Service usage specifications

The services published by the ecommerce payment Gateway support the HTTP protocol with channel encryption and use the NVP format for the request and XML format for the response.

Here are the technical details for sending messages:

Specifications for API calls

Protocol	HTTPS
Method	POST
Content-Type	application/x-www-form-urlencoded
Production url	https://xpay.nexigroup.com/monetaweb/payment/2/xml
Test url	https://stg-ta.nexigroup.com/monetaweb/payment/2/xml

We recommend avoiding direct calls and/or adding the IP addresses of endpoint DNS resolution to firewall authorization lists. However, if whitelists have been configured, please update them with the following production addresses:

• 185.198.117.102
• 185.198.118.102

The only protocol supported is TLSv1.2. Below are the ciphers:

• TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
• TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
• TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

The encoding used for the individual characters must be ISO 8859-1.

Below are the details of the certificate installed in the test and production environment:

ROOT CERTIFICATE	GlobalSign Root R3
Serial Number	04:00:00:00:00:01:21:58:53:08:A2
CA Intermediate	GlobalSign RSA Organization Validation CA - 2018
Serial Number	01:EE:5F:22:1D:FC:62:3B:D4:33:3A:85:57

If it is necessary to download the certificates, please refer to the web pages of the Certification Authority (CA):

• https://support.globalsign.com/ca-certificates/root-certificates/globalsign-root-certificates
• https://support.globalsign.com/ca-certificates/intermediate-certificates/organizationssl-intermediate-certificates

Specifications for the response

Responses to calls to synchronous services use XML format.

Within the paragraph of each payment protocol, examples are shown with the correct path.

Specifications for outcome notification

Payment notifications for asynchronous services can only be made on ports 443 or 8443.

Below are the IP addresses of the Gateway from which notifications are sent: