64)

static anvil
#

same as mine. thats weird

celest perch
#

if you open that certificate UI, can you expand the details of the certificate?

static anvil
#

this?

celest perch
#

yea, thank you

#

and the details tab?

static anvil
#

it has a long vertical scroll bar

celest perch
#

this is good for now, thanks!

static anvil
#

PAYMENT CAPTURE SUCCESSFUL as well in Chrome (with flags update)

celest perch
#

Nice, thats great to see -- now we're trying to iron out whats going on with the certificate issue you were hitting

#

we'd appreciate if you were able to stick with us while we try to chase this down, so we can make sure you don't hit this elsewhere

static anvil
#

sure @celest perch i wont be able to resolve this guys without all of you

though in your statement its me having certificate issue? isnt it i have just sent you ss that the reader hostname works well in ssl in my computer (being used to communicate to the reader)

celest perch
#

Yea it looks like you certificate matches there, but its unclear why chrome/edge blocked it before as insecure. ie, why did you changing those flags help.

static anvil
#

hmm.. i am not sure the reason why chrome/edge blocked it because of insecure.. i think they blocked it because of... net::ERR_FAILED and in the request header there is a warning about Header provisions are shown. I think net ERR_FAILED means it failed to load resources.. i dont have any idea why.
in my opinion though its 80% unrelated to certificates.

about the flags.
i read it from here https://stackoverflow.com/questions/57410051/chrome-not-showing-options-requests-in-network-tab
apparently the mentioned flag there doesnt exist anymore, so what i did is to search the 'cors' in the flags and disabled the result of it

#

@celest perch

#

i was able to get to that stackoverflow link by googling terms around chrome preflight post not working

#

@celest perch i will just get some sleep.. ill be back online maybe in 4-6 hours or so. i havent slept for 2 days straight now because of this. haha
please post your questions, i will do my best to help to assist if needed. i will respond back the soon as im up.

Thanks again everyone! @unique ridge @autumn granite @celest perch !!!! πŸ™‡β€β™‚οΈ

upbeat wind
#

Hello! Yeah, get some rest! We are pretty confident this is a certificate issue, but we're not certain what's causing it. When you get back can you let us know when and how often your integration discovers your Terminal readers?

#

For context, we think the Terminal reader is getting assigned a new URL (and matching certificate) that your integration isn't picking up for some reason. Usually you get the URL during the discover readers process, but it sounds like this isn't happening as expected.

#

Are you maybe discovering and then caching or storing the Terminal's URL somewhere? Anything along those lines?

#

No rush on the answers here, just queuing them up for when you return. πŸ™‚

upbeat wind
#

Basically Chrome/Chromium prevents access to local resources (like the Terminal reader on your local network) on insecure pages. Your Terminal integration is running on an insecure website (no HTTPS) so that's why local network access was blocked until you disabled the flag.

#

If you enabled HTTPS on your web app it would work normally.