Zen Cart Logo
Forums / PayPal Express Checkout support / (51) SSL peer certificate or SSH remote key was not OK

(51) SSL peer certificate or SSH remote key was not OK

Views: 3,286

Results 1 to 4 of 4
17 Apr 2015, 10:22 AM
#1
lat9 avatar

lat9

Administrator

Join Date:
Sep 2009
Location:
Stuart, FL
Posts:
14,098
Plugin Contributions:
56

(51) SSL peer certificate or SSH remote key was not OK

A site that I'm managing threw two of the following PayPal CURL errors on April 13th, within 2 minutes. Site details:

  • Recently upgraded to v1.5.4 (from 1.3.5)
  • PHP 5.3.29
  • MySQL 5.5.42-cli
  • Server OS: Linux 2.6.32-431.5.1.el6.x86_64
  • Site has a dedicated SSL certificate (COMODO)
2015-04-13 05:12:37
-------------------
(live transaction) --> https://api-3t.paypal.com/nvp
Request Headers:
Array
(
[0] => Content-Type: text/namevalue
[1] => X-VPS-Timeout: 90
[2] => X-VPS-VIT-Client-Type: PHP/cURL
[3] => X-VPS-VIT-Integration-Product: PHP::Zen Cart(R) - PayPal/NVP
[4] => X-VPS-VIT-Integration-Version: 1.5.4
)


Request Parameters: {GetTransactionDetails}
Array
(
[TRANSACTIONID] => 18308746Y7415742E
[METHOD] => GetTransactionDetails
[USER] => shop_api1.xxxxx
[PWD] => ****************
[VERSION] => 61.0
[SIGNATURE] => ****************************************************xYTo
)


Response:
Array
(
[] =>
[CURL_ERRORS] => (51) SSL peer certificate or SSH remote key was not OK
)

(51) SSL peer certificate or SSH remote key was not OK
Array
(
[url] => https://api-3t.paypal.com/nvp
[content_type] =>
[http_code] => 0
[header_size] => 0
[request_size] => 0
[filetime] => -1
[ssl_verify_result] => 1
[redirect_count] => 0
[total_time] => 5.488148
[namelookup_time] => 5.487966
[connect_time] => 5.488167
[pretransfer_time] => 0
[size_upload] => 0
[size_download] => 0
[speed_download] => 0
[speed_upload] => 0
[download_content_length] => -1
[upload_content_length] => -1
[starttransfer_time] => 0
[redirect_time] => 0
[certinfo] => Array
(
)

[redirect_url] =>
)


GetTransactionDetails, Elapsed: 5516ms -- Failed
(51) SSL peer certificate or SSH remote key was not OK
Array
(
[url] => https://api-3t.paypal.com/nvp
[content_type] =>
[http_code] => 0
[header_size] => 0
[request_size] => 0
[filetime] => -1
[ssl_verify_result] => 1
[redirect_count] => 0
[total_time] => 5.488148
[namelookup_time] => 5.487966
[connect_time] => 5.488167
[pretransfer_time] => 0
[size_upload] => 0
[size_download] => 0
[speed_download] => 0
[speed_upload] => 0
[download_content_length] => -1
[upload_content_length] => -1
[starttransfer_time] => 0
[redirect_time] => 0
[certinfo] => Array
(
)

[redirect_url] => 

CURL configuration:

cURL support 	enabled
cURL Information 	7.38.0
Age 	3
Features
AsynchDNS 	No
Debug 	No
GSS-Negotiate 	No
IDN 	Yes
IPv6 	Yes
Largefile 	Yes
NTLM 	Yes
SPNEGO 	No
SSL 	Yes
SSPI 	No
krb4 	No
libz 	Yes
CharConv 	No
Protocols 	dict, file, ftp, ftps, gopher, http, https, imap, imaps, pop3, pop3s, rtsp, smtp, smtps, telnet, tftp
Host 	x86_64-unknown-linux-gnu
SSL Version 	OpenSSL/1.0.1e
ZLib Version 	1.2.3 

Ideas welcomed.

17 Apr 2015, 4:12 PM
#2
lhungil avatar

lhungil

Totally Zenned

Join Date:
Feb 2012
Location:
mostly harmless
Posts:
1,818
Plugin Contributions:
4

Re: (51) SSL peer certificate or SSH remote key was not OK

Is the SSL Certificate using SHA1?

17 Apr 2015, 4:56 PM
#3
lat9 avatar

lat9

Administrator

Join Date:
Sep 2009
Location:
Stuart, FL
Posts:
14,098
Plugin Contributions:
56

Re: (51) SSL peer certificate or SSH remote key was not OK

The connection uses TLS 1.2. The key-exchange mechanisms are AES_128_GCM and ECDHE_RSA.

17 Apr 2015, 7:40 PM
#4
lat9 avatar

lat9

Administrator

Join Date:
Sep 2009
Location:
Stuart, FL
Posts:
14,098
Plugin Contributions:
56

Re: (51) SSL peer certificate or SSH remote key was not OK

Update: If I view the FireFox/FireBug console when viewing the site, I do receive a message that the site's using a SHA-1 certificate.