Published: June 17, 2017
Last updated:

cURL php5 module update in Magento for PayPal changes by June 30th, 2017

Your current version of cURL php5 module is 7.xx.x, which can prevent services that require TLS v1.2 from working correctly. It is recommended to update your cURL php5 module to version 7.34.0 or higher
Such message is shown on payment settings page in Magento Backend and informs about upcoming changes by June 30, 2017:
  • PayPal IPN Url change covered by SUPEE-8167
  • switching to TLS1.2 version of SSL protocol, all previous versions will be rejected
PayPal prepared special page with full technical details about this change: https://www.paypal.com/au/webapps/mpp/tls-http-upgrade As mentioned on the page, PayPal has created a new endpoint – https://tlstest.paypal.com – to help you verify that your systems can support the latest security standards. This endpoint supports all of the security standards to which the PayPal endpoints are moving.
  • On success: A successful connection to https://tlstest.paypal.com will return an HTTP 200 response with the following text in the body: “PayPal_Connection_OK”
So, you can check if TLS1.2 supported on your host with the following sample PHP code:
<?php

$ch = curl_init('https://tlstest.paypal.com');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$data = curl_exec($ch);
curl_close($ch);

echo $data;
You can download it from here, place into your Magento root directory with .php extension and open in browser to check if you have “PayPal_Connection_OK” response. If not, ask your host to update libcurl and php5 curl libraries. Sometimes it can be too complicated, as will require upgrade of all system libraries in system, kernel upgrade and full system reboot. In such cases it can be better to setup a new host based on a modern OS and hardware, migrate your Magento there and drop old host. You can use our Magento migration service for seamless Magento migration.

Posted in: Magento Maintenance

52 votes, 4.83 avg. rating (96% score)