Security header is not valid (10002) - Please Help!

[lsaero]

I just loaded the PayPal WPP contrib. Everything went well! I installed it in admin and then configured it with the merchant API signature from PayPal and now get this error -

 

Error An error occured when we tried to contact PayPal's servers.

 

Security error

Security header is not valid (10002)

 

I am in test mode. When I click on "Checkout with PayPal" button in the checkout_payment.php file, the checkout_shipping.php file has that error at the top of the page.

 

Here's the URL - http://chaindraggone.net/oscommerce2/catal...opping_cart.php

 

Please Help! Thanks.

 

Mark

Edited December 12, 2007 by lsaero

[lsaero]

Just wanted to add the PayPal Error Dump, hoping it will someone give me a hand here! PLEASE?

 

In function: ec_step1()

 

SetExpressCheckoutResponseType Object

(

[Token] =>

[Timestamp] => 2007-12-13T15:56:49Z

[Ack] => Failure

[CorrelationID] => a28caa5586b3d

[Errors] => ErrorType Object

(

[shortMessage] => Security error

[LongMessage] => Security header is not valid

[ErrorCode] => 10002

[severityCode] => Error

[ErrorParameters] =>

[_elements] => Array

(

[shortMessage] => Array

(

[required] => 1

[type] => string

[namespace] => urn:ebay:apis:eBLBaseComponents

)

 

[LongMessage] => Array

(

[required] =>

[type] => string

[namespace] => urn:ebay:apis:eBLBaseComponents

)

 

[ErrorCode] => Array

(

[required] => 1

[type] => token

[namespace] => urn:ebay:apis:eBLBaseComponents

)

 

[severityCode] => Array

(

[required] => 1

[type] => SeverityCodeType

[namespace] => urn:ebay:apis:eBLBaseComponents

)

 

[ErrorParameters] => Array

(

[required] =>

[type] => ErrorParameterType

[namespace] => urn:ebay:apis:eBLBaseComponents

)

 

)

 

[_attributes] => Array

(

)

 

[_attributeValues] => Array

(

)

 

[_namespace] => urn:ebay:apis:eBLBaseComponents

)

 

[Version] => 2.300000

[build] => 1.0006

[_elements] => Array

(

[Timestamp] => Array

(

[required] =>

[type] => dateTime

[namespace] => urn:ebay:apis:eBLBaseComponents

[charset] => iso-8859-1

)

 

[Ack] => Array

(

[required] => 1

[type] => AckCodeType

[namespace] => urn:ebay:apis:eBLBaseComponents

[charset] => iso-8859-1

)

 

[CorrelationID] => Array

(

[required] =>

[type] => string

[namespace] => urn:ebay:apis:eBLBaseComponents

[charset] => iso-8859-1

)

 

[Errors] => Array

(

[required] =>

[type] => ErrorType

[namespace] => urn:ebay:apis:eBLBaseComponents

[charset] => iso-8859-1

)

 

[Version] => Array

(

[required] => 1

[type] => string

[namespace] => urn:ebay:apis:eBLBaseComponents

[charset] => iso-8859-1

)

 

[build] => Array

(

[required] => 1

[type] => string

[namespace] => urn:ebay:apis:eBLBaseComponents

[charset] => iso-8859-1

)

 

[Token] => Array

(

[required] => 1

[type] => ExpressCheckoutTokenType

[namespace] => urn:ebay:api:PayPalAPI

)

 

)

 

[_attributes] => Array

(

)

 

[_attributeValues] => Array

(

)

 

[_namespace] => urn:ebay:api:PayPalAPI

)

[strupat]

The "live" PayPal system and the "sandbox" PayPal System seem to have two different, not-interchangeable API certificates. When using the sandbox endpoint one needs to have the sandbox API certificate, obtained from sandbox.paypal.com and/or developer.paypal.com. When using the real or "live" endpoint one needs to have the real API certificate, obtained from www.paypal.com. After changing to the proper API certificate the "Security header is not valid (10002)" error message did not re-occur and the problem was solved.