1. Paypal security upgrade - Stop SSL V3 Switch to TLS 1.2

Paypal will stop SSL V3 support and switched to use TLS 1.2 for API service - https://devblog.paypal.com/upcoming-security-changes-notice/

     Paypal Sandbox(testing) environment has been stopped SSL V3 support and switched to TLS 1.2  since Jany 19, 2016.

     Paypal Live production) environment will stop SSL V3 and switch to use TLS 1.2 from June 2017 (the original schedule was June 17, 2016).

If you web server or module does not support TLS 1.2, you may encounter following communication errors

14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure

2. Web server upgrade

In order to use Paypal, your web server must be upgrade OpenSSL to 1.0.1c or higher to support TLS 1.2. Please contact your service provider to make sure the web server has been upgraded to support TLS 1.2.

You can check OpenSSL version by running following PHP script (with following contents) at your store

<?php

phpinfo();

?>

You can find here to download the binary version of OpenSSL

https://wiki.openssl.org/index.php/Binaries

3. Agile Module Upgrade

if you are using following agile modules and versions, you will need to upgrade to latest version. Please contact us at [email protected]