PayPal upgrading SSL 2015

Hello -

Our client received a notification from PayPal regarding 2 upgrades to their Payflow services. In the email it states that Paypal:

1 - Discontinue use of the Verisign G2 Root Certificate "PayPal will no longer accept secure connections to the API/IPN endpoints that are expecting our certificate/trust chain to be signed by the G2 Root Certificate. Only secure connection requests that are expecting our certificate/trust chain to be signed by the G5 Root Certificate will result in successful secure connections."

2 - Update to the SHA 256 signing algorithm. PayPal is upgrading SSL certificates on all Live and Sandbox endpoints from
SHA-1 to the stronger and more robust SHA-256 in mid-2016.

Does this affect the Event Booking component 1.6.10 and Paypal Pro plugin version 1.0? I'm using SSL on the entire site. I attached a document and a link with details about this update from Paypal.

ppmts.custhelp.com/app/answers/detail/a_id/1236



Thanks in advance.
-Chris

Hi Chris

It doesn't affect Events Booking extension, so don't worry about it

Regards,

Tuan

Tuan -

Thanks for the clarification. Would it affect any of the following components: Membership Pro, Joom Donation?

- Chris

No Chris. It doesn't effect any of our components

Tuan

Would it affect Eventbooking if our site isn't using SSL?

No Chris. Events Booking doesn't require your site to have SSL certificate installed

Regards,

Tuan

I realize EB doesn't require it, but will the paypal change they are emailing everyone about require our site to be ssl secured to pass back IPN notifications? In other words, will Paypal continue to passback information to our site and the EB component (with no changes and if our site isn't SSL secured)? Am I making the correct distinction or making sense?

Just don't want to be caught with my pants down
www.paypal-knowledge.com/resources/sites....S.%20English%29.pdf

I have to spend time to read the link you send me before I can give you exactly answer. However, I don't think it will be required.

Will get back to you later today as I am quite busy now

Tuan

I would also need to know if events booking or e-shop will be affected by the Paypal change. I also received notification of the change and notice that my website would be affected.

Would I need the Paypal Pro plugin to be compliant with the new paypal security rules? Right now I am just using the standard paypal plugin.

Thanks in advance for your help
Carolyn Weir
natchezartassociation.org
skysetter.com

Hi Carolyn

You don't need Paypal Pro, just use Paypal payment standard. Please see joomdonation.com/forum/questions/49139-u...gulations.html#68665 for the needed change

Regards,

Tuan