Rank: Member
Joined: 3/7/2007(UTC)
Posts: 11
|
When using PayPal Express I get the error below. If I refresh my server application pool it will work again for an undetermined amount of time then the below error will occur once again. I have already contacted PayPal and they advise the problem is with our site. Since the PayPal Express API was included with BVC5 I am now posting here....
Paypal checkout error: com.paypal.sdk.exceptions.TransactionException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. ---> System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. ---> System.Net.WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.
|
|
|
|
|
|
Rank: Member
Joined: 11/5/2003(UTC)
Posts: 2,136
Was thanked: 1 time(s) in 1 post(s)
|
I'm pretty sure this means that the server running your copy of BVC5 does not trust the PayPal certificate. I would contact your host and ask them to look into this. |
|
|
|
|
|
|
Rank: Member
Joined: 3/7/2007(UTC)
Posts: 11
|
Thanks for the help, we are not using the certificate method of PayPal. We use the 3 token method. Anymore ideas?
|
|
|
|
|
|
Rank: Member
Joined: 11/5/2003(UTC)
Posts: 2,136
Was thanked: 1 time(s) in 1 post(s)
|
I'm sorry I was not clear. I did not mean the transaction certificate, I meant PayPal's SSL certificate (the certificate that PayPal uses to encrypt the connection when you access their server using the HTTPS protocol).
PayPal recently started using a new EV (extended Validation) certificate to encrypt HTTPS connections. It is quite likely that the computer hosting your web site does not "trust" the new certificate or one of the two certificate authorities that are listed in the certificate. If that is the problem, then the fix is quite simple. Your host just needs to add PayPal's new certificate to the "trusted" certificate list. |
|
|
|
|
|
|
Rank: Member
Joined: 3/7/2007(UTC)
Posts: 11
|
Thanks again Andy. I contacted our host to add PayPal's new certificate. I also would like to mention that when PayPal generates this error, the built in UPS shipping calculator stops working as well. It will not retrieve the additional expedited shipping prices from UPS.
And as I mentioned earlier, the only way to fix these issues is to reset the application pool in IIS for this particular site. Also, I have this site running in a dev environment which exactly mirrors the live site, only difference is that the dev site doesn't have an SSL certificate. The dev site always seems to work with PayPal and the shipping calculator always works on there as well.
Do you think PayPal would error out and cause the server or the BV5 site to no longer send or receive connections from external sources?
|
|
|
|
|
|
Rank: Member
Joined: 11/5/2003(UTC)
Posts: 2,136
Was thanked: 1 time(s) in 1 post(s)
|
"Do you think PayPal would error out and cause the server or the BV5 site to no longer send or receive connections from external sources?"
No, but I think if the server is no longer able to make a connection with an external source you would see both errors. In other words, I do agree the errors are probably linked but I suspect they occur in a slightly different order (something breaks...possibly certificate store on server, then external connections to remote sources break). |
|
|
|
|
|
|
Rank: Member
Joined: 3/7/2007(UTC)
Posts: 11
|
I see... In order to implement the fixes you and our web host are suggesting we would have to change our paypal store from 3-Token method to the Certificate method... Thus resulting in changing the API key and code on multiple sites of ours. So instead I think I'll try the Cardinal Commerce plug-in and see if this fixes the issue.
|
|
|
|
|
|
Forum Jump
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.