PayPal security encryption

[JakeLawless]

With the new paypal security encription update coming in to play on saturday.

Do we need to do anything if we use paypal check out on our stores?

Thanks

[dbltoe]

Google

paypal security requirements Zen Cart

to see several articles that might be helpful.

[JakeLawless]

I couldnt find anything and assumed it was working and now my website will not process paypal payments and i get an error saying:

"(35) Cannot communicate securely with peer: no common encryption algorithm(s)."

Any idea how to fix this?

Thanks

[dbltoe]

If you are truly using 1.5.5#, you should have the security changes in place that this is looking for.

Does your site use full-time https:// ? Is curl working? Have you contacted your host to make sure they haven't changed a port?

[JakeLawless]

I am presently using: v1.5.5f

Ive spoke to my host and he said he thinks purchasing an SSL certificate will fix it.

[dbltoe]

Unless there's been some drastic changes out there, I'm inclined to disagree.

Should your site be fully https? Yes, any e-commerce site is currently labeled unsecure by most browsers if the entire site is not https.

That said, PayPal will connect with a site that does not have an SSL installed, BUT it must be able to connect securely. That doesn't have anything to do with an SSL.

If your host won't check that the ports are open and curl is working, take a few minutes with PayPal support. It'll take them minutes to triage your problem and point you in the right direction.

[mc12345678]

To add to dbltoe's info, there are utilities that can be run in the catalog/extras folder. They may need to be copied elsewhere or permissions temporarily relaxed to be executed, but if I remember correctly they should be able to identify if there is a communication issue with PayPal. From searching the internet just on the error message most recently posted, it appears that the issue may have to do with security certificates installed on the server that allow the server to communicate securely with other servers. That is different than website guests visiting your site and attempting to have a secure connection.

Primarily/typically it goes back to the server and its setup.

[RodG]

I am presently using: v1.5.5f

Ive spoke to my host and he said he thinks purchasing an SSL certificate will fix it.

Thats an unnecessary upsell that won't resolve the problem. I would consider another host if that is the best help they can provide.

Cheers
Rod