Zen Cart .. (35) error:14094410:SSL routines Error Message

PHP, Zen Cart

Warning: If you are running Zen Cart, use PayPal and have not upgraded to Zen Cart 1.5.4, you need to make some changes. PayPal changed handling on for their transaction interface API to account for hackability of the SSLv3. Due to the POODLE security problem, SSLv3 is nolonger accepted by PayPal. Many people have adjusted, but, for those of your with Zen Cart that have not fixed the problem yet, be aware you have a problem.

This SSLv3 problem has been fixed in Zen Cart 1.5.4, but, many people have yet to move to that revision. If you have not upgraded, you are being rejected from PayPal transactions with a message similar to “(35) error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure.” If you are receiving this message, you will need to modify the all PHP files that contain a refer to SSLVERSION. Do a search for references to SSLVERSION, comment out all locations that look like this:

    CURLOPT_SSLVERSION => 3
         or 
    curl_setopt ($ch, CURLOPT_SSLVERSION, 3);

Your resulting code at those locations would look like this:

   //  CURLOPT_SSLVERSION => 3
         or 
   //  curl_setopt ($ch, CURLOPT_SSLVERSION, 3);

Among other locations you may find in your search, your search should find locations to change in the following files.

  • includes/modules/payment/paypal/paypal_curl.php
  • includes/modules/payment/linkpoint_api/class.linkpoint_api.php
  • includes/modules/payment/authorizenet_echeck.php
  • includes/modules/payment/authorizenet_aim.php
  • extras/curltester.php

Enjoy your day …

Leave a Reply