PayPal Email about SSL upgrade?

[GJC Web Design]

Indeed,,  as the SHA1 is deprecated by cabforum.org as a viable crypt. since 2011 I assume all recent certs are SHA2 .... ?

[alatak]

Hello

Hum.. i don't really understand it
I read here https://developer.paypal.com/docs/classic/ipn/integration-guide/IPNIntro/  (JUNE 1, 2015)

They have a §How to Update to Prevent Service Outage
and one about §Testing Your SSL Certificate Upgrade
May be that helps some of you?

[jjk]

Since VM uses the api-3t.sandbox.paypal.com and api-3t.paypal.com as endpoints, I think we are currently not affected at all. Checking those PayPal addresses by entering for example

Code Select Expand

https://api-3t.sandbox.paypal.com/nvp into one of the online SHA-2/SSL checkers, shows that both PayPal api endpoints are still using SHA-1 certificates and according to the announced change plans, they plan to change them to SHA-256 in the 3rd quarter 2016, which would be the date when the server where your VM shop is hosted on, should be able to handle SHA-256 certificates (if you use SSL).

[ehoward]

I found this website: https://www.sha2sslchecker.com/

Does checking my website and my host on this site give me the information I'm looking for?

Thanks you so much - this was the golden nugget I've been looking for this afternoon.  It worked!!

[sscheidegger]

Since September 30 has passed, I assume Paypal has updated to SHA-256 by now. I just tested my VM web shop with SSL and made a payment through the integrated Paypal plug-in. Everything seems to be working fine. Did anyone else run some tests?