Magento – Magento – PayPal – SSLV3 : Will it work when PayPal discontinue SSL3 on 3rd Dec

paypal

I just received an email from PayPal stating because of Poodle vulnerability they will discontinue support for SSLV3 using their payment API from 3rd of Dec 2014.

Just wanted to put it out there and ask if anyone knows if this will directly effect the PayPal Payment Pro / Hosted Solution / Express payments integration in Magento 1.9.0.1 (latest)?

If so – anyone have an idea how I can go about fixing the standard paypal modules in magento?

Thanks!

Best Answer

As I understand it (and please correct me if I'm wrong) that it is in fact your hosting company (if on a shared platform) or you yourself if on VPS or Dedicated server for example that would have to disable the SSLv3. Your web host should do this, if they haven't already, and if you are responsible for your own server then I believe you can modify your httpd.conf and add the following;

SSLProtocol ALL -SSLv2 -SSLv3

This will disable v2 and v3 and I believe that TLS is the standard fallback connection.

This is if Apache config so if you are using something else, then the code may change slightly, but hopefully this helps you a little but I would be grateful to hear other peoples input on this too.

Related Solutions

Magento – Return from PayPal Express to One Page checkout

Adding answer from above so that this can be marked as completed:

PayPal Pro was less than ideal - can't auto return for CC/DC payments

Switched to PayPal Hosted. It works ok, but with limited options for customising the experience at PP, it still has a detached feel about it. But that's a PP problem, not Magento!

Magento – Magento CE won’t let me use PayPal Standard without Express (which requires API credentials)

I found the "steps to reproduce" and hotfix. Originally we enabled the "Website Payments Standard" payment method and then disabled because we had the problem with "Suspect Fraud" status. Immediately after I disabled the "Website Payments Standard" it turned into "Website Payments Standard (Includes Express Checkout)" and I was not able to revert it back. This behaviour is always reproducible on Magento CE 1.9.1.0

I found out that if I enable the payment method directly in database, it reverts back to the "Website Payments Standard".

This is the query to re-enable it:

update core_config_data 
set value = '1' 
where path = 'payment/paypal_standard/active';

I am not sure why it behaves like that and we have not enable it on production yet because we are still trying to solve the "Suspect Fraud" status problem. We discovered that some of the modules we installed are causing conflicting (Stored Credits, Payment Charge etc) and thus charging incorrect amounts, but that is different story.

Best Answer

Related Solutions

Magento – Return from PayPal Express to One Page checkout

Magento – Magento CE won’t let me use PayPal Standard without Express (which requires API credentials)

Related Topic