Zen Cart Logo
Forums / PayPal Express Checkout support / PayPal Express Checkout (35) SSL connect error

PayPal Express Checkout (35) SSL connect error

Views: 19,694

Results 1 to 20 of 21
6 Nov 2014, 5:07 AM
#1
johnny1114 avatar

johnny1114

New Zenner

Join Date:
Jan 2014
Location:
NJ, USA
Posts:
9
Plugin Contributions:
0

PayPal Express Checkout (35) SSL connect error

An error occurred when we tried to contact the payment processor. Please try again, select an alternate payment method, or contact the store owner for assistance. () - (35) SSL connect error.

this is for a online store in development, hosted by Godaddy, configured with SSL, setup Paypal express checkout either live or sandbox, was working fine before October, I didn't check the site often, only recently I tried to test the checkout process. got this error.

followed the Poodle vulnerability fix thread,

edited paypal_curl.php, but didn't find CURLOPT_SSLVERSION keyword in paypaldp.php

// CURLOPT_SSLVERSION => 3,

please advise and help! thx

6 Nov 2014, 4:29 PM
#3
johnny1114 avatar

johnny1114

New Zenner

Join Date:
Jan 2014
Location:
NJ, USA
Posts:
9
Plugin Contributions:
0

Re: PayPal Express Checkout (35) SSL connect error

Hi Dr. Byte,

I commented out CURLOPT_SSLVERSION => 3 in paypal_curl.php only.

search the whole directory, didn't find CURLOPT_SSLVERSION keyword in any other scripts like paypaldp.php which mentioned in the article.

the Poodle issue will cause this error, "An error occurred when we tried to contact the payment processor. Please try again, select an alternate payment method, or contact the store owner for assistance. () - (35) error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number"

but my error shows An error occurred when we tried to contact the payment processor. Please try again, select an alternate payment method, or contact the store owner for assistance. () - COLOR="#FF0000" SSL connect error[/COLOR]. is there any difference? thanks.

6 Nov 2014, 4:31 PM
#4
johnny1114 avatar

johnny1114

New Zenner

Join Date:
Jan 2014
Location:
NJ, USA
Posts:
9
Plugin Contributions:
0

Re: PayPal Express Checkout (35) SSL connect error

COLOR="#FF0000" SSL connect error[/COLOR]

what does this mean, cannot connect to the SSL installed with my site's web server on my godaddy hosting?

DrByte:

As per the posted instructions at: http://www.zen-cart.com/showthread.php?214916-Important-announcement-about-POODLE-and-payment-security
the file to edit is: /includes/modules/payment/paypal/paypal_curl.php, but you said you edited something else.

6 Nov 2014, 5:16 PM
#5
johnny1114 avatar

johnny1114

New Zenner

Join Date:
Jan 2014
Location:
NJ, USA
Posts:
9
Plugin Contributions:
0

Re: PayPal Express Checkout (35) SSL connect error

DrByte:

As per the posted instructions at: http://www.zen-cart.com/showthread.php?214916-Important-announcement-about-POODLE-and-payment-security
the file to edit is: /includes/modules/payment/paypal/paypal_curl.php, but you said you edited something else.

looks like I have to change to Live instead of Sandbox in the store admin for paypal express checkout to make the checkout go through. weird.

6 Nov 2014, 5:37 PM
#6
johnny1114 avatar

johnny1114

New Zenner

Join Date:
Jan 2014
Location:
NJ, USA
Posts:
9
Plugin Contributions:
0

Re: PayPal Express Checkout (35) SSL connect error

johnny1114:

looks like I have to change to Live instead of Sandbox in the store admin for paypal express checkout to make the checkout go through. weird.

I have just checked paypal developer account, put my developer's API credentials I was always using, if Sandbox mode is checked in the store admin->paypal express, will still get error 35: ssl connect error. while if Live mode is checked, will get error below which i think it might be normal as i provided sandbox API only.

