Need to update for TLS 1.2

[caniol 0]

My online store is built on v2.2 RC2a.  I utilize both Authorize.net and PayPal Exress to process payments.  They have both stopped supporting TLS 1.0 and TLS1.1.  I don’t want to move up to a new version of osCommerce just yet (I have a new project in the works). What do I need to update to use TLS 1.2? Thanks in advance.

[♥14steve14 420]

Are you sure that oscommerce needs updating. I thought lots of this TLS updating stuff was all about the server. Speak to your hosts.

I may be totally wrong though.

[241 17]

I remember changing the curl calls for IPN

    curl_setopt($ch, CURLOPT_HTTP_VERSION, CURL_HTTP_VERSION_1_1);
    curl_setopt($ch, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1_2);

Paypal had a page about the changes required for TLS 1.2

[bigsteve111 0]

Quote

 

We have the same problem upgrading to TLS1.2 but our problem is a bit different. Because our office service is Microsoft, the programmer wrote the osC to MS code in dotnet which in turns also communicates with Paymentech (which processes the credit cards. We were lead to believe that this had to be upgraded not the code in osCommerce. If anyone knows differently, we'd be happy to pay for the fix.

[♥JcMagpie 1,033]

On 6/27/2018 at 9:31 PM, caniol said:

What do I need to update to use TLS 1.2?

😊 Well first use a smaller font, my eyes hurt reading that!

Also first check if you have a problem by testing your site.

https://www.ssllabs.com/ssltest/

For paypal see this,

https://www.paypal.com/uk/smarthelp/article/why-do-i-need-to-upgrade-my-system-to-tls-1.2-faq3898

Then follow this thread, hopfully that will help.

 

Edited September 11, 2018 by JcMagpie

[♥raiwa 765]

@caniol,

TLS 1.2 requires  Curl 7.34.0+ and PHP 5.4+

Osc 2.2rc2a reqires to be patched to work under PHP 5.4.