Skip to content
This repository was archived by the owner on Aug 22, 2025. It is now read-only.

Commit b2dd662

Browse files
author
Jay Patel
committed
Enabled Checks for TLSv1.2 support.
- Update your configurations to use `tls` instead of `sandbox` to verify server support
1 parent 83293b3 commit b2dd662

4 files changed

Lines changed: 13 additions & 1 deletion

File tree

CHANGELOG.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,8 @@
11
### CHANGELOG
22

3+
####Version 3.9.1 - Dec 9, 2015
4+
- Added TLSv1.2 Endpoint support
5+
36
####Version 3.9.0 - Sep 22, 2015
47
- Updated IPN Endpoint
58

README.md

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,11 @@
22

33
The merchant SDK can be used for integrating with the Express Checkout, Mass Pay, Web Payments Pro APIs.
44

5+
## TLSv1.2 Update
6+
> **The [PCIv3.1 DSS (PDF)](https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-1.pdf) mandates (p.46) that TLSv1.0 be retired from service by June 30, 2016. All organizations that handle credit card information are required to comply with this standard. As part of this obligation, PayPal is updating it's services to require TLSv1.2 for all HTTPS connections. [Click here](https://github.paypal.com/SDK-R/tls-update) for more information**
7+
8+
> A new `mode` has been created to test if your server/machine handles TLSv1.2 connections. Please use `tls` mode instead of `sandbox` to verify. You can return back to `sandbox` mode once you have verified. Please have a look at this [Sample Configuration](https://github.com/paypal/merchant-sdk-php/blob/namespace-php5.3/samples/Configuration.php#L10-15).
9+
510
## POODLE Update
611
- Because of the Poodle vulnerability, PayPal has disabled SSLv3.
712
- To enable TLS encryption, the changes were made to [PPHttpConfig.php](https://github.com/paypal/sdk-core-php/blob/namespace-5.3/lib/PayPal/Core/PPHttpConfig.php#L11) in [SDK Core](https://github.com/paypal/sdk-core-php/tree/namespace-5.3) to use a cipher list specific to TLS encryption.

lib/PayPal/Service/PayPalAPIInterfaceServiceService.php

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -71,7 +71,7 @@ class PayPalAPIInterfaceServiceService extends PPBaseService {
7171
protected static $SDK_NAME = "merchant-php-sdk";
7272

7373
// SDK Version
74-
protected static $SDK_VERSION = "3.9.0";
74+
protected static $SDK_VERSION = "3.9.1";
7575

7676
/**
7777
* @param $config - Dynamic config map. This takes the higher precedence if config file is also present.

samples/Configuration.php

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,11 @@ public static function getConfig()
77
$config = array(
88
// values: 'sandbox' for testing
99
// 'live' for production
10+
// 'tls' for testing if your server supports TLSv1.2
1011
"mode" => "sandbox",
12+
// TLSv1.2 Check: Comment the above line, and switch the mode to tls as shown below
13+
// "mode" => "tls"
14+
1115
'log.LogEnabled' => true,
1216
'log.FileName' => '../PayPal.log',
1317
'log.LogLevel' => 'FINE'

0 commit comments

Comments
 (0)