View Issue Details

IDProjectCategoryView StatusLast Update
0005947module PayPalmodule PayPal - subpublic2014-11-10 08:46
ReporterCarolin Assigned To 
PriorityimmediateSeveritymajorReproducibilityalways
Status resolvedResolutionunable to reproduce 
Product Version3.1.2 
Target VersionPatch for 3.1 
Summary0005947: PayPal Sandbox - curl Error 35 despite of TLS
DescriptionSince yesterday it's not possible to connect to the PayPal sandbox on linux servers. You always get a curl error 35.

Same thing over commandline:

If I try:
curl -1 https://api-3t.sandbox.paypal.com/nvp

I get:
curl: (35) error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure


Solution:

open: modules\oe\oepaypal\core\oepaypalcurl.php

    /**
     * Curl default parameters.
     * @var array
     */
    protected $_aEnvironmentParameters = array(
        'CURLOPT_VERBOSE' => 0,
        'CURLOPT_SSL_VERIFYPEER' => false,
        'CURLOPT_SSL_VERIFYHOST' => false,
        'CURLOPT_SSLVERSION' => 1,
        'CURLOPT_RETURNTRANSFER' => 1,
        'CURLOPT_POST' => 1,
        'CURLOPT_HTTP_VERSION' => CURL_HTTP_VERSION_1_1,
    );



Add: 'CURLOPT_SSL_CIPHER_LIST' => 'TLSv1',



Compare to suggested solution for Paypal-SDK:
http://stackoverflow.com/questions/26759383/ssl-error-can-not-change-to-tls
TagsNo tags attached.

Activities

FibreFoX

2014-11-06 15:57

reporter   ~0010313

bug already confirmed and solved
https://bugs.oxid-esales.com/view.php?id=5918

-> duplicate

stephen

2014-11-06 16:30

reporter   ~0010314

bug already confirmed and solved
https://bugs.oxid-esales.com/view.php?id=5918
-> duplicate


No, not the same bug.

Bug 0005918 has been solved by the use of TLS instead of SSL v3. That was done by setting CURLOPT_SSLVERSION to 1 instead of 3.

But CURLOPT_SSLVERSION is set to 1 here. I.e.: The problem occurs despite using TLS. You will be able to reproduce if the statement named above fails on commandline:
curl -1 https://api-3t.sandbox.paypal.com/nvp

Currently the problem is related to sandbox only. It's likely to become a very big problem when it leaves sandbox.

hendrikfreytag

2014-11-06 17:02

reporter   ~0010315

I can reproduce it with current shop and paypal versions. This is a new "curl error 35". Not the same as I reported.

hendrikfreytag

2014-11-07 09:23

reporter   ~0010317

I tested it on some servers. On some servers I get errors on some servers not. So this is not a problem on all configurations. But the fix should be added to the extension that there are no problems at any servers.

jurate.baseviciene

2014-11-07 16:07

reporter   ~0010318

Reminder sent to: Carolin

Hi,


Thanks a lot for submitting this issue.
Could you please try to reproduce this problem again?

Best regards,
Jurate

hendrikfreytag

2014-11-07 16:29

reporter   ~0010319

I can still reproduce it.
Shop: EE 5.2.1
PayPal: 3.2.1
OS: Ubuntu 14.04
Curl: 7.35.0

Carolin

2014-11-10 01:36

reporter   ~0010320

Paypal has addressed and fixed the problem.

Bug can be closed.

See also: https://ppmts.custhelp.com/app/answers/detail/a_id/1191