PHP中的Paypal Masspay API

Question

我正在我的PHP网页中实现paypal masspay API。

但目前，我遇到了一个错误，描述如下：

request(METHOD=MassPay&VERSION=93&PWD=TNQAETBEXP7ZC9P9&USER=_______失败: SSL错误(35) POST MassPay的HTTP响应无效)到https://api-3t.sandbox.paypal.com/nvp。

这是我的代码：

 $vEmailSubject = 'Mass Payment';

        /** MassPay NVP example.
         *
         *  Pay one or more recipients. 
        */

        // For testing environment: use 'sandbox' option. Otherwise, use 'live'.
        // Go to www.x.com (PayPal Integration center) for more information.
        $environment = 'sandbox'; // or 'beta-sandbox' or 'live'.

        /**
         * Send HTTP POST Request
         *
         * @param string The API method name
         * @param string The POST Message fields in &name=value pair format
         * @return array Parsed HTTP Response body
         */

        function PPHttpPost($methodName_, $nvpStr_)
        {
            global $environment;

            // Set up your API credentials, PayPal end point, and API version.
            // How to obtain API credentials:
            // https://cms.paypal.com/us/cgi-bin/?cmd=_render-content&content_ID=developer/e_howto_api_NVPAPIBasics#id084E30I30RO
            $API_UserName = urlencode('UserName');
            $API_Password = urlencode('Password');
            $API_Signature = urlencode('Signature');
            $API_Endpoint = "https://api-3t.sandbox.paypal.com/nvp";

            if("sandbox" === $environment || "beta-sandbox" === $environment)
            {
                $API_Endpoint = "https://api-3t.sandbox.paypal.com/nvp";
            }


            $version = urlencode('93');

            // Set the curl parameters.
            $ch = curl_init();
            curl_setopt($ch, CURLOPT_URL, $API_Endpoint);
            curl_setopt($ch, CURLOPT_VERBOSE, 1);

            // Turn off the server and peer verification (TrustManager Concept).
            curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
            curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
            curl_setopt($ch, CURLOPT_SSLVERSION , 1);
            curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
            curl_setopt($ch, CURLOPT_POST, 1);


            // Set the API operation, version, and API signature in the request.

            $nvpreq = "METHOD=MassPay&VERSION=$version&PWD=$API_Password&USER=$API_UserName&SIGNATURE=$API_Signature$nvpStr_";

            // Set the request as a POST FIELD for curl.
            curl_setopt($ch, CURLOPT_POSTFIELDS, $nvpreq."&".$nvpStr_);

            // Get response from the server.
            $httpResponse = curl_exec($ch);

            if( !$httpResponse)
            {
             echo $methodName_ . ' failed: ' . curl_error($ch) . '(' . curl_errno($ch) .')';
            }

            // Extract the response details.
            $httpResponseAr = explode("&", $httpResponse);

            $httpParsedResponseAr = array();
            foreach ($httpResponseAr as $i => $value)
            {
             $tmpAr = explode("=", $value);
             if(sizeof($tmpAr) > 1)
             {
              $httpParsedResponseAr[$tmpAr[0]] = $tmpAr[1];
             }
            }

            if((0 == sizeof($httpParsedResponseAr)) || !array_key_exists('ACK', $httpParsedResponseAr))
            {
             exit("Invalid HTTP Response for POST request($nvpreq) to $API_Endpoint.");
            }
            print_r($httpParsedResponseAr);

            return $httpParsedResponseAr;
        }

        // Set request-specific fields.
        $emailSubject = urlencode($vEmailSubject);
        $receiverType = urlencode('EmailAddress');
        $currency = urlencode('USD'); // or other currency ('GBP', 'EUR', 'JPY', 'CAD', 'AUD')

        // Receivers
        // Use '0' for a single receiver. In order to add new ones: (0, 1, 2, 3...)
        // Here you can modify to obtain array data from database.

        $receivers = array(
            0 => array(
            'receiverEmail' => 'Receiver mail id', 
            'amount' => 100,
            'uniqueID' => 10, // 13 chars max
            'note' => "Transfer amount to Person"),
            1 => array(
            'receiverEmail' => 'Receiver mail id 2', 
            'amount' => 200,
            'uniqueID' => 11, // 13 chars max
            'note' => "Transfer amount to Person")
        );

        $receiversLenght = count($receivers);

        // Add request-specific fields to the request string.
        $nvpStr="&EMAILSUBJECT=$emailSubject&RECEIVERTYPE=$receiverType&CURRENCYCODE=$currency";

        $receiversArray = array();

        for($i = 0; $i < $receiversLenght; $i++)
        {
         $receiversArray[$i] = $receivers[$i];
        }

        foreach($receiversArray as $i => $receiverData)
        {
         $receiverEmail = urlencode($receiverData['receiverEmail']);
         $amount = urlencode($receiverData['amount']);
         $uniqueID = urlencode($receiverData['uniqueID']);
         $note = urlencode($receiverData['note']);
         $nvpStr .= "&L_EMAIL$i=$receiverEmail&L_Amt$i=$amount&L_UNIQUEID$i=$uniqueID&L_NOTE$i=$note";
        }

        // Execute the API operation; see the PPHttpPost function above.
        $httpParsedResponseAr = PPHttpPost('MassPay', $nvpStr);

        if("SUCCESS" == strtoupper($httpParsedResponseAr["ACK"]) || "SUCCESSWITHWARNING" == strtoupper($httpParsedResponseAr["ACK"]))
        {
            echo 'MassPay Completed Successfully: ' . $httpParsedResponseAr;
        }
        else
        {
            echo '\nMassPay failed: ';
            print_r($httpParsedResponseAr);
        }

Answer 1

您的服务器需要配置为使用TLS1.2发送HTTP请求。听起来像你的被配置为通过SSLv3发送。不要将此与在站点上运行的SSL证书混淆，这是另一回事。

这是我不久前写过的一篇文章：https://www.angelleye.com/paypal-ssl-error-poodle-vulnerability/

重要的部分是：

如果您想使用TLS1.2，则需要至少升级到OpenSSL 1.0.1，然后可以将CURLOPT_SSLVERSION设置为6(TLS1.2)。 如果您希望在SSL请求期间自动使用TLS1.2，您还需要升级到PHP (这是理想的解决方案，但许多项目仍然在较旧的5.5.19+版本上)。