Jump to content
caniol

Need to update for TLS 1.2

Recommended Posts

My online store is built on v2.2 RC2a.  I utilize both Authorize.net and PayPal Exress to process payments.  They have both stopped supporting TLS 1.0 and TLS1.1.  I don’t want to move up to a new version of osCommerce just yet (I have a new project in the works). What do I need to update to use TLS 1.2? Thanks in advance.

Share this post


Link to post
Share on other sites

Are you sure that oscommerce needs updating. I thought lots of this TLS updating stuff was all about the server. Speak to your hosts.

I may be totally wrong though.


REMEMBER BACKUP, BACKUP AND BACKUP

Get the latest Responsive osCommerce CE (community edition) here

It's very easy to over complicate what are simple things in life

Share this post


Link to post
Share on other sites

I remember changing the curl calls for IPN

    curl_setopt($ch, CURLOPT_HTTP_VERSION, CURL_HTTP_VERSION_1_1);
    curl_setopt($ch, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1_2);


Paypal had a page about the changes required for TLS 1.2


No longer giving free advice. Please place deposit in meter slot provided.  Individual: [=] SME: [==] Corporation: [===]
If deposit does not fit one of the slots provided then you are asking too much! :P


Support The Project
Documentation/Knowledgebase/Discussions
 

Share this post


Link to post
Share on other sites
Quote

 

We have the same problem upgrading to TLS1.2 but our problem is a bit different. Because our office service is Microsoft, the programmer wrote the osC to MS code in dotnet which in turns also communicates with Paymentech (which processes the credit cards. We were lead to believe that this had to be upgraded not the code in osCommerce. If anyone knows differently, we'd be happy to pay for the fix.

Share this post


Link to post
Share on other sites
On 6/27/2018 at 9:31 PM, caniol said:

What do I need to update to use TLS 1.2?

😊 Well first use a smaller font, my eyes hurt reading that!

Also first check if you have a problem by testing your site.

https://www.ssllabs.com/ssltest/

For paypal see this,

https://www.paypal.com/uk/smarthelp/article/why-do-i-need-to-upgrade-my-system-to-tls-1.2-faq3898

Then follow this thread, hopfully that will help.

 

Edited by JcMagpie

 

Share this post


Link to post
Share on other sites

@caniol,

TLS 1.2 requires  Curl 7.34.0+ and PHP 5.4+

Osc 2.2rc2a reqires to be patched to work under PHP 5.4.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×