Skip to content
This repository has been archived by the owner on Oct 18, 2023. It is now read-only.

Commit

Permalink
Enabled Checks for TLSv1.2 support.
Browse files Browse the repository at this point in the history
- Update your configurations to use `tls` instead of `sandbox` to verify server support
  • Loading branch information
Jay Patel committed Dec 9, 2015
1 parent a440072 commit 9f5ac1d
Show file tree
Hide file tree
Showing 4 changed files with 13 additions and 1 deletion.
3 changes: 3 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,8 @@
### CHANGELOG

####Version 3.9.1 - Dec 9, 2015
- Added TLSv1.2 Endpoint support

####Version 3.9.0 - Sep 22, 2015
- Updated IPN Endpoint

Expand Down
5 changes: 5 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,11 @@

# PayPal PHP Permissions SDK

This comment has been minimized.

Copy link
@kingjay66

## TLSv1.2 Update
> **The [PCIv3.1 DSS (PDF)](https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-1.pdf) mandates (p.46) that TLSv1.0 be retired from service by June 30, 2016. All organizations that handle credit card information are required to comply with this standard. As part of this obligation, PayPal is updating it's services to require TLSv1.2 for all HTTPS connections. [Click here](https://github.paypal.com/SDK-R/tls-update) for more information**
> A new `mode` has been created to test if your server/machine handles TLSv1.2 connections. Please use `tls` mode instead of `sandbox` to verify. You can return back to `sandbox` mode once you have verified. Please have a look at this [Sample Configuration](https://github.com/paypal/permissions-sdk-php/blob/namespace-php5.3/samples/Configuration.php#L10-15).
## POODLE Update
- Because of the Poodle vulnerability, PayPal has disabled SSLv3.
- To enable TLS encryption, the changes were made to [PPHttpConfig.php](https://github.com/paypal/sdk-core-php/blob/namespace-5.3/lib/PayPal/Core/PPHttpConfig.php#L11) in [SDK Core](https://github.com/paypal/sdk-core-php/tree/namespace-5.3) to use a cipher list specific to TLS encryption.
Expand Down
2 changes: 1 addition & 1 deletion lib/PayPal/Service/PermissionsService.php
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ class PermissionsService extends PPBaseService {
protected static $SDK_NAME = "permissions-php-sdk";

// SDK Version
protected static $SDK_VERSION = "3.9.0";
protected static $SDK_VERSION = "3.9.1";

/**
* @param $config - Dynamic config map. This takes the higher precedence if config file is also present.
Expand Down
4 changes: 4 additions & 0 deletions samples/Configuration.php
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,11 @@ public static function getConfig()
$config = array(
// values: 'sandbox' for testing
// 'live' for production
// 'tls' for testing if your server supports TLSv1.2
"mode" => "sandbox"

// TLSv1.2 Check: Comment the above line, and switch the mode to tls as shown below
//"mode" => "tls"

// These values are defaulted in SDK. If you want to override default values, uncomment it and add your value.
// "http.ConnectionTimeOut" => "5000",
Expand Down

0 comments on commit 9f5ac1d

Please sign in to comment.