PayPal service upgrades - is vBulletin ready?

[pw2467]

Received the following from Paypal:

As we have previously communicated to you, PayPal is upgrading the certificate for www.paypal.com to SHA-256. This endpoint is also used by merchants using the Instant Payment Notification (IPN) product.

This upgrade is scheduled for 9/30/2015; however, we may need to change this date on short notice to you to align to the industry security standard.

You?re receiving this notification because you?ve been identified as a merchant who has used IPN endpoints within the past year. If you have not made the necessary changes, we urge you to do so right away to avoid a disruption of your service!

Are there any changes required on the vBulletin side to handle this certificate update?

[Edman]

I'm also wondering about the same thing. Also, I still have sites on vB 3.8, so I'm wondering which versions of vBulletin the new upgrades are going to work with.

[ForceHSS]

No idea what IPN endpoints are so cant comment on that but as I dont use pp on my site I wont have to worry about it

[Proper Syntax]

vBulletin's implementation doesn't use SSL so it doesn't matter, it has no effect here.

[X-or]

you'd better open a ticket on vbulletin official site

[Zachery]

The vBulletin implementation relies on curl to handle any SSL stuff, assuming you have curl with SSL and it supports that strong of a cert I don't think it is going to be a problem.s

[TheAdminMarket]

If I understood well reading their announcement (but English is not my best), it effects only Website Payments PRO and not Website Payments. The difference is that with website payments PRO you must have your own merchant account and payments are done in your own site. In PRO there is no redirection to PayPal that's why they want the access to their API to be SHA-256.