We are sorry for the inconvenience. The PayPal account authentication settings are not yet set up, or the API security information is incorrect. We are unable to complete your transaction. Please notify the store owner so they can correct this problem. (10002) 10002 Security error - Security header is not valid

so now looks like I cannot use paypal sandbox to test transactions, anyone came across this kind of issue after Poodle?

6 Nov 2014, 5:53 PM
#7
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
177

Re: PayPal Express Checkout (35) SSL connect error

Live mode uses the real API credentials for your real PayPal account.
Test mode requires the use of sandbox API credentials.

So, if you're going to switch between live and sandbox, you need to also re-enter the API credentials, else you'll get those 10002 Security Header Is Not Valid errors because you're authenticating against a non-existent account.

6 Nov 2014, 7:42 PM
#8
johnny1114 avatar

johnny1114

New Zenner

Join Date:
Jan 2014
Location:
NJ, USA
Posts:
9
Plugin Contributions:
0

Re: PayPal Express Checkout (35) SSL connect error

DrByte:

Live mode uses the real API credentials for your real PayPal account.
Test mode requires the use of sandbox API credentials.

So, if you're going to switch between live and sandbox, you need to also re-enter the API credentials, else you'll get those 10002 Security Header Is Not Valid errors because you're authenticating against a non-existent account.

Dr.Byte, I believe I did, as I have been switching the live and sandbox ones since for almost a year, just easy change under store admin, right.

the issue now is that if using sandbox api with store's paypal express sandbox mode enabled, I will get error 35: SSL Connect Error,, it didn't happen before.

6 Nov 2014, 8:04 PM
#9
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
177

Re: PayPal Express Checkout (35) SSL connect error

johnny1114:

the issue now is that if using sandbox api with store's paypal express sandbox mode enabled, I will get error 35: SSL Connect Error,, it didn't happen before.
Hmmmm ... mine doesn't.
Fortunately no live store will be using the sandbox.

6 Dec 2014, 7:51 PM
#10
graniteman22 avatar

graniteman22

New Zenner

Join Date:
Jan 2014
Location:
Michigan
Posts:
27
Plugin Contributions:
0

Re: PayPal Express Checkout (35) SSL connect error

I have ZC v1.5.3 and I'm currently getting the:

An error occurred when we tried to contact the payment processor. Please try again, select an alternate payment method, or contact the store owner for assistance. () - (35) error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure

I made the required changes according to the instructions for this issue as follows:

paypal_curl ***

var $_curlOptions = array(CURLOPT_HEADER => 0,
CURLOPT_RETURNTRANSFER => TRUE,
CURLOPT_TIMEOUT => 60,
CURLOPT_FOLLOWLOCATION => FALSE,
CURLOPT_SSL_VERIFYPEER => FALSE,
CURLOPT_SSL_VERIFYHOST => 2,
// CURLOPT_SSLVERSION => 3,
CURLOPT_FORBID_REUSE => TRUE,
CURLOPT_FRESH_CONNECT => TRUE,
CURLOPT_POST => TRUE,
);

paypaldp ***

http://curl.haxx.se/docs/caextract.html ... should never be used in production!
curl_setopt($ch, CURLOPT_TIMEOUT, 8);
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 8);
// curl_setopt($ch, CURLOPT_SSLVERSION, 3);

authorizenet_aim ***

curl_setopt($ch, CURLOPT_FRESH_CONNECT, 1);
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_VERBOSE, 0);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_TIMEOUT, 15);
// curl_setopt($ch, CURLOPT_SSLVERSION, 3);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE); /* compatibility for SSL communications on some Windows servers (IIS

5.0+) */
if (CURL_PROXY_REQUIRED == 'True') {

authorizenet_echeck ***

curl_setopt($ch, CURLOPT_FRESH_CONNECT, 1);
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_VERBOSE, 0);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_TIMEOUT, 15);
// curl_setopt($ch, CURLOPT_SSLVERSION, 3);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE); /* compatibility for SSL communications on some Windows servers (IIS

