PayPal TLS 1.2

[Chris Dunst]

Hi Stephen,

We have a few clients running your pro plugin. One of them had an email from PayPal regarding upgrading encryption to TSL 1.2.

The email is genuine, and says…

Starting on 26 June 2018, PayPal will be making changes that may
impact your ability to accept any PayPal transactions, process credit
card payments with PayPal or access the funds in your PayPal business
account.

Action required by 26 June 2018.

Our records show that your PayPal integration uses an older encryption
protocol. You must take the following actions immediately to upgrade
your PayPal integration(s) to the TLS 1.2 cryptographic protocol by 26
June 2018.

More info is here: https://www.paypal.com/us/webapps/mpp/tls-http-upgrade

I’m not sure if this is related to more direct PayPal integrations, where web servers are talking to PayPal servers behind-the-scenes. Your plugin of course just passes end-customers to the hosted PayPal payment page.

Could you please advise – does this impact websites using your plugin? If so, is there a particular version of your plugin that needs to be running to overcome this? Indeed, is it something we need to ensure is supported at the web host level?

Thanks in advance,
Chris

[Stephen Harris]

Hi Chris,

Yes it will impact the plugin, as it connects with PayPal to verify Instant Payment Notifications. If it can’t do that then the booking will not be automatically confirmed. You’ll still be able to take bookings though.

You will need to install TLS 1.2 (or speak to your hosting provider). No update to the plugin is required.

[Chris Dunst]

Thanks for the update. We’ve ensured this is in place at the host level, so all should be well. Thanks again.

[Author]

Posts