PayPal IPN - INVALID

All those of you with experience of PayPal IPN know that this
should be simple, right?
You point PayPal's IPN checker at your page and it POST's to
it. You gather the form field values, loop over them, add
thehe22cmd" name/value pair and post them back. Simple, no,
INVALID. What am I missing here? Something in the cfhttp or
cfhttpparam? I'm foxed!
dickbob

quote:
As I understand it PayPal's IPN now requires a POST rather
than a GET
All of my code that I use with IPN is GET, and it is used
many times during the day.
On my IPN, which is setup mainly for ReOccuring Payments, I
use this CODE:
<cftry>
<cfset x = GetHttpRequestData()>
<CFSET str="cmd=_notify-validate&" & x.content>
<CFHTTP URL="https://www.paypal.com/cgi-bin/webscr?#str#"
METHOD="GET" RESOLVEURL="false">
</CFHTTP>
<!---Set vars from returned data--->
<CFIF #CFHTTP.FileContent# is "VERIFIED">
<cfset txn_type = '#FORM.txn_type#'>
<CFIF IsDefined("FORM.item_number")>
<cfset Username = '#form.item_number#'>
</cfif>
<CFIF IsDefined("url.username")>
<cfset Username = '#url.username#'>
</cfif>
<cfset payer_id = '#form.payer_id#'>
<cfset subscr_id = '#form.subscr_id#'>
<cfset first_name = '#form.first_name#'>
<cfset last_name = '#form.last_name#'>
<cfset payer_email = '#FORM.payer_email#'>
<CFIF IsDefined("FORM.subscr_date")>
<cfset subscr_date = '#form.subscr_date#'>
</cfif>
<CFIF IsDefined("FORM.payment_date")>
<cfset payment_date = '#form.payment_date#'>
</cfif>
<CFIF IsDefined("FORM.payment_gross")>
<cfset payment_gross = '#form.payment_gross#'>
</cfif>
<CFIF IsDefined("FORM.payment_status")>
<cfset payment_status = '#form.payment_status#'>
</cfif>
<CFIF IsDefined("FORM.txn_id")>
<cfset txn_id = '#form.txn_id#'>
</cfif>
</CFIF>
<!---If this is a subscription setup--->
<cfif #FORM.txn_type# is "subscr_signup">
<!---update orders table--->
cfquery name="InsertOrder" datasource="#mydatasource#">
INSERT INTO Orders(user_name, payment_status, payment_date,
payment_gross, txn_id, txn_type, payer_email, subscr_date,
subscr_id, payer_id)
VALUES('#Username#', 'SubSetup',
'#DateFormat(now(),'mm/dd/yy')#', '0', '', '#TXN_TYPE#',
'#payer_email#', '#DateFormat(now(),'mm/dd/yy')#','#subscr_id#',
'#payer_id#')
</cfquery>
<cfcatch type="any">
<cffile action="append"
file="d:\inetpub\website\paypal_errorlog.txt"
output="#DateFormat(Now(),'mm/dd/yy')#: Error on Paypal IPN
page:
#cfcatch#">
<br />
</cfcatch>
</cftry>
Now I also do quite a bit of other things as well in my code,
update tables and send emails, and the query here is for example .
But this works fine all of the time.
What error are you getting exactly?

Similar Messages

  • Paypal IPN + Coldfusion 7 not working?

    I am trying to set up coldfusion to handle payPal IPN but I cant find any tutorials that explain how to get it to work, anything I find is out of date or I just cant get it to work.
    I've tried using the code on paypal developer site here:
    https://cms.paypal.com/cms_content/CA/en_US/files/developer/IPN_COLDFUSION.txt
    and I have enabled IPN on my paypal account but I'm not sure I've set it up correctly. Is there a way to check if paypal is even sending data back to my site?
    Been having a look and it seems the ipn I set up isnt even running. when I test the payment (i set up a basic ipn.cfm file that writes to a text file) it still doesnt work. Could there be a reason why paypal isnt running the ipn? If I go to the ipn.cfm file in a browser then the test txt file is created.
    Cheers!

