Support

June 16, 2015 at 1:28 pm

To explain a little, the CA files are used to verify who signed the certificate that is being used within the request.

So right now cURL is attempting to connect to PayPal over HTTPS. During the handshake it will check the certificate has been signed by a known trusted Certificate Authority (CA) to do this it needs a list of those and their public keys to verify.

In a nut shell its to check that I’m not signing a cert stating I am someone I am not and attempting to process the request. (little more to it than that but that’s the general idea)

So cURL is trying to verify the connection, but doesn’t have that list of known good CA’s to compare against, so is refusing the connection because it can’t be sure its safe. Make sense?

Both of the guide above provide links to download these files which contain the list. These need to placed on your server and then PHP told where they are located, which should then allow the connection to work.

June 18, 2015 at 5:33 am

I notice there is a reference to both .crt and .pem depending on which post we review when trying to troubleshoot – which is required?

They are essentially the same thing in different formats. Either should work, although try both.

I did notice through other posts there is also a reference to having a
ssl path in the site using the connection as opposed to centrally located on the server – I.E. /SSL/cert.pem

You can set this up on a per site basis if you prefer, however the files will be the same for each site that requires this, so you could end up setting up the same thing multiple times.

Is there a way to temporarily turn off the SSL verify to prove it is working otherwise and this is only issue we have?

Yes but it is highly discouraged, it leaves the connection wide open for man-in-middle attacks as no verification is taking place.

Within \event-espresso\gateways\paypal\Paypal.php add:

curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);

Somewhere before line 109, personally I would use something link this:

$error["set_verifypeer"] = curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);

Around line 88 – http://take.ms/XRy9V

Is there a support upgrade to get more personalized assistance for this last issue – our client is up and running and taking registrations which are clearing Paypal just not posting back which makes the management portion useless.

We provide priority support for Event Espresso using our priority support tokens however, this isn’t an issue with Event Espresso itself, it is due to the server setup.

We would usually expect your hosting company to know how to set this up on their servers, or on Linux based hosting there is usually no problem doing the above. As mentioned I do not have any experience setting up Windows based server, I will check with the other members of the team (currently offline due to time differences so may take a little).

June 18, 2015 at 10:40 am

On one other note – when a user is transferred over to Paypal and completes the payment I noticed it does not auto-return the user back to the site they must click a link to return – any way to force and auto-return back to the site and not have to rely on them clicking on a link?

Auto Return is enabled through your PayPal account. Check the instructions here:

https://eventespresso.com/wiki/paypal-standard-payment-gateway/#setup

They are for EE4, however if you scroll down slightly you will find a section for Auto Return and IPN. Those are the same for both EE3 and EE4.