5.0+) */
if (CURL_PROXY_REQUIRED == 'True') {

class.linkpoint_api ***

		curl_setopt ($ch, CURLOPT_URL,$host);
		curl_setopt ($ch, CURLOPT_POST, 1);
		curl_setopt ($ch, CURLOPT_POSTFIELDS, $xml);
		curl_setopt ($ch, CURLOPT_SSLCERT, $key);
  curl_setopt ($ch, CURLOPT_CAINFO, $key);
  curl_setopt ($ch, CURLOPT_SSL_VERIFYHOST, false);
  curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, false);
 // curl_setopt ($ch, CURLOPT_SSLVERSION, 3);
		curl_setopt ($ch, CURLOPT_RETURNTRANSFER, true);

I currently accept only CC and PayPal. I still get the error even though I made those changes.

I use the keyword search in developers tool and located 5 instances of the "CURLOPT_SSLVERSION" and changed all 5 as noted above. What else can I do?

6 Dec 2014, 8:17 PM
#11
graniteman22 avatar

graniteman22

New Zenner

Join Date:
Jan 2014
Location:
Michigan
Posts:
27
Plugin Contributions:
0

Re: PayPal Express Checkout (35) SSL connect error

Graniteman22:

I have ZC v1.5.3 and I'm currently getting the:

An error occurred when we tried to contact the payment processor. Please try again, select an alternate payment method, or contact the store owner for assistance. () - (35) error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure

I made the required changes according to the instructions for this issue as follows:

paypal_curl ***

var $_curlOptions = array(CURLOPT_HEADER => 0,
CURLOPT_RETURNTRANSFER => TRUE,
CURLOPT_TIMEOUT => 60,
CURLOPT_FOLLOWLOCATION => FALSE,
CURLOPT_SSL_VERIFYPEER => FALSE,
CURLOPT_SSL_VERIFYHOST => 2,
// CURLOPT_SSLVERSION => 3,
CURLOPT_FORBID_REUSE => TRUE,
CURLOPT_FRESH_CONNECT => TRUE,
CURLOPT_POST => TRUE,
);

paypaldp ***

http://curl.haxx.se/docs/caextract.html ... should never be used in production!
curl_setopt($ch, CURLOPT_TIMEOUT, 8);
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 8);
// curl_setopt($ch, CURLOPT_SSLVERSION, 3);

authorizenet_aim ***

curl_setopt($ch, CURLOPT_FRESH_CONNECT, 1);
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_VERBOSE, 0);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_TIMEOUT, 15);
// curl_setopt($ch, CURLOPT_SSLVERSION, 3);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE); /* compatibility for SSL communications on some Windows servers (IIS

5.0+) */
if (CURL_PROXY_REQUIRED == 'True') {

authorizenet_echeck ***

curl_setopt($ch, CURLOPT_FRESH_CONNECT, 1);
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_VERBOSE, 0);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_TIMEOUT, 15);
// curl_setopt($ch, CURLOPT_SSLVERSION, 3);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE); /* compatibility for SSL communications on some Windows servers (IIS

5.0+) */
if (CURL_PROXY_REQUIRED == 'True') {

class.linkpoint_api ***

  	curl_setopt ($ch, CURLOPT_URL,$host);
  	curl_setopt ($ch, CURLOPT_POST, 1);
  	curl_setopt ($ch, CURLOPT_POSTFIELDS, $xml);
  	curl_setopt ($ch, CURLOPT_SSLCERT, $key);
  curl_setopt ($ch, CURLOPT_CAINFO, $key);
  curl_setopt ($ch, CURLOPT_SSL_VERIFYHOST, false);
  curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, false);
 // curl_setopt ($ch, CURLOPT_SSLVERSION, 3);
  	curl_setopt ($ch, CURLOPT_RETURNTRANSFER, true);

I currently accept only CC and PayPal. I still get the error even though I made those changes.

I use the keyword search in developers tool and located 5 instances of the "CURLOPT_SSLVERSION" and changed all 5 as noted above. What else can I do?

Nevermind. Looks like I changed those files that were in a different folder. Found another version of those files in another location on my server and the problem is solved. Thank you.