    Hi Jeff,
    Can you let us know the directory location for wwwroot on your system.
    jeffcg2 wrote:
    That does not work. As soon as I put C:\ColdFusion10\cfusion in the Server Home I get the error Server Home Invalid. I have uninstalled Coldfusion 10 and re-installed added the latest updates. Coldfusion 10 is working fine running on IIS 7.
    Not necessarily. As soon as you select the "cfusion" location, it would automatically pick the wwwroot location.
    jeffcg2 wrote:
    With Coldfusion 10 , since you have C:\ColdFusion10\cfusion\wwwroot. as the Document root will this only work if you install the included web server?
    Regards,
    Anit Kumar

  • PayPal IPN Posting Twice

    I have a test page called order.cfm. This page posts to
    PayPal for payments. I have a file called ipn.cfm which waits for
    PayPals verification. However, it is being executed twice. The
    first time through it has all the form variables, but the sencond
    time it does not. How can I stop it from being posted twice. Below
    is my code:
    ORDER.CFM
    <form action="https://www.paypal.com/cgi-bin/webscr"
    method="post">
    <input type="hidden" name="cmd" value="_cart">
    <input type="hidden" name="upload" value="1">
    <input type="hidden" name="business"
    value="mybusiness@mybusinesscom">
    <input type="hidden" name="item_name_1" value="Item Name
    1">
    <input type="hidden" name="amount_1" value="0.01">
    <input type="hidden" name="invoice" value="101">
    <input type="hidden" name="tax_cart" value="0.00">
    <input type="hidden" name="shipping" value="0.00">
    <input type="submit" value="PayPal">
    </form>
    IPN.CFM
    <cfheader statuscode="200" statustext="OK">
    <cffile action="append"
    file="#GetDirectoryFromPath(GetBaseTemplatePath())#IPN_log.txt"
    output="THIS PAGE HAS BEEN CALLED ON
    #DateFormat(Now(),'mm/dd/yyyy') & TimeFormat(Now(), '
    hh:mm:ss')#" addnewline="yes">
    <cfset x = GetHttpRequestData()>
    <cfset str="cmd=_notify-validate&" & x.content>
    <!---post back to PayPal for validation--->
    <cfhttp url="https://www.paypal.com/cgi-bin/webscr?#str#"
    method="GET" resolveurl="no">
    </cfhttp>
    <cffile action="append"
    file="#GetDirectoryFromPath(GetBaseTemplatePath())#IPN_log.txt"
    output="
    Paypal Says the transaction is: #CFHTTP.FileContent#
    Transaction status: #FORM.payment_status#
    Seller account: #FORM.RECEIVER_EMAIL#
    addnewline="yes">
    <cfloop index="TheField" list="#Form.FieldNames#">
    <cfset str = str &
    "#LCase(TheField)#=#URLEncodedFormat(Form[TheField])#">
    <cffile action="append"
    file="#GetDirectoryFromPath(GetBaseTemplatePath())#IPN_log.txt"
    output="#LCase(TheField)#----#(Form[TheField])#"
    addnewline="yes">
    </cfloop>
    <cfoutput>
    <!--- Payment verified --->
    <cfif CFHTTP.FileContent is "VERIFIED">
    VERIFIED<br />
    <!-- check that payment_status=Completed -->
    <cfif FORM.payment_status eq "Completed">
    Completed<br />
    <!-- check that receiver_email is your email address
    (that money went into your account -->
    <cfif FORM.RECEIVER_EMAIL eq
    "[email protected]">
    Paypal says the funds went into your account<br />
    <!--- Everything checked ok, add your action here
    (typically you would want to update your database here --->
    <cfelse>
    <!--- The receiver email doesn't match. Log this as
    possible fraud --->
    The receiver email, #FORM.RECEIVER_EMAIL#, doesn't match.
    </cfif>
    </cfif>
    <cfelseif CFHTTP.FileContent is "INVALID">
    <!-- The information is not valid, please investigate and
    trace invalid info -->
    Invalid Info<br />
    <!---Something that was purchased was invalid, either the
    order or the information provided. This is usually good to log in
    case someone is trying to purchase with stolen card numbers, etc.
    Here simply place a QUERY tag that insert the data above into a
    database.--->
    <cfelse>
    Error<br />
    <!-- ERROR -->
    <!---This usually means that something went wrong along
    the way, you can use this area to log it and keep for your
    records.--->
    </cfif>
    </cfoutput>

    What do you mean about entering details again, do you mean when they are on paypal?

