error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number

[sebdesign]

Today when I run IPN::getOrder() I get a CurlRequestException with the following message:

cURL error: [35] error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number' in vendor/mike182uk/paypal-ipn-listener/src/PayPal/Ipn/Request/Curl.php:93

According to this question, Paypal has updated their SSL version due to the POODLE attack.

By default, the curlVerifier uses SSL v3, but it can be overrided with the forceSSLv3() method.

In the IPN::getOrder() method, when the $request handler is created we should do something like:

$request->forceSSLv3(FALSE);

It worked on my case. I can't make a pull request for the moment, but if you want you can do it.

Cheers!

[loranger]

@sebdesign Thank you so much for this workaround !
Maybe ther's a way to user ssl v4 with Symfony Request (which seems to be the curl client used by paypal-ipn) in order to keep the paypal ipn connection secure.

[adamkellett]

Thank you so much for this @sebdesign , we've been without this for days. 👍

[sebdesign]

@loranger @adamkellett you're welcome!

P.S.: @loranger passe mon bonjour au joli Annecy!

[linuxcarl]

Hello!

I have already applied $ request-> forceSSLv3 (FALSE); but now I will throw this error, please help, urgent
LogicalGrape \ PayPalIpnLaravel \ Exception \ InvalidIpnException
PayPal as responded with INVALID

[dipesh008]

mike182uk has fixed this issue. if this repo can be updated with that code.

[dipesh008]

any help on this. URGENT