7 Dec 2014, 5:05 AM
#12
heyits007 avatar

heyits007

Zen Follower

Join Date:
Sep 2010
Posts:
270
Plugin Contributions:
0

Re: PayPal Express Checkout (35) SSL connect error

Yep I had the same problem. I've just spent the last 8 hours unsuccessfully trying to upgrade my website from 1.39 to the latest version 1.53 of ZenCart, to try to fix the PayPal POODLE payment processing BUG without success. The upgrade failed to work properly, I think perhaps because I might have had some prior database corruption in v1.39. I think this was caused by a few issues.

  1. A prior database restore some time ago in the wrong format, possibly UTF format, when it was originally in ISO-88591 format ?
  2. Possibly adding to my woes was my web hosts PHP and MySQL upgrades that then meant they used UFT format as default.
  3. I ended up with corrupt data in my product descriptions with that strange A character with the bar on top of it. This thing here ( Â ) Associated with this was the BUG where my v 1.39 product descriptions would not save properly and I ended up with nothing saved in 1.39 product descriptions. This was another motivation to upgrade to 1.53.

As a result of all the above, the upgrade never worked 100% properly. I came close by importing the old 1.39 data, after dropping all 1.53 tables and running the zc_install to upgrade the database, but then the product info did not display in version 1.53. Other than that it was looking good with all table records matching in 1.39 and 1.53.

In version 1.53, all I could see was small dot in the product description. The product summaries were visible along with the ability to manually enter a product order quantity and fill the shopping cart, however I could not order products. I kept getting that blank page when it tried to re-direct to PayPal after order confirmation via the PayPal Express button. Was also getting that "(35) error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure" message.

I then tried a raw 1.53 install, configured the PayPal express payment module and still got that damn POODLE Error when I tried to process an order.

"An error occurred when we tried to contact the payment processor. Please try again, select an alternate payment method, or contact the store owner for assistance. () - (35) error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure"

Only now have I found out that I only had to comment out 1 single line of software code in the payment module ( paypal_curl.php ) to make the current site work again. i.e. commented out this line; // CURLOPT_SSLVERSION => 3, // PayPal POODLE Security FIX. i.e. in includes/modules/payment/paypal/paypal_curl.php

Anyway we are now operational with the v 1.39 site again for now. I still need to upgrade my site to a newer version of ZenCart, but for now we can at least process orders. I’ve done an order payment test and it worked ok, so fingers crossed for now up until Christmas. The customers must be very forgiving, because the product descriptions have been trashed here and there, by this other UTF corruption BUG in my current 1.39 version and I can't update the product descriptions, because every time I do, I loose them completely, so we are slowing going backwards with my site.

Looks like I might have to bypass the 1.39 to 1.53 upgrade and start from scratch with 1.53, if I can't get around this data corruption issue. I might try to get around it, by doing the database upgrade, but just reentering the product description data in 1.53 manually. At least then I might have all the other data there, which might avoid having the rebuild the entire data set from scratch.

8 Dec 2014, 1:57 AM
#13
oavs avatar

oavs

Totally Zenned

Join Date:
Jan 2006
Location:
Downunder - QLD - Gold Coast
Posts:
921
Plugin Contributions:
0

Re: PayPal Express Checkout (35) SSL connect error

As per johnny1114 I can not find // CURLOPT_SSLVERSION => 3, in paypalwpp.php

can you please give us some direction how to fix this issue as described in your tread 'Important announcement about POODLE and payment security'

We can not operate and it is critical especially now.

