我的贝宝停止接受付款并给我错误

Posted 2023-02-22

【中文标题】我的贝宝停止接受付款并给我错误

【英文标题】：My paypal stop accepting payment and giving me error

【发布时间】：2014-12-11 20:30:26

【问题描述】：

我正在使用php-PayPal-IPN，它在过去 2 年的最后 5 天之前运行良好。但是当我收到最后一笔付款时，它卡住并开始给我错误..有什么想法吗？

我在错误文件中得到的错误是

[16-Oct-2014 12:45:42 UTC] cURL error: [35] error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure

这是给出此错误的 php 文件

<?php

class IpnListener 

    public $use_curl = true;     

    public $force_ssl_v3 = true;     

    public $follow_location = false;     

    public $use_ssl = true;      

    public $use_sandbox = false; 

    public $timeout = 30;       

    private $post_data = array();
    private $post_uri = '';     
    private $response_status = '';
    private $response = '';

    const PAYPAL_HOST = 'www.paypal.com';
    const SANDBOX_HOST = 'www.sandbox.paypal.com';

    protected function curlPost($encoded_data) 

        if ($this->use_ssl) 
            $uri = 'https://'.$this->getPaypalHost().'/cgi-bin/webscr';
            $this->post_uri = $uri;
         else 
            $uri = 'http://'.$this->getPaypalHost().'/cgi-bin/webscr';
            $this->post_uri = $uri;
        

        $ch = curl_init();

        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, true);
        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
        curl_setopt($ch, CURLOPT_CAINFO, 
                    dirname(__FILE__)."/api_cert_chain.crt");
        curl_setopt($ch, CURLOPT_URL, $uri);
        curl_setopt($ch, CURLOPT_POST, true);
        curl_setopt($ch, CURLOPT_POSTFIELDS, $encoded_data);
        curl_setopt($ch, CURLOPT_FOLLOWLOCATION, $this->follow_location);
        curl_setopt($ch, CURLOPT_TIMEOUT, $this->timeout);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
        curl_setopt($ch, CURLOPT_HEADER, true);

        if ($this->force_ssl_v3) 
            curl_setopt($ch, CURLOPT_SSLVERSION, 3);
        

        $this->response = curl_exec($ch);
        $this->response_status = strval(curl_getinfo($ch, CURLINFO_HTTP_CODE));

        if ($this->response === false || $this->response_status == '0') 
            $errno = curl_errno($ch);
            $errstr = curl_error($ch);
            throw new Exception("cURL error: [$errno] $errstr");
        
    

    protected function fsockPost($encoded_data) 

        if ($this->use_ssl) 
            $uri = 'ssl://'.$this->getPaypalHost();
            $port = '443';
            $this->post_uri = $uri.'/cgi-bin/webscr';
         else 
            $uri = $this->getPaypalHost(); // no "http://" in call to fsockopen()
            $port = '80';
            $this->post_uri = 'http://'.$uri.'/cgi-bin/webscr';
        

        $fp = fsockopen($uri, $port, $errno, $errstr, $this->timeout);

        if (!$fp)  
            // fsockopen error
            throw new Exception("fsockopen error: [$errno] $errstr");
         

        $header = "POST /cgi-bin/webscr HTTP/1.1\r\n";
        $header .= "Host: ".$this->getPaypalHost()."\r\n";
        $header .= "Content-Type: application/x-www-form-urlencoded\r\n";
        $header .= "Content-Length: ".strlen($encoded_data)."\r\n";
        $header .= "Connection: Close\r\n\r\n";

        fputs($fp, $header.$encoded_data."\r\n\r\n");

        while(!feof($fp))  
            if (empty($this->response)) 
                // extract HTTP status from first line
                $this->response .= $status = fgets($fp, 1024); 
                $this->response_status = trim(substr($status, 9, 4));
             else 
                $this->response .= fgets($fp, 1024); 
            
         

        fclose($fp);
    

    private function getPaypalHost() 
        if ($this->use_sandbox) return self::SANDBOX_HOST;
        else return self::PAYPAL_HOST;
    

    public function getPostUri() 
        return $this->post_uri;
    

    public function getResponse() 
        return $this->response;
    

    public function getResponseStatus() 
        return $this->response_status;
    

    public function getTextReport() 

        $r = '';

        // date and POST url
        for ($i=0; $i<80; $i++)  $r .= '-'; 
        $r .= "\n[".date('m/d/Y g:i A').'] - '.$this->getPostUri();
        if ($this->use_curl) $r .= " (curl)\n";
        else $r .= " (fsockopen)\n";

        // HTTP Response
        for ($i=0; $i<80; $i++)  $r .= '-'; 
        $r .= "\n$this->getResponse()\n";

        // POST vars
        for ($i=0; $i<80; $i++)  $r .= '-'; 
        $r .= "\n";

        foreach ($this->post_data as $key => $value) 
            $r .= str_pad($key, 25)."$value\n";
        
        $r .= "\n\n";

        return $r;
    

    public function processIpn($post_data=null) 

        $encoded_data = 'cmd=_notify-validate';

        if ($post_data === null)  
            // use raw POST data 
            if (!empty($_POST)) 
                $this->post_data = $_POST;
                $encoded_data .= '&'.file_get_contents('php://input');
             else 
                throw new Exception("No POST data found.");
            
         else  
            // use provided data array
            $this->post_data = $post_data;

            foreach ($this->post_data as $key => $value) 
                $encoded_data .= "&$key=".urlencode($value);
            
        

        if ($this->use_curl) $this->curlPost($encoded_data); 
        else $this->fsockPost($encoded_data);

        if (strpos($this->response_status, '200') === false) 
            throw new Exception("Invalid response status: ".$this->response_status);
        

        if (strpos($this->response, "VERIFIED") !== false) 
            return true;
         elseif (strpos($this->response, "INVALID") !== false) 
            return false;
         else 
            throw new Exception("Unexpected response from PayPal.");
        
    

    public function requirePostMethod() 
        // require POST requests
        if ($_SERVER['REQUEST_METHOD'] && $_SERVER['REQUEST_METHOD'] != 'POST') 
            header('Allow: POST', true, 405);
            throw new Exception("Invalid HTTP request method.");
        
    

【问题讨论】：

PHP 35: error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure 的可能重复项

我遇到了同样的错误，而且是昨天开始的。

我正在尝试更改一些代码并尝试使用curl_setopt($ch, CURLOPT_SSL_CIPHER_LIST, 'SSLv3');，但不知道如何修复它。

@Jeremy 我们知道了它的工作原理，请参阅 Deepak 的回答

【参考方案1】：

您必须更改第 32 行

public $force_ssl_v3 = true;

到

public $force_ssl_v3 = false;

【参考方案2】：

试试这个，我猜它会工作 99%

改成

    if ($this->force_ssl_v3) 
        curl_setopt($ch, CURLOPT_SSLVERSION, 3);
    

到这里

    if ($this->force_ssl_v3) 
            curl_setopt($ch, CURLOPT_SSL_CIPHER_LIST, 'SSLv3');
     else 
            curl_setopt($ch, CURLOPT_SSLVERSION, 3);
    

【讨论】：

这也为我解决了这个问题 - 谁能解释导致此错误开始的原因？ cURL 或 Paypal 发生了什么变化？

PayPal 上周禁用 SSLv3 以应对 ShellShock 漏洞：paypal-community.com/t5/PayPal-Forward/…

更新后的商家 guid 建议不要使用 SSLv3 和 TLSv1。喜欢 curl_setopt($ch, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1);

YES paypal 更改了 SSL 版本，即使 else 功能没用，但最好使用它。