OpenSSl/ Curl versions are too low

If they don’t, then you probably will need to move hosts, either now or in September. This isn’t a requirement I’m providing, it’s a PayPal security requirement and if they’re running OpenSSL 0.9, they are willfully squandering your security and that of your donors. Seriously, OpenSSL 0.9 is a sieve.

Basically, if it works now and doesn’t break, it might later and there will be no one (other than your host) who will be able to do anything about it.

Here is some helpful reading on SSL. To understand why we’re dealing with this, read:

https://www.zdnet.com/article/paypal-et-al-web-site-kicked-in-the-saas/

To understand SSL support in Seamless Donations, read:

https://zatzlabs.com/adding-https-support-to-seamless-donations-4-0-16/

And to follow along with the lessons I learned hand-installing my own SSL certificate, read:

https://zatzlabs.com/tricks-i-learned-installing-my-first-ssl-certificate/

–David

Yeah it took me 2 seconds to update these on my server and I dont get why they cant update theres.

oh, btw, It wont send data back to the plugin. PayPal still processes it in sandbox mode but no IPN back ?? which i expected.

Thanks for the response.

Yep, that would be expected.

–David

Along the issue of PayPal requires TLSv1.2, I contacted HostGator and they said:

This should be easily corrected with a small change to your code as the version of cURL on the server supports TLSv1.2:

curl_setopt ($curl, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1_2);

Please note that something along the lines of the above would be needed in the relevant scripts and this is something you may wish to get with the developers of the script(s) regarding.

This leads me to believe that a change to Seamless Donation is needed as they claim they support TLSv1.2

If this code is needed, where would I place it?

Please review and reply.

Thank you,
Ed

Nope. Code to do that is already there.

–David