Thank you

Version I am using is v1.5.1

9 Dec 2014, 4:25 AM
#14
heyits007 avatar

heyits007

Zen Follower

Join Date:
Sep 2010
Posts:
270
Plugin Contributions:
0

Re: PayPal Express Checkout (35) SSL connect error

Did you comment out // CURLOPT_SSLVERSION => 3, // PayPal POODLE Security FIX. i.e. in includes/modules/payment/paypal/paypal_curl.php

20 Dec 2014, 6:12 AM
#15
bocahydro avatar

bocahydro

Zen Follower

Join Date:
Aug 2013
Posts:
123
Plugin Contributions:
0

Re: PayPal Express Checkout (35) SSL connect error

12/20 sitting in my chair and I am seeing emails pop up

Dear store owner,
An error occurred when attempting to initiate a PayPal Express Checkout
transaction. As a courtesy, only the error "number" was shown to your
customer. The details of the error are shown below.

(35) SSL connect error

Zen Cart message: An error occurred when we tried to contact the payment
processor. Please try again, select an alternate payment method, or contact
the store owner for assistance.

Problem occurred while customer was attempting checkout with PayPal
Express Checkout.

went in and did a search of files

/home/content/37/9871137/html/includes/modules/payment/authorizenet_aim.php

Line #575 : curl_setopt($ch, CURLOPT_SSLVERSION, 3);

/home/content/37/9871137/html/includes/modules/payment/authorizenet_echeck.php

Line #585 : curl_setopt($ch, CURLOPT_SSLVERSION, 3);

/home/content/37/9871137/html/includes/modules/payment/linkpoint_api/class.linkpoint_api.php

Line #309 : curl_setopt ($ch, CURLOPT_SSLVERSION, 3);

/home/content/37/9871137/html/includes/modules/payment/paypal/paypal_curl.php

Line #58 : CURLOPT_SSLVERSION => 3,

/home/content/37/9871137/html/includes/modules/shipping/usps.php

Line #1201 : curl_setopt($ch, CURLOPT_SSLVERSION, 3);

added a simple // to them

and all is right and well

Thank you dr byte

5 Jan 2015, 1:27 PM
#16
w2e avatar

w2e

Zen Follower

Join Date:
Oct 2007
Posts:
103
Plugin Contributions:
0

Re: PayPal Express Checkout (35) SSL connect error

i commented out 5 curlopt lines in payment modules (following http://www.zen-cart.com/showthread.php?214916-Important-announcement-about-POODLE-and-payment-security) and express checkout seems to work.

however, my shipping module (only 1 line in the usps module that i commented out) is not working:
cannot select a shipping method. and when i click the paypal button, the total does not include shipping (i.e. 0)?

5 Jan 2015, 1:35 PM
#17
w2e avatar

w2e

Zen Follower

Join Date:
Oct 2007
Posts:
103
Plugin Contributions:
0

Re: PayPal Express Checkout (35) SSL connect error

never mind. it looks like it works, but paypal express checkout is no long "express."

5 Jan 2015, 1:46 PM
#18
w2e avatar

w2e

Zen Follower

Join Date:
Oct 2007
Posts:
103
Plugin Contributions:
0

Re: PayPal Express Checkout (35) SSL connect error

the problem is that customers can pay by paypal without paying shipping... that's trouble

5 Jan 2015, 2:42 PM
#19
mc12345678 avatar

mc12345678

Totally Zenned

Join Date:
Jul 2012
Posts:
16,908
Plugin Contributions:
2

Re: PayPal Express Checkout (35) SSL connect error

Have you upgraded your shipping module(s)?

For usps, search on usps.php by entering that into: tools->developers toolkit in the lower left corner, verify the dropdown includes the catalog and then click the button on the right. Post the result(s).

Also, what are the sort orders on modules->orders totals and which options are active?

15 Jan 2015, 11:02 AM
#20
crazycucumber avatar

crazycucumber

Zen Follower

Join Date:
Jan 2006
Posts:
403
Plugin Contributions:
0

Re: PayPal Express Checkout (35) SSL connect error

I have made the CURL changes to the Paypal_curl.php file and I have managed to get a paypal payment through , However ....

When clicking on the pay now with paypal button, it directs to paypal fine , i login fine , it redirect back to website but you can not checkout because it says "Please select payment method" but there is nowhere to do this at that part of the page is hidden, and in any case it should be Paypal selected already , and skip that part no?

Any help appreciated to fix this.