asked on

.NET Problems with PayPal TLS 1.2 Conversion

Having problem getting my VB.NET web site to use PayPal TLS 1.2. I am using the PayFloPro API and setting a KEY value to the endpoint URL. I am running Framework 4.5.1 & working in Visual Studio 2015. This line is in the code: ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls12

PayPal lists several endpoints for testing. "These endpoints allow only TLS 1.2 and HTTP/1.1 connections:" = pilot-payflowpro.paypal.com
When I use this it connects fine.

Then PayPal has another paragraph that says "PayPal has created a new endpoint - https://tlstest.paypal.com - to help you verify that your systems can support the latest security standards". When I use this it fails with message "RESPMSG = Unexpected transaction state, PayPal_Connection_OK". Transaction does not go through.

Any idea what is going on here? Thanks in advance.

ASKER CERTIFIED SOLUTION

Kyle Abrahams, PMP

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

4ncid

ASKER

Thanks Kyle. They provide different URL endpoints in the "Sandbox Group" for other apps like Mobile and Point-of-sale. I suppose I could try them, but this is the one that worked for me already. Maybe the "test" endpoint is malformed - hard to get direct answer from PayPal.

I was hoping someone on here had direct experience with this migration at PayPal.

Kyle Abrahams, PMP

Not with paypal directly but do have other experiences with APIs from all over. Ran into a similar situation where the vendor was asking me to test new certs (EG: we're rolling our certs, make sure you're still compatible). The first function I called returned a 500, but I knew I was connecting at that point. Changed to a different function and lo and behold it worked. Since TLS is only about communication and not about workflow / functionality I would say the test (in terms of TLS and connection issues) is a success; and can confirm that the way you're going to TLS 1.2 is correct.

4ncid

ASKER

Kyle - you were spot-on with your first reply. Thanks much!

PayPal: "The https://tlstest.paypal.com is just to test the connection between your server and PayPal so all we are looking for is PayPal_Connection_OK in the response. That tells us you are connecting with a TLS 1.2 connection."