PayPal Express Checkout Error after POODLE fix

Hi there -

I've had a ZenCart site for years: https://www.ThreeSistersFabric.com I upgraded to 1.5.1 last July. The site had been previously upgraded a couple of times and had too many unused mods, so I used new files and added my necessary mods and customizations and then upgraded the database. All went very, very well. I use BlueHost. PHP Version 5.4.24

When the POODLE thing came up, I made those easy changes and all has been well until recently. I'm getting errors as if the fix was not applied, and it definitely is. Some orders come through. Some do not. PayPal is my only processor. When I get the error, it always says PayPal Express, but I'm not sure how to find out if any PayPal Express orders are making it through.

Here is the message I receive:
(35) error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake
failure

Zen Cart message: An error occurred when we tried to contact the payment
processor. Please try again, select an alternate payment method, or contact
the store owner for assistance.

I appreciate any help you can give me.

So to confirm, still using ZC 1.5.1 and also using PHP 5.4... Any reason not to upgrade to Zc 1.5.4? (Have you made the mods that are considered necessary for 1.5.1 to be supported fully under PHP 5.4?) When did the PHP get upgraded?

Okay, all that said, it doesn't have anything really to do with SSL3... So you've made the mods that are posted here: https://www.zen-cart.com/showthread.php?214916-Important-announcement-about-POODLE-and-payment-security

All of them and then verified that they remained in place by opening the file(s) again?

mc12345678:

So to confirm, still using ZC 1.5.1 and also using PHP 5.4...

Yup.

Any reason not to upgrade to Zc 1.5.4? (Have you made the mods that are considered necessary for 1.5.1 to be supported fully under PHP 5.4?)

Time. I'm teaching school in Nicaragua this year and won't be home again until June. I'm still managing my website, but don't really have the time to do the upgrade.

When did the PHP get upgraded?

I'm not sure. I just looked at my cPanel and saw that's what it said it's running. I'm not exactly "skilled" in this field. :blush:

Okay, all that said, it doesn't have anything really to do with SSL3... So you've made the mods that are posted here: https://www.zen-cart.com/showthread.php?214916-Important-announcement-about-POODLE-and-payment-security

All of them and then verified that they remained in place by opening the file(s) again?

Yup. And just double-checked again.

Hmm... Well I've seen something about using the ZC 1.5.4 version of the PayPal Express files in a 1.5.1 environment, but I thought there might be some particular actions or mods necessary along with it. The other thing would be to investigate communication through the ipncheck utility...

Would suggest looking through Dr. Byte's "recent posts" but, lord knows you'd be looking forever. :@

I guess I'll do some more looking around. I spent quite a bit of time searching the forum before I posted, but maybe with these ideas I'll find something else...

The other thing would be to investigate communication through the ipncheck utility...
I don't know what that is, but I can do some research in that direction.

Thanks for your thoughts.

Three Sisters:

I guess I'll do some more looking around. I spent quite a bit of time searching the forum before I posted, but maybe with these ideas I'll find something else...

I don't know what that is, but I can do some research in that direction.

Thanks for your thoughts.

Not at the top of my gametoday related to ZC, but ithink itis inthe extras folder off of the store's root...the version provided in more recent ZC versions is a little more automated than that with 1.5.1 which may require switches in the uri to obtain additional data. (Would have to inspect the code to help further on that. Maybe another kind soul would be able to point you more inthe right direction.

Told ya' I wasn't onmy game yesterday. Lead you (and others) wrong. The file you want to use to do testing is curltester.php. Just came across someone else that was having difficulty and they mentioned that file and I wanted to get back to provide the info to you.

Thanks for the reply. I did know about that file already and tried it. I get this:

35 error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure

I'm just not sure what all that means.

Three Sisters:

Thanks for the reply. I did know about that file already and tried it. I get this:

35 error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure

I'm just not sure what all that means.

Generally speaking it means either the patch provided at: https://www.zen-cart.com/showthread.php?214916-Important-announcement-about-POODLE-and-payment-security (but that's been covered twice now already in this thread) hasn't been applied, or your host has not properly setup CURL in response to that same issue.

Those are the two things that come to mind; however, hopefully/maybe someone else can/will chime in.