Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

TLSv1.2 fails if Verify SSL set to TRUE


Recommended Posts

I am currently running Version 2.3.4 Edge which was downloaded 4 days ago from Git with the latest commits updated. I am using PayPal Payments Standard with the latest updates installed and if i run the test connection in SSL Version with the Verify SSL set to TRUE i get a double fail result(see screen1). If I turn the Verify SSL to FALSE then I get a Double Success(see screen2). I have Contacted My ISP and they have checked the sever connection to PayPal with TLSv1.2 and it connects ok  see https://duncansgunmakers.co.uk/catalog/TlsCheck.php 
They think it is something to do with my version of oscommerce. Any help would be much appreciated.

screen1.jpg

screen2.jpg

Link to comment
Share on other sites

@Duncansgunmakers

The first two lines ...

<?php
  define('HTTP_SERVER', 'http://192.168.1.51');
  define('HTTPS_SERVER', 'http://192.168.1.51');

(obviously, substitute your domain for the IP address above)

Try this  ...

<?php
  define('HTTP_SERVER', 'https://192.168.1.51');
  define('HTTPS_SERVER', 'https://192.168.1.51');

(note the httpS in both the URLs)

Malcolm

Link to comment
Share on other sites

There was another post reporting a similar problem the other day....seems there might have been an issue with the certificate.

Quote

I've tried that. It's reported that TNS 1.0, 1.1 and 1.2 are all compatible, but that it doesn't pass SNN CAA and the certificate isn't 'Trusted'. Where do we go from here, please @Artcolnc?

Many thanks

Colin

Are you seeing these other issues with your certificate when you check it at SSLLabs?

Dan

Link to comment
Share on other sites

3 hours ago, ArtcoInc said:

Just to clarify that statement, the SSL certificate used on the web server (to serve https) has nothing to do with the ssl libraries curl have been compiled with into PHP.

 

4 hours ago, Duncansgunmakers said:

if i run the test connection in SSL Version with the Verify SSL set to TRUE i get a double fail result(see screen1). If I turn the Verify SSL to FALSE then I get a Double Success(see screen2).

Optimally, Verify SSL should be left to True. Try setting the SSL Version from Default to TLS v1.2.

:heart:, osCommerce

Link to comment
Share on other sites

1 hour ago, Paul Featherby said:

If I set the Verify to True and the SSL Version to TLSv1.2 I still Get a double Failed.

This is strange as the minimum cURL and OpenSSL version requirements for TLS v1.2 are supported (judging by your screenshots).

Do test transactions work with PayPal with "Verify SSL" set to True and "SSL Version" set to either Default or TLS v1.2? It might just be the test connection script failing under your environment.

:heart:, osCommerce

Link to comment
Share on other sites

Harald thank you for response I have just tried a test purchase with the Verify SSL set to TRUE and SSL Version Set to TLSv1.2 and it has worked OK. So I guess it it just a problem with the test script as you suggest.

Without your help us shop owners would be in the PHooP.

Thanks again for your help

Link to comment
Share on other sites

  • 2 weeks later...

I tested my installation and the 'test installation', fails now. and it didn't when I updated to version v5.018.

Customers are still using PayPal sucessfully, so does the script need correcting?

Mike

osC CE live - developing osC Phoenix adding modules with no core changes(awesome and easy!)

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...