Paypal curl SSL3 - redundant code

[mattd360]

Hello,

I thought i might let you know of a software problem that affected my store, and perhaps others.
Paypal in my country has banned the use of sites using SSL3 due to the poodle vunerability.
I am using TLS2, however in includes/modules/payment/paypal/paypal_curl.php the code reports to paypal i am using SSL3 as shown here: CURLOPT_SSLVERSION => 3. This caused me to be unable to use transactions via Paypal with a generic error message. However, commenting it out resolved the issue.

If this issue affects other customers, please be mindful this could be a cause.

Many Thanks,

Matt de Marillac

[DrByte]

Yes. In the News & Announcements section of these forums is the information sent out in October about this problem:
http://www.zen-cart.com/showthread.p...yment-security


You should also signup for the News & Announcements forum for other updates that could affect you:
http://www.zen-cart.com/forumdisplay...-Announcements