Still getting checkout error for PayPal even after update.

[Jen Will]

An error occurred when we tried to contact the payment processor. Please try again, select an alternate payment method, or contact the store owner for assistance. () - (35) error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure

That is the error.

[barco57]

Dr. Byte requires seeing the requested lines of code from that file to determine what version of the file you have. The error screams that the upgrade was not done correctly, or that your hosts server is set up incorrectly.

[Jen Will]

text/x-generic paypal_curl.php
PHP script text

<?php
/**
 * paypal_curl.php communications class for PayPal Express Checkout / Website Payments Pro / Payflow Pro payment methods
 *
 * @package paymentMethod
 * @copyright Copyright 2003-2014 Zen Cart Development Team
 * @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
 * @version GIT: $Id: Author: DrByte  Sat Nov 2 12:51:04 2013 -0400 Modified in v1.5.3 $
 */

/**
 * PayPal NVP (v61) and Payflow Pro (v4 HTTP API) implementation via cURL.
 */
class paypal_curl extends base {

  /**
   * What level should we log at? Valid levels are:
   *   1 - Log only severe errors.
   *   2 - Date/time of operation, operation name, elapsed time, success or failure indication.
   *   3 - Full text of requests and responses and other debugging messages.
   *
   * @access protected
   *
   * @var integer $_logLevel
   */
  var $_logLevel = 3;

  /**
   * If we're logging, what directory should we create log files in?
   * Note that a log name coincides with a symlink, logging will
   * *not* be done to avoid security problems. File names are
   * <DateStamp>.PayflowPro.log.
   *
   * @access protected
   *
   * @var string $_logFile
   */
  var $_logDir = DIR_FS_LOGS;

  /**
   * Debug or production?
   */
  var $_server = 'sandbox';

  /**
   * URL endpoints -- defaults here are for three-token NVP implementation
   */
  var $_endpoints = array('live'    => 'https://api-3t.paypal.com/nvp',
                          'sandbox' => 'https://api-3t.sandbox.paypal.com/nvp');
  /**
   * Options for cURL. Defaults to preferred (constant) options.
   */
  var $_curlOptions = array(CURLOPT_HEADER => 0,
                            CURLOPT_RETURNTRANSFER => TRUE,
                            CURLOPT_TIMEOUT => 45,
                            CURLOPT_CONNECTTIMEOUT => 10,
                            CURLOPT_FOLLOWLOCATION => FALSE,
                          //CURLOPT_SSL_VERIFYPEER => FALSE, // Leave this line commented out! This should never be set to FALSE on a live site!
                          //CURLOPT_CAINFO => '/local/path/to/cacert.pem', // for offline testing, this file can be obtained from http://curl.haxx.se/docs/caextract.html ... should never be used in production!
                            CURLOPT_SSLVERSION => 3,
                            CURLOPT_FORBID_REUSE => TRUE,
                            CURLOPT_FRESH_CONNECT => TRUE,
                            CURLOPT_POST => TRUE,
                            );
...

[barco57]

That is the file from a 1.5.3 install instead of a 1.5.4

[Jen Will]

Really? When I log into admin it says it's up to date. I hired someone to update it for me.

[mc12345678]

Really? When I log into admin it says it's up to date. I hired someone to update it for me.

What does the upper portion of the window report when the version link is selected in the admin panel as far as php version and ZC version?

Besides that, would have a discussion with the hired help about the situation. Even if the file were not updated to the 1.5.4 version, the base cause of the SSL3 error hasn't been addressed.

Change this line:
CURLOPT_SSLVERSION => 3,
To:
// CURLOPT_SSLVERSION => 3,

That change at least will allow sales to go through while figuring out and addressing other issues..

[barco57]

when you go to tools>server/version info what does it report for versions?
If a file buried in inludes/modules/payment/paypal folder is not up to date, it begs the question about what else was not uploaded correctly.

[Jen Will]

This has been fixed. Thank you.

[gilby]

This has been fixed.

And for others searching for a solution to a similar problem and find this thread the solution was????

[RodG]

And for others searching for a solution to a similar problem and find this thread the solution was????

My guess it was the POODLE update that hadn't been applied.
------------------------------
Change this line:
CURLOPT_SSLVERSION => 3,
To:
// CURLOPT_SSLVERSION => 3,
-----------------------------------------

Cheers
RodG