I just got notification from PayPal that they're updating from SHA-1 to SHA-256 signing algorithm. How does this affect the PayPal plugin I'm using?

  • SoundCircle
    Asked on May 21, 2015 at 1:07 PM
  • David JotForm Support
    Replied on May 21, 2015 at 1:19 PM

    Hi,

    We make any necessary updates to our payment integrations prior to them being required.  Your current integration should not be affected by PayPals security updates.  Should your integration ever fail for any reason, just let us know and we will be happy to see what is wrong.

  • SoundCircle
    Replied on May 21, 2015 at 1:47 PM

    Thanks!

  • GAPTAOnline
    Replied on September 10, 2015 at 6:49 PM

    I got the same notification and was wondering when the updates to your paypal integration code to support their new sha-256 algorithm were incorporated?  We use embedded forms with custom code inserted to add functionality we require, so linking to the most recent version cannot always be done.

  • Jeanette JotForm Support
    Replied on September 10, 2015 at 11:58 PM

    I've forwarded this to our devs so they can explain better how this will affect or nor.

  • NeilVicente
    Replied on September 11, 2015 at 5:19 AM

    Our servers are updated with the latest security certificates that are using SHA-256 algorithm. This update that is to be implemented by PayPal will not affect JotForm's integrations, so you do not have to be concerned. Your PayPal-integrated forms should work fine as usual.

  • GAPTAOnline
    Replied on September 11, 2015 at 9:28 AM

    NeilVicente, I was asking when the updates to paypal.js were done to address this issue.  Again, most of our forms are embedded and I have to download and update these included files periodically due to our forms going offline for more than a week twice now due to updates that broke our forms.  That is why I cannot link to the most current version of these files.  That and the fact that I actually have had to make modifications to several of the files to add functionality that was required and fix a few bugs that were affecting our forms.  I need to know the date if and when paypal.js was updated so I know which forms will need to be redownloaded and reintegrated with our modifications.  This process takes about 2-4 hours for the included files and another hour per form, so I do not want to have to do this for all of them if I don't have to...

  • David JotForm Support
    Replied on September 11, 2015 at 12:28 PM

    I will pass this request along to see if we can get an exact date of when this was updated.  We will let you know here as soon as we have more concrete information.

  • NeilVicente
    Replied on September 11, 2015 at 1:20 PM

    @GAPTAOnline

    The security certificate update was done a long time ago, and it has nothing to do with the files that you need to make your form work.

    As for paypal.js, there was a recent bugfix released for PayPal-integrated forms with a captcha field. If your form does not use a captcha, there is no need to update that file on your end.