OK, thank you! I'll get on to the host & see what they say!
PayPal Instant Payment Notifications Failing
Collapse
X
-
What might I be looking at to allow this?
My host doesn't seem to have any suggestions and can't see anything in the log.
I have asked them to check again.
There have been a number of subscription renewals in the last week and not one of them has been recorded via the IPN.
Also, they've therefore not been added to a live subscription, so I'm going to have to go and match them up manually.
I attempt to use the IPN simulator & it says "IPN was not sent, and the handshake was not verified. Please review your information."
Any ideas? I initially thought this was just a notification, but it's actually stopping the Paid Subscription working.Comment
-
Googling for the error message you posted gave me this as one of the results:
The handshake error is most likely to occur when your server/keystore config is non-compliant with the upgraded PayPal SSL encryption algorithms.
IPN simulator will connect againest the PayPal Sandbox environment, which has been upgraded with Versign G5 root cert / SHA-2 encryption algorithms (btw this is an industry standard as supposed to be everywhere in 2016). Once your IPN host failed to meet the compliance, the SSL connnection will error out with handshake problems.
Simply check your server by running a connection script against the PayPal sandbox endpoint like this:
openssl s_client -connect api-3t.sandbox.paypal.com:443 -showcerts -CApath /etc/ssl/certs/
If you were not getting an Verify return code: 0 (ok), you would probably have to check the cert/SHA-2 compatibility, following the general instructions that PayPal has published here:
2015-2016 SSL Certificate Change MicrositeComment
-
Thanks Glenn - I sent the above to the hosts, but they're stuck and asking for vBulletin assistance.
Argh, I feel totally stuck in the middle!
Can someone from vBulletin tell me what the server requirement for this is? This has been broken for months and it's stopping core vBulletin functionality!
Comment
-
Does your SSL certificate support SHA-256 algorithm? Did you follow the SSL certificate upgrade guidelines provided by Paypal?
Comment
-
OK, hosting company say that it supports SHA-256. That's fine.
I've spoken to Paypal who say that it's definitely a 403 error. Problem is, the hosting company say there are no 403 errors reported.
Argh!
I'm getting them to look at it again, but does anyone have any suggestion of which permissions I can look at?
Thanks for your help Glenn.
Comment
-
Glad you finally figured it out.Comment
widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.
Comment