PayPal NotifyURL nonsecure
Posted: Fri Jun 04, 2010 1:20 pm
We just turned our store on this week and we're having a problem with PayPal payments. Here is the entry from the Error Log (our site IP has been x'ed out):
In the App_Data\Logs\app.log we have this:
I checked with PayPal tech support and this is what they're telling me:
Thoughts?
Thanks,
Code: Select all
An error has occured at http://www.mechanicstoolswarehouse.com/ProcessPayPal.ashx
Unable to connect to the remote server; No connection could be made because the target machine actively refused it xxx.xxx.xxx.xxx:443
Code: Select all
ERROR 2010-06-04 12:36:30,019 5695995ms Object a - An error has occured at http://www.ourdomainurl.com/ProcessPayPal.ashx
System.Net.WebException: Unable to connect to the remote server ---> System.Net.Sockets.SocketException: No connection could be made because the target machine actively refused it xxx.xxx.xxx.xxx:443
andIn the final API call to process the payment, your code is overriding the IPN url you have set in the Profile with an HTTP one. See the NOTIFYURL parameter in the below log:
DoExpressCheckoutPaymentRequest
method "DoExpressCheckoutPayment"
notifyurl "http://www.ourdomainurlcom//ProcessPayPal.ashx"
The IPN notification URL is set up as HTTPS in the PayPal account. SSL is turned on for the site.The NOTIFYURL is a parameter that is passed in the API call to PayPal when processing the transaction. From what I could find the logs on your account, you are passing that parameter in the DoExpressCheckoutPayment API call to payment with an HTTP address.
So, this should be a coding change. You will want to review the code and make any necessary changes to any API calls that process a transaction with us making sure the NOTIFYURL value is HTTPS or… remove the parameter all together.
Other API methods that may include that parameter are:
doCapture
doDirectPayment
Thoughts?
Thanks,