KRA

EC2 resources

Instances related to KRA VPN connection are located in af-south-1

https://af-south-1.console.aws.amazon.com/ec2/home?region=af-south-1#Instances:v=3;$case=tags:true%5C,client:false;$regex=tags:false%5C,client:false

Google Drive resources

https://drive.google.com/drive/u/0/folders/1rzPAMbhfpaudjtlOPNNTGedQR4ufroHb

We are currently working on the documentation of the B2B and Pay Tax API. We do not have one. This however shares a number of similar parameters as the B2C request. You can go through: https://developer.safaricom.co.ke/APIs/BusinessToCustomer.

Public available means it is available over the internet as REST APIs. Unlike before it was only available on VPN. To consume the API on production, it has to be added to your production application. This will be done once you are through with testing

Use below credentials for sandbox:

  Initiator Username: TaxPayer
  Initiator password: Taxpayer@2022
  Receiver Party B Shortcode: 109006
  Party A Short code: 888880

Did I misinterpret the info about QueueTimeoutURL? I’ve set it to https://dev.bongobongo.ke/api/kra/results/timeout This is the expect callback from our end.

2a we need to aquire a PRN from KRA? And then issue a payment through your API? So you only act as a proxy for the actual payments between us and KRA? And how do we send the PRN? In the “AccountReference” field? 2a we need to aquire a PRN from KRA? Yes, You will need to consume KRA API to get the PRN

2b our users transactions AKA realtime data, we only use KRA API? And then issue a payment through your API? Yes, make a payment through the Safaricom production Pay Tax API

So you only act as a proxy for the actual payments between us and KRA? Yes, this is correct

And how do we send the PRN? In the “AccountReference” field? - This is also Correct

So for the KRA-stuff, we do need that VPN connection up and running? For this, you can consult the KRA Team on PRN generation. They should be in a good position to answer this

VPN

All ubuntu stuff is configurable through ansible in this repo

Having problems connecting. Phase 1 seems to work fine, but phase 2 fails with an INVALID_SYNTAX response from the remote gateway. Haven’t been able to get ahold of the remote logs, so troubleshooting seems impossible.

Gaia R80 196.61.52.1 (ikev1 StrongSWAN)
Gaia R81 196.61.53.1 (ikev2 StrongSWAN)
KRA Test 196.61.52.213 (our test server 10.80.1.106)
KRA Prod 196.61.52.214 (our test server 10.80.1.30)

TODO

Connect to VPN
- Instances in af-south-1 are up and running. Need to configure VPN correctly