[GNC] AqBanking help for Citi CC

[Jim Maki]

< Can you provide any differences in your GnuCash config settings that 
what I have above?


Here goes my settings:

   AqBanking Setup

   ==>  User Settings
   ====>  User Name - "YOURUSERID"
   ====>  User Id - "YOURUSERID " (trailing space)
   ====>  Client UID - not specified
   ==>  Bank Settings
   ====>  Bank Name - "Citi Credit Card"
   ====>  Broker Id - "Citigroup"
   ====>  FID - "24909"
   ====>  ORG - "Citigroup"
   ====>  Server URL - 
"https://www.accountonline.com/cards/svc/CitiOfxManager.do"
   ==>  Application Settings
   ====>  Application ID - "QWIN"
   ====>  Application Version - "2400"
   ====>  Header Version - "103"
   ====>  No Special Settings

   ==>  Account Info
   ====>  Account Number - "YOUR CC NUMBER"
   ====>  Account Name - "Citigroup"
   ====>  IBAN - not specified
   ====>  Owner Name - not specified
   ====>  Currency - "US Dollar (USD)"
   ====>  Account Type - "Credit Card Account"
   ==>  Bank Info
   ====>  Country - "United States of America (US)"
   ====>  Bank Code - "www.accountonline.com"
   ====>  Bank Name - "www.accountonline.com"
   ====>  SWIFT BIC - not specified
   ====>  Selected User - the user you defined above



 > After accepting the certificate , the log window has that error. If I 
retrieve accounts after this, I get the following:
 > 09:12:27 Sending request...
 > 09:12:27 Using GnuTLS default ciphers.
 > 09:12:28 TLS: SSL-Ciphers negotiated: TLS1.2:ECDHE-RSA-AES-256-GCM:AEAD
 > 09:12:28 Signer not found
 > 09:12:28 Certificate is not trusted
 > 09:13:31 Waiting for response...
 > 09:13:31 No message received
 > 09:13:31 Network error while waiting for response
 > 09:13:31 Operation finished, you can now close this window.


Little help, but you'll find the "Signer not found" and "Certificate is 
not trusted" in:
https://github.com/cstim/gwenhywfar/blob/master/src/sio/syncio_tls.c

So those errors relate to the certificate presented by the site you 
used. First make sure you're running a current version of 
GnuCash/AqBanking and update your settings (especially check the URL). 
The certificate I get validates OK:

* Server certificate:
*  subject: businessCategory=Private Organization; jurisdictionC=US; 
jurisdictionST=Delaware; serialNumber=2154254; C=US; ST=New York; L=New 
York; O=Citigroup Inc.; OU=Web Hosting Group; CN=www.accountonline.com
*  start date: Aug 15 00:00:00 2018 GMT
*  expire date: Jan  2 12:00:00 2020 GMT
*  subjectAltName: host "www.accountonline.com" matched cert's 
"www.accountonline.com"
*  issuer: C=US; O=DigiCert Inc; OU=www.digicert.com; CN=DigiCert SHA2 
Extended Validation Server CA
*  SSL certificate verify ok.


   Jim