Still getting checkout error for PayPal even after update.

35. error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure

That is the error I am receiving even after I updated to the latest version. No one can pay with PayPal.

How did you update? What was the source of the code? How does the contents of the files and folders differ from a vanilla install?

Please answer the remaining applicable questions of the posting tips that are displayed above the text entry box when replying to this post.

What do you mean?

Jen Will:

What do you mean?

I mean, what is it about your site that is causing this issue when it is not across the board a problem, at least not so with a fresh install of ZC 1.5.4 as downloaded from this site and installed possibly by these instructions: http://www.zen-cart.com/entry.php?3-How-do-I-rebuild-my-site-on-the-new-version-instead-of-upgrading

If I knew what was causing the issue, I would not be looking for help. It says I have the latest version after the upgrade.

What is your site URL?
Who is your hosting company?

Jen Will:

If I knew what was causing the issue, I would not be looking for help.

Agree, so let's try a different approach. What from my posted questions did not make sense or needed clarification?

Mamabessiesplace.net and I have a reseller account through hostgator.

CURL appears to be working fine when doing a simple test: http://mamabessiesplace.net/extras/curltester.php?paypal=1

So, now you need to go to the server's files using FTP and copy and paste here the first 30 lines from /includes/modules/payment/paypal/paypal_curl.php

You want me to copy and paste the code in this thread?

An error occurred when we tried to contact the payment processor. Please try again, select an alternate payment method, or contact the store owner for assistance. () - (35) error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure

That is the error.

Dr. Byte requires seeing the requested lines of code from that file to determine what version of the file you have. The error screams that the upgrade was not done correctly, or that your hosts server is set up incorrectly.

text/x-generic paypal_curl.php
PHP script text

<?php
/**
 * paypal_curl.php communications class for PayPal Express Checkout / Website Payments Pro / Payflow Pro payment methods
 *
 * @package paymentMethod
 * @copyright Copyright 2003-2014 Zen Cart Development Team
 * @license [URL]http://www.zen-cart.com/license/2_0.txt[/URL] GNU Public License V2.0
 * @version GIT: $Id: Author: DrByte  Sat Nov 2 12:51:04 2013 -0400 Modified in v1.5.3 $
 */

/**
 * PayPal NVP (v61) and Payflow Pro (v4 HTTP API) implementation via cURL.
 */
class paypal_curl extends base {

  /**
   * What level should we log at? Valid levels are:
   *   1 - Log only severe errors.
   *   2 - Date/time of operation, operation name, elapsed time, success or failure indication.
   *   3 - Full text of requests and responses and other debugging messages.
   *
   * @access protected
   *
   * @var integer $_logLevel
   */
  var $_logLevel = 3;

  /**
   * If we're logging, what directory should we create log files in?
   * Note that a log name coincides with a symlink, logging will
   * *not* be done to avoid security problems. File names are
   * <DateStamp>.PayflowPro.log.
   *
   * @access protected
   *
   * @var string $_logFile
   */
  var $_logDir = DIR_FS_LOGS;

  /**
   * Debug or production?
   */
  var $_server = 'sandbox';

  /**
   * URL endpoints -- defaults here are for three-token NVP implementation
   */
  var $_endpoints = array('live'    => 'https://api-3t.paypal.com/nvp',
                          'sandbox' => 'https://api-3t.sandbox.paypal.com/nvp');
  /**
   * Options for cURL. Defaults to preferred (constant) options.
   */
  var $_curlOptions = array(CURLOPT_HEADER => 0,
                            CURLOPT_RETURNTRANSFER => TRUE,
                            CURLOPT_TIMEOUT => 45,
                            CURLOPT_CONNECTTIMEOUT => 10,
                            CURLOPT_FOLLOWLOCATION => FALSE,
                          //CURLOPT_SSL_VERIFYPEER => FALSE, // Leave this line commented out! This should never be set to FALSE on a live site!
                          //CURLOPT_CAINFO => '/local/path/to/cacert.pem', // for offline testing, this file can be obtained from [URL]http://curl.haxx.se/docs/caextract.html[/URL] ... should never be used in production!
                            CURLOPT_SSLVERSION => 3,
                            CURLOPT_FORBID_REUSE => TRUE,
                            CURLOPT_FRESH_CONNECT => TRUE,
                            CURLOPT_POST => TRUE,
                            );
...

That is the file from a 1.5.3 install instead of a 1.5.4

Really? When I log into admin it says it's up to date. I hired someone to update it for me.

Jen Will:

Really? When I log into admin it says it's up to date. I hired someone to update it for me.

What does the upper portion of the window report when the version link is selected in the admin panel as far as php version and ZC version?

Besides that, would have a discussion with the hired help about the situation. Even if the file were not updated to the 1.5.4 version, the base cause of the SSL3 error hasn't been addressed.

Change this line:
CURLOPT_SSLVERSION => 3,
To:
// CURLOPT_SSLVERSION => 3,

That change at least will allow sales to go through while figuring out and addressing other issues..

when you go to tools>server/version info what does it report for versions?
If a file buried in inludes/modules/payment/paypal folder is not up to date, it begs the question about what else was not uploaded correctly.

This has been fixed. Thank you.

Jen Will:

This has been fixed.
And for others searching for a solution to a similar problem and find this thread the solution was????

gilby:

And for others searching for a solution to a similar problem and find this thread the solution was????

My guess it was the POODLE update that hadn't been applied.

Change this line:
CURLOPT_SSLVERSION => 3,
To:
// CURLOPT_SSLVERSION => 3,

Cheers
RodG