Page 1 of 1

Problem with SSL/TLS secure channel with PayPal

Posted: Mon Oct 05, 2015 9:57 am
by vadim
Hi,

Our web store started to show error:

An error has occured at https://abc-machine-embroidery.com/Proc ... derId=9627

The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.; The remote certificate is invalid according to the validation procedure.

Web site is https://abc-machine-embroidery.com/Default.aspx

Also we are not receiving auto confirmation for the payments.

We’d appreciate your help and advices.

Thank you

Re: Problem with SSL/TLS secure channel with PayPal

Posted: Mon Oct 05, 2015 3:54 pm
by Katie
I doubt this has anything to do with AbleCommerce. It might be a problem with the SSL certificate or the root certificate(s) installed on the server. Do you have the Google Chrome browser? If you go to your website using Chrome, notice in the top bar that your Lock icon has a warning symbol. If you click on that, you will see that the site is using obsolete encryption - TLS 1.0 and SHA1.

You might want to check with Paypal, but they might want you to be using better encryption. I know that some of the other gateways have already made this a requirement. I would recommend that you upgrade your SSL certificate to SHA2 to begin with.

Hope this helps,
Katie

Re: Problem with SSL/TLS secure channel with PayPal

Posted: Mon Oct 05, 2015 3:59 pm
by Shopping Cart Admin
root certificate(s) is the likely issue:

https://devblog.paypal.com/paypal-ssl-c ... e-changes/

The connection to paypal isn't affected by the SSL cert your store is using, though you should be using a SHA-2 certificate or chrome will complain.

Re: Problem with SSL/TLS secure channel with PayPal

Posted: Mon Oct 12, 2015 6:39 pm
by vadim
Thanx to everybody!

I found what was the problem. Windows server 2003 doesn't work well with SHA2 certificate.

Fixed!

Re: Problem with SSL/TLS secure channel with PayPal

Posted: Wed Oct 14, 2015 9:26 am
by bmckenzie
I'm experiencing the same problem as the OP. Started around noon yesterday. I've installed the G5 root certificate.. or at least I think I have, but I'm still getting the error.

vadim, how did you fix the problem?

Re: Problem with SSL/TLS secure channel with PayPal

Posted: Wed Oct 14, 2015 2:54 pm
by vadim
I'd recommend to start from here:

https://support.microsoft.com/en-us/kb/938397


Good luck :)