1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Just got this email from Paypal - anything I need to do in XF?

Discussion in 'XenForo Questions and Support' started by Ludachris, Sep 10, 2015.

  1. Ludachris

    Ludachris Well-Known Member

    "Paypal Service Upgrades:

    As we have previously communicated to you, PayPal is upgrading the certificate for www.paypal.comto SHA-256. This endpoint is also used by merchants using the Instant Payment Notification (IPN) product.

    This upgrade is scheduled for 9/30/2015; however, we may need to change this date on short notice to you to align to the industry security standard.

    You’re receiving this notification because you’ve been identified as a merchant who has used IPN endpoints within the past year. If you have not made the necessary changes, we urge you to do so right away to avoid a disruption of your service!

    Because these changes are technical in nature, we advise that you consult with your individuals responsible for your PayPal integration. They will be able to identify what, if any, changes are needed. Please share this email and the hyperlinks below with your technical contact for evaluation.

    Testing in the Sandbox is one of the best ways to make sure your integration works. Sandbox endpoints have been upgraded to accept secure connections by the SHA-256 Certificates.

    Full technical details can be found in our Merchant Security System Upgrade Guide. In addition, our2015-2016 SSL Certificate Change microsite contains a schedule of our service upgrade plan.

    Thanks for your patience as we continue to improve our services."
    rwm1962 likes this.
  2. Tiki Tiki

    Tiki Tiki Active Member

    You beat me to it! I was just about to post the same thing! :)
  3. Arty

    Arty Well-Known Member

    Looks like a simple SSL certificate upgrade. XenForo uses cURL to connect to PayPal to verify tokens, cURL relies on libssl to deal with SSL that can handle SHA256 certificates.

    So nothing to do for XF users. To be completely safe, make sure your PHP isn't too ancient.
    OakleyForum and rwm1962 like this.

Share This Page