Julie Ladd

Thank you for the new reply, Mike. I see only an image when I click the link for the sandbox tester plugin, and it’s not in the WordPress repository. Am I missing something?

Also, for anyone who uses Cloudflare Flexible SSL for their WooCommerce sites, I received the following reply from Cloudflare support when I inquired with them:

Regarding Paypal’s recent notification on SHA-2 support and root certificates.
? Do I need a SHA-2 certificate on my site?
The notification regarding SHA-2 certificates refers to your origin server supporting a SHA-2 certificate, not CloudFlare.
Paypal are migrating their IPN endpoints to use a SHA-2 cert and so want to ensure that websites connecting to these endpoints can support this. This refers to the connection from your origin to PayPal, which is made, for example, when a transaction is processed or payment taken.

CloudFlare is not involved in this connection as it is directly from your origin to PayPal.
For most servers, this won’t be an issue, but do speak to your host if you are in any doubt.
? What about the G2 root certificate warning?
The warning regarding G2 root certificates refers to users with Verisign certificates. CloudFlare does not use Verisign certificates (We use Globalsign/Comodo) so this warning can be ignored.
For further information, see Paypal’s own guide here: https://www.paypal-knowledge.com/infocenter/index?page=content&id=FAQ1766&expand=true&locale=en_US.

Finally, in case it may also help others with this question, my host has indicated that because my sites send buyers to Paypal to complete the transaction and I do not use my host’s SSL server, this should not be an issue for my sites.

Check with your host if you have concerns or run a test transaction.

Paypal support was less helpful for those who are not as tech-savvy– their recommendations were to check with my shopping cart provider, host and developer. Honestly, I expected a better explainer from a company that specializes in making eCommerce payment processing simple even for beginners.

Never mind. I found another plugin that solved the problem.

Yes, it exists. Folder permission is 755, files are 644.