Skip to content
This repository has been archived by the owner on Sep 10, 2022. It is now read-only.

Commit

Permalink
Enabled Checks for TLSv1.2 support.
Browse files Browse the repository at this point in the history
- Update your configurations to use `tls` instead of `sandbox` to verify server support
  • Loading branch information
Jay Patel committed Dec 9, 2015
1 parent 83293b3 commit b2dd662
Show file tree
Hide file tree
Showing 4 changed files with 13 additions and 1 deletion.
3 changes: 3 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,8 @@
### CHANGELOG

####Version 3.9.1 - Dec 9, 2015
- Added TLSv1.2 Endpoint support

####Version 3.9.0 - Sep 22, 2015
- Updated IPN Endpoint

Expand Down
5 changes: 5 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,11 @@

The merchant SDK can be used for integrating with the Express Checkout, Mass Pay, Web Payments Pro APIs.

## TLSv1.2 Update
> **The [PCIv3.1 DSS (PDF)](https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-1.pdf) mandates (p.46) that TLSv1.0 be retired from service by June 30, 2016. All organizations that handle credit card information are required to comply with this standard. As part of this obligation, PayPal is updating it's services to require TLSv1.2 for all HTTPS connections. [Click here](https://github.paypal.com/SDK-R/tls-update) for more information**
> A new `mode` has been created to test if your server/machine handles TLSv1.2 connections. Please use `tls` mode instead of `sandbox` to verify. You can return back to `sandbox` mode once you have verified. Please have a look at this [Sample Configuration](https://github.com/paypal/merchant-sdk-php/blob/namespace-php5.3/samples/Configuration.php#L10-15).
## POODLE Update
- Because of the Poodle vulnerability, PayPal has disabled SSLv3.
- To enable TLS encryption, the changes were made to [PPHttpConfig.php](https://github.com/paypal/sdk-core-php/blob/namespace-5.3/lib/PayPal/Core/PPHttpConfig.php#L11) in [SDK Core](https://github.com/paypal/sdk-core-php/tree/namespace-5.3) to use a cipher list specific to TLS encryption.
Expand Down
2 changes: 1 addition & 1 deletion lib/PayPal/Service/PayPalAPIInterfaceServiceService.php
Original file line number Diff line number Diff line change
Expand Up @@ -71,7 +71,7 @@ class PayPalAPIInterfaceServiceService extends PPBaseService {
protected static $SDK_NAME = "merchant-php-sdk";

// SDK Version
protected static $SDK_VERSION = "3.9.0";
protected static $SDK_VERSION = "3.9.1";

/**
* @param $config - Dynamic config map. This takes the higher precedence if config file is also present.
Expand Down
4 changes: 4 additions & 0 deletions samples/Configuration.php
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,11 @@ public static function getConfig()
$config = array(
// values: 'sandbox' for testing
// 'live' for production
// 'tls' for testing if your server supports TLSv1.2
"mode" => "sandbox",
// TLSv1.2 Check: Comment the above line, and switch the mode to tls as shown below
// "mode" => "tls"

'log.LogEnabled' => true,
'log.FileName' => '../PayPal.log',
'log.LogLevel' => 'FINE'
Expand Down

0 comments on commit b2dd662

Please sign in to comment.