Paypal Integration: PayPal IPN Updates to SHA-256

  • Profile Image
    dcboswell
    Asked on September 10, 2015 at 08:55 PM

    Hi I just got a notification from PayPal about changes to their IPN. Here is the email I received today. Please let me know that this is being handled by JotForm so that me and my clients don't lose out on payments or recurring payments with PayPal:

     

    As we have previously communicated to you, PayPal is upgrading the certificate for www.paypal.comto SHA-256. This endpoint is also used by merchants using the Instant Payment Notification (IPN) product.
     
    This upgrade is scheduled for 9/30/2015; however, we may need to change this date on short notice to you to align to the industry security standard.

    You’re receiving this notification because you’ve been identified as a merchant who has used IPN endpoints within the past year. If you have not made the necessary changes, we urge you to do so right away to avoid a disruption of your service!

     

    Because these changes are technical in nature, we advise that you consult with your individuals responsible for your PayPal integration. They will be able to identify what, if any, changes are needed. Please share this email and the hyperlinks below with your technical contact for evaluation.

    Testing in the Sandbox is one of the best ways to make sure your integration works. Sandbox endpoints have been upgraded to accept secure connections by the SHA-256 Certificates.

    Full technical details can be found in our Merchant Security System Upgrade Guide. In addition, our2015-2016 SSL Certificate Change microsite contains a schedule of our service upgrade plan.

    Thanks for your patience as we continue to improve our services.

     

    Thank you,

    Daniel Boswell

  • Profile Image
    Charlie
    Answered on September 11, 2015 at 03:12 AM

    Hi,

    Thank you for sharing this information, we also received reports regarding this matter from other users, we have informed our developers about this.

    I will also escalate this thread to them so that if there's any news or changes regarding this, you will get a notification directly on this thread.

    Thank you.

  • Profile Image
    RickLV
    Answered on September 11, 2015 at 03:15 AM

    Thanks very much.

  • Profile Image
    Amal 
    Answered on September 11, 2015 at 10:03 AM

    hi there,

    We received the email too. How can we solve it? by buying ssl certificates?

    Please share if anyone has the solution1

    Thank you very much

  • Profile Image
    Petar 
    Answered on September 11, 2015 at 10:53 AM

    Hi Guys,

    I would suggest you read this article http://www.terranetwork.net/blog/2015/03/paypal-ssl-upgrades/

  • Profile Image
    NeilVicente
    Answered on September 14, 2015 at 04:35 AM

    Our servers are already updated with the latest security certificates that are using SHA-256 algorithm. This changes that are to be implemented by PayPal will not affect JotForm's integrations, so you do not have to be concerned. Your PayPal-integrated forms should work normally as expected.

    Best regards

  • Profile Image
    dcboswell
    Answered on September 14, 2015 at 06:50 AM

    Wonderful! Thanks for giving me peace of mind on this issue.