schreck
Advanced Member
USA
153 Posts Pre-sales questions only (More Details...)
|
Posted - 07/02/2018 : 07:31:57
Just putting this out there in case there are any other Godaddy customers. With the recent PCI TLS 1.2 compliance by Paypal I was no longer able to process payments on my Godaddy shared windows account.
I was well aware of the change a year ago and called Godaddy. They confirmed that I was setup under 1.2 and it would not be a problem. A year later Paypal cuts off TLS 1 and my site could not connect to paypal. This was a shock to me that my site was not working due to the fact I confirmed with Godaddy that everything was in compliance.
I call Godaddy and after an hour long conversation they say its the coding. Again they confirmed my shared hosting account was TLS 1, 1.1 and 1.2. Like usual Andy (ECT) is always prompt with replying to my emails and said it is not the code. Once again on the phone with Godaddy and they say that the server is TLS 1, 1.1 and 1.2. That even with the other versions enabled the server defaults to 1.2 (I made them confirm this in an email so I can send it to Andy)
This has taken up most of the day and at this point I am beyond pissed. I contact Paypal and they put me in touch with a higher level tech support. Going over everything that has happened with him and he suggests its the code.
If I was not a long time customer of ECT I would have believed Godaddy and Paypal. So I started to dig deeper to see what kind of tests I can run on the site to show what the connection really is. After 2 minutes of a google search I put up 2 small tests. Both cyphers showed my connection was TLS 1
Back on the phone with Godaddy and I demand to escalate my case and told them I am extremely frustrated with their support. Its a new support tech so I have to explain it all over again. She said I believe thats an SSL issue. Again I said please escalate my case to someone who knows what they are talking about. She got snotty with me and said its the SSL. I showed her the cyphers I ran and how they came back as TLS 1. I was put on hold for a long time. She came back and said you are right, we cannot change the shared servers to have a default 1.2. You need to upgrade to VPS in order to have full control over the server. I said are you F##KING kidding me??! You are forcing me to pay for a more expensive plan because you refuse to be PCI complaint on your shared hosts?! She said pretty much. I asked to speak to a manager. She put me on hold again for a long time. Came back on and said the manager is busy if I want to hold more. I said yes I will hold. The support then said you know the manager is not tech savvy and will not know what you are talking about. Do you still want to talk to her? I said yes! Then she said I did pass the manager in the hallway and briefly told her. She explained that they are not PCI complaint. Do you still want to talk to her? I said YES! WTF is wrong with this people???! Another 30 minutes go by and I am still on hold. Totally frustrated and pissed off I hang up.
During that time frame I was in contact with Peter from Servelink.com I told Peter I was a long time Godaddy customer (10+ years) and I am done with them. Can you please help me move my website over to your server and get it back up and running again?
Peter and I were working on the details most of the night and got it done. The next day I switched over the DNS and I was back up and running!!! Peter went above and beyond what I expected. He is very knowledgeable and did not rip me off with the move. I cannot thank and recommend servelink.com and Peter enough.
And as usual Andys support is fantastic. That is why years later I am still a ETC customer.
Edited by - schreck on 07/02/2018 07:36:37
|
Andy
ECT Moderator
95440 Posts |
Posted - 07/02/2018 : 07:44:49
|
dbdave
ECT Moderator
USA
10468 Posts |
Posted - 07/02/2018 : 08:03:57
It's been a good number of years since I moved to Servelink with my hosting. I think it's basically the difference between amateur and professional hosting. For an ecommerce site, in my opinion, you really need professional hosting. When problems do arise, I am confident that I will be dealing with a professional hosting company that will understand the issue and help resolve it. Yes, it's more expensive than the basic godaddy hosting, but it's not really that much more, and it only takes one little issue and you will quickly see that you are getting your monies worth. Just think of all the free time you are going to have on your hands with not having to call in to GD support.. 
|
asanborn
Ecommerce Template Guru
USA
1404 Posts Pre-sales questions only (More Details...)
|
Posted - 07/07/2018 : 13:33:03
I have a very long post here: https://www.ecommercetemplates.com/support/topic.asp?TOPIC_ID=110195
7 days later, discovered PayPal instructions were wrong. Leave TLS 1.0, 1.1 and 1.2 versions active on your servers and things should work and reboot the server, clear browser cache and make sure you are using https for shopping and checkout.
May the force be with you all!
|
asanborn
Ecommerce Template Guru
USA
1404 Posts Pre-sales questions only (More Details...)
|
Posted - 07/16/2018 : 12:52:37
We have been ip and down with access to the PP API.
Right now 1.2 only running. Have no idea what the heck to do at this point. PayPal Classic API is the only thing all of the customers have in common.
|
Andy
ECT Moderator
95440 Posts |
Posted - 07/16/2018 : 13:13:39
|
asanborn
Ecommerce Template Guru
USA
1404 Posts Pre-sales questions only (More Details...)
|
Posted - 07/16/2018 : 14:08:45
We did have it working and then it goes back to the same error. PayPal was NO help at all!
They reply was to contact one of their Technical Support Partners for further assistance. BTW that runs $150 to $250/hour.
The really odd part, if we connect only PayPal and not use a PayPal Pro setup to accept credit cards, it works.
So right now we are converting everyone to PayPal only so they can at least accept payments.
ALL of these sites are using PayPal API Classic. And We have even tested updating their Gateway Encryption on one of the sites and it made no difference.
Except for moving all of the sites to a new server, we are at a dead end.
Advise welcome.
|
Andy
ECT Moderator
95440 Posts |
Posted - 07/17/2018 : 03:08:35
I tested the site you sent me in ssllabs and see you only have TLS1.2 enabled now so that sounds right to me. What I'm not sure about is that the Cipher Suites are marked as weak. I'm really not a server tech so perhaps you can check that with your host and / or PayPal to see if that has a bearing on PayPal Pro not working for you. Andy Please feel free to review / rate our software
|
schreck
Advanced Member
USA
153 Posts Pre-sales questions only (More Details...)
|
Posted - 07/17/2018 : 05:00:23
Since switching to Servelink I have been up and running with no issues at all.
What I did for a test to show to godaddy is create an asp page that shows the connection info. This is something I found on google and cannot say it is right or wrong. But it did show I was on a 1.0 connection
[code]<% Set objHttp = Server.CreateObject("MSXML2.ServerXMLHTTP.6.0") objHttp.open "GET", "https://howsmyssl.com/a/check", False objHttp.Send Response.Write objHttp.responseText Set objHttp = Nothing %>[/code]
|
|
|