Releases · paypal/PayPal-PHP-SDK

Because of the Poodle vulnerability, PayPal has disabled SSLv3.
To enable TLS encryption, the changes were made to PPHttpConfig.php to use a cipher list specific to TLS encryption.

    /**
     * Some default options for curl
     * These are typically overridden by PPConnectionManager
     */
    public static $DEFAULT_CURL_OPTS = array(
        CURLOPT_SSLVERSION => 1,
        CURLOPT_CONNECTTIMEOUT => 10,
        CURLOPT_RETURNTRANSFER => TRUE,
        CURLOPT_TIMEOUT        => 60,   // maximum number of seconds to allow cURL functions to execute
        CURLOPT_USERAGENT      => 'PayPal-PHP-SDK',
        CURLOPT_HTTPHEADER     => array(),
        CURLOPT_SSL_VERIFYHOST => 2,
        CURLOPT_SSL_VERIFYPEER => 1,
        CURLOPT_SSL_CIPHER_LIST => 'TLSv1',
    );

There are two primary changes done to curl options:
- CURLOPT_SSLVERSION is set to 1 . See here for more information
- CURLOPT_SSL_CIPHER_LIST was set to TLSv1, See here for more information

Assets 3

12 Nov 15:52

jaypatel512

v0.14.1

dad86f2

Poodle Fix

Updated HttpConfig to use TLSv1 as Cipher List
Added resetRequestId in ApiContext to enable multiple create calls in succession
Sanitize Input for Price Variables
Made samples look better and work best
Few Bug Fixes

Assets 3

03 Nov 16:44

jaypatel512

v0.14.0

3c02790

Enabled Billing Plans and Agreements

Enabled Billing Plans and Agreements
- Created Samples, Unit and Functional Tests
Renamed Github Repository to PayPal-PHP-SDK
Updates to Sample UI
- Fixed samples result pages.
- Made samples to not use hard coded Ids
Fixed Bugs