When a customer uses PayPal, the Thanks.asp page displays an error:
"Sorry, there seemed to be an error!
Error, couldn't connect to https://www.paypal.com/cgi-bin/webscr (2147012739)
An error occurred in the secure channel support"

Is there a setting I'm missing or something else?

Hi Kevin

That looks like it may be a TLS issue. There are a couple of tests you can run here https://www.ecommercetemplates.com/support/topic.asp?TOPIC_ID=107642

Andy

Please feel free to review / rate our software

TLS 1.2 is enabled and everything checks green at https://www.ssllabs.com/ssltest/analyze.html?d=petticoatparlor.com&hideResults=on

Yet when paying with PayPal it still returns the same error on Thanks.asp. Is there a setting in the shopping cart admin that needs attention?

The test results there show support support for TLS1.0 and 1.1 and for security reasons I don't think either should be available and is the probable reason for the error on the thanks page.

Andy

Please feel free to review / rate our software

Our tech turned of the earlier TLS versions. I've made a test purchase and the error persists. If you need login credentials to dig further I'm happy to send them. My email is Kevin@BusinessMasters.Net

Thank you,
Kevin

Ok thanks, please do send me an email with the details.

Andy

Please feel free to review / rate our software

Sent in a reply
Thank you,
Kevin

We've updated to the latest software and have secured the website. Still, when paying with PayPal the Thanks.asp page returns the error. A screen shot is posted at https://petticoatparlor.com/petticoat.jpg

Can you let us know your server set up and versions so I can check that? The error suggests a TLS problem but the server test doesn't so I'm a bit unsure why you should still get the error.

Andy

Please feel free to review / rate our software

In that screenshot, 4th Jan 2019, I notice that the browser is saying Not Secure

Will - Bolton Manchester UK

That's on an old screen shot. Here's a new one with the same error message.
https://petticoatparlor.com/paypalerror.jpg

Can you let us know your database and server set up? If I remember rightly too in your admin your updater version checker can't connect to our server, is that right? That may also be an indication of it being a TLS issue.

Andy

Please feel free to review / rate our software

We're using msAccess, server is running Windows 2008R - fully Patched - Latest ASP 4.x

What are the requirements to use the shopping cart?
Are there special paypal requirements ? - does a special port need to be open ?

quote:

---

TLS 1.2 is enabled and everything checks green at https://www.ssllabs.com/ssltest/analyze.html?d=petticoatparlor.com&hideResults=on

---

That's a good test and it's important your server can pass it, but it's only actually testing the protocols that your browser can negotiate with the server, not the protocol that will be used by your server to connect with PayPal. If you open the ppconfirm.asp page on your site with the following parameter...
vsadmin/ppconfirm.asp?ppdebug=true
...then it will attempt to connect via the server to PayPal and what you get is...

quote:

---

Error, couldn't connect to https://ipnpb.paypal.com/cgi-bin/webscr (-2147012739).
An error occurred in the secure channel support

---

And this does come down to TLS1.2.

quote:

---

What are the requirements to use the shopping cart?

---

This isn't really a requirement of the cart, but something PayPal introduced last year that all connections have to be TLS1.2. As Win2008 servers are now old technology MS isn't really interested in updating them. Previously, whatever object you used on Win2008 servers would fail but I have just found this article...
https://community.rackspace.com/general/f/general-discussion-forum/7360/expanding-paypal-and-tls-1-2---windows-server-2008-r2-and-windows-server-2012-r2
...which seems to suggest that Msxml2.ServerXMLHTTP may work (so maybe MS have fixed it). So can you try opening the file vsadmin/ppconfirm.asp in notepad and search for...
WinHTTP.WinHTTPRequest.5.1
...and replace that with...
Msxml2.ServerXMLHTTP
...and see if it helps. If it doesn't though I'm afraid updating the server technology is the only way around this. But then again, at some point soon you are going to have to update from Win2008 anyway.

Vince

Click Here for Shopping Cart Software
Click Here to sign up for our newsletter
Click Here for the latest updater

The directions were excellent, but the solutions didn't work.

Until we're able to upgrade from the MS2008 server, what if I change Thanks.asp to a static page that just says "Thank You"?
Would that break the cart?

It wouldn't break the cart as such but it may result in confusion for users as to whether the order has really gone through.

Andy

Please feel free to review / rate our software

That's the problem we're having now. Orders and payments are going through correctly, but the Thanks.asp page says they're was an error.

That's the problem we're having now. The orders and payments are processed correctly and the Thanks.asp page says there was an error.

I just got off the phone with PayPal support, and have an open ticket if we need more information. Brad from PayPal placed and order and saw the error. He wrote:

Your shopping cart company will need to investigate why they cannot connect to PayPal. Without understanding the logic in their thanks.asp page, it very well could be that their connections to PayPal are not TLS 1.2 compliant. TLS security is not just about the server being compliant, but the code itself also needing to be compliant. Older versions of coding framework do require the code to be hard-coded to use TLS 1.2 in connections, the server will only send connections it is being told to send as. Please let you cart company know if they need any information from PayPal I am here to assist.

PayPal's support sent this:

https://developer.paypal.com/docs/classic/lifecycle/info-security-guidelines/

The above should be everything your cart company needs to ensure they are connecting securely and properly. Let me know if they have any additional questions!

Hi Kevin

I think a lot of that information is aimed at hosted carts, where the software vendor has control over the hosting, like we do here https://www.ecommercetemplates.com/ectstore/ and where everything is set up as per PayPal's best practices both in the code and in the hosting. Vince suggested the problem you're having is actually down to an outdated server set up

quote:

---

As Win2008 servers are now old technology MS isn't really interested in updating them. Previously, whatever object you used on Win2008 servers would fail

---

Andy

Please feel free to review / rate our software