(56) NSS: client certificate not found (nickname not specified)

[y051313]

Hi All

I'm testing zen cart for the forthcoming PayPal security upgrade.

I have two sites on same server. One site is running 1.3.9h and the other one is on 1.5.5. After switched to sandbox mode, testing on 1.5.5 site was successful, user can be redirected to Paypal sandbox site after order confirmation.
However, the 1.3.9h site got below error information when I click on the "confirm order" button: "An error occurred when we tried to contact the payment processor. Please try again, select an alternate payment method, or contact the store owner for assistance. () - (56) NSS: client certificate not found (nickname not specified)"

I remember I saw in the forum, the PayPal security upgrade have nothing to do with the zen cart code, and 1.3.9h should support the changes. Am I correct?

Thanks
Davis

[kobra]

Do you have a valid certificate on your 1.3.9h install??

What is the site url?

[y051313]

Do you have a valid certificate on your 1.3.9h install??

Yes, as the 1.5.5 site is on the same server, and it works well under sandbox mode

What is the site url?

beta.purpleculture.net

[DrByte]

v139, without the 2014 patch for POODLE, will not be able to connect to PayPal's servers until it is patched.
v155 doesn't require the patching.

[kobra]

Yes, as the 1.5.5 site is on the same server, and it works well under sandbox mode

Certificates are not issued to a server - they and beta.purpleculture.net is different than purpleculture.net
Unless you have paid for a "Wildcard" certificate

Adding https:// to beta.purpleculture.net does not load a site

[y051313]

v139, without the 2014 patch for POODLE, will not be able to connect to PayPal's servers until it is patched.
v155 doesn't require the patching.

The v139h site already with 214 patch for poodle, but still can't redirect to PayPal sandbox site.

[y051313]

Certificates are not issued to a server - they and beta.purpleculture.net is different than purpleculture.net
Unless you have paid for a "Wildcard" certificate

Sorry kobra, but my understanding is the forthcoming PayPal security updates doesn't require https on the front-side. Correct me if I'm wrong.

I saw the paypal sandbox URL defined in includes/modules/payment/paypal/paypal_curl.php are different on 1.3.9h and 1.5.5 ,

in 1.3.9h
var $_endpoints = array('live' => 'https://api-3t.paypal.com/nvp',
'sandbox' => 'https://api.sandbox.paypal.com/nvp');

in 1.5.5
var $_endpoints = array('live' => 'https://api-3t.paypal.com/nvp',
'sandbox' => 'https://api-3t.sandbox.paypal.com/nvp');

Is this the cause?

Thanks
Davis

[DrByte]

You will need to use the api-3t.sandbox.paypal.com endpoint. The old one from v139 is not correct.

[y051313]

You will need to use the api-3t.sandbox.paypal.com endpoint. The old one from v139 is not correct.

Tried "api-3t.sandbox.paypal.com", but still got error msg
"An error occurred when we tried to contact the payment processor. Please try again, select an alternate payment method, or contact the store owner for assistance. () - (56) NSS: client certificate not found (nickname not specified)"

Any other clues?

Thanks
Davis

[DrByte]

(56) NSS: client certificate not found (nickname not specified)"

Any other clues?

CURL error 56 means "Connection reset by peer" ... which happens when the server you're trying to connect to rejects the connection. Presumably PayPal is saying that your incoming connection attempt is not compatible with their new security requirements.

Given that v155 works, my advice is to upgrade. (I know you've said you're upgrading ... so I advise you to continue and complete the upgrade.)