Support

Home Forums Event Espresso Premium Please add a "Bypass verify peer" feature for PayPal

Please add a "Bypass verify peer" feature for PayPal

Posted: July 25, 2012 at 2:09 am


Marko Geisler

July 25, 2012 at 2:09 am

Heyho ๐Ÿ™‚

My german hosting provider Strato, a really common one here, doenst support the verification of paypals ssl certificate. With every update of event espresso, i have to add the following in the Paypal.php located in the gateway folder in the line 90 or so:

$error["set_ssl_bundle"] = curl_setopt($ch, CURLOPT_CAINFO, '/mnt/webf/a0/43/5718043/htdocs/wordpress/wp-content/uploads/espresso/cacert.pem');

I uploaded a cacert.pem to verify that certificate locally.

The Error in the paypal ipn log file is the following:

Errors resulting from the execution of curl transfer: SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed[07/10/2012 8:49 AM] - FAIL: IPN Validation Failed . /cgi-bin/webscr : www.sandbox.paypal.com

It would be really really great if you could add this as a durable feature like you did with FirstData, where that feature already exists… It would allow me/one who already knows thats the problem why the IPN message from paypal cant be received to automatically update event espresso without fumbling in the code.

Best regards, Marko


Josh

  • Support Staff

July 25, 2012 at 7:39 am

There has been a discussion started about how we could include a fallback PEM file for server configurations that are lacking a CA cert.

In the meantime, you can copy over the modified paypal gateway directory to /wp-content/uploads/espresso/gateways and it will not get overwritten on an update.


mcote

August 14, 2012 at 6:08 pm

Hi Josh, I second Marko’s point. I have upgraded to 3.1.25.P and unlike Marko, I had forgotten I had made some changes in the php file and I had the same error.

For the people who need a code, I used this site get cURL CA cert.

This forum was also usefull CURLOPT_SSL_VERIFYPEER


Josh

  • Support Staff

August 15, 2012 at 9:31 am

Hi mcote,

The problem with bypassing the verify peer is that it is not as secure.

If you copy the entire PayPal directory to /wp-content/uploads/espresso/gateways, your changes will not be overwritten when Event Espresso is updated.

The support post ‘Please add a "Bypass verify peer" feature for PayPal’ is closed to new replies.

Have a question about this support post? Create a new support post in our support forums and include a link to this existing support post so we can help you.

Event Espresso