  • Quick Paypal IPN q

    Hello,
    I just need to confirm my understandings of the available
    variables
    https://www.paypal.com/IntegrationCenter/ic_ipn-pdt-variable-reference.html
    Ok were I to pass any values to paypal using any of the
    variables listed and
    the entire transaction went well, does that mean paypal
    pass's back all the
    values of the variables been passed in the first plase. take
    for example
    I have a form on my page. which has a pay now button. when
    the user clicks
    it takes them to paypal with the content of my textareas and
    hidden fields.
    If the transaction goes through ok does this mean I call call
    the values
    from paypal.
    <input name="item_number" type="hidden" value="12345">
    <input type="hidden" name="return"
    value="
    http://www.mysite.com/Pay1_db_process.asp">
    so the above is passed to paypal
    now my question is on my Pay1_db_process.asp page
    can I call the values like this using the request.form. on my
    Pay1_db_process.asp as in below
    <%= Request.Form("item_number" %>
    regards
    k

    as simple as that!
    thanks very much

  • Receive data from PayPal

    Hello.
    Assuming that I send data into PayPal (with the use of  "HTML Variables for PayPal Payments Standard"):
    var variables:URLVariables = new URLVariables();
    variables.cmd = "_xclick";
    variables.business = "A8AJGG5PS2GKE";
    variables.upload = "1";
    variables.item_name = "some item";
    variables.amount = "123";
    variables.currency_code = "USD";
    variables.lc = "pl";
    variables.page_style = "PayPal";
    variables.return = "my site";
    variables.re = 2;
    variables.no_note = 1;
    variables.no_shipping = 1;
    variables.notify_url = "[email protected]";
    var request:URLRequest = new URLRequest("https://www.paypal.com/cgi-bin/webscr");
    request.method = URLRequestMethod.POST;
    request.data = variables;
    navigateToURL(request, "_blank");
    Does anyone managed to integrate PayPal IPN - "Instant Payment Notification"-
    (https://www.paypal.com/ipn/) with AS3 in order to receive data from PayPal?
    Could you please show any example of using it.

    My idea is as follow:
    1. .swf on you page sends variables into PayPal
    2. After finishing the payment on PayPal, the customer is auto-redirected to your page ("return" variable)
    3. Customer returns to your page. PayPal does NOT send any payment data there.
    Separately in the background, you receive a form POST from PayPal at a different URL (notify_url variable) - (here resides the php that I added below).
    4. You post back a form with cmd=_notify-validate and all fields you received from PayPal. PayPal responds with a single word VERIFIED or INVALID
    5. If you receive VERIFIED, you can process payment
    This method means that you can easily update for example your MySQL database but unfortunately you have to reload .swf file each time - and that's why it is not a perfect solution in my opinion;
    PS:
    - variables.return   and variables.notify_url must be absolute urls
    - notify_url must also allow anonymous access from outside of your network
    - firewall must be opened to host: notify.paypal.com
    - in your business PayPal account:
    Auto Return = Enabled in account profile
    PDT = Disabled in account profile
    IPN = Enabled in account profile
    - php file:
    <?php
    // read the post from PayPal system and add 'cmd'
    $req = 'cmd=' . urlencode('_notify-validate');
    foreach ($_POST as $key => $value) {
            $value = urlencode(stripslashes($value));
            $req .= "&$key=$value";
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, 'https://www.paypal.com/cgi-bin/webscr');
    curl_setopt($ch, CURLOPT_HEADER, 0);
    curl_setopt($ch, CURLOPT_POST, 1);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);
    curl_setopt($ch, CURLOPT_POSTFIELDS, $req);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 1);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
    curl_setopt($ch, CURLOPT_HTTPHEADER, array('Host: www.paypal.com'));
    $res = curl_exec($ch);
    curl_close($ch);
    // assign posted variables to local variables
    $item_name = $_POST['item_name'];
    $item_number = $_POST['item_number'];
    $payment_status = $_POST['payment_status'];
    $payment_amount = $_POST['mc_gross'];
    $payment_currency = $_POST['mc_currency'];
    $txn_id = $_POST['txn_id'];
    $receiver_email = $_POST['receiver_email'];
    $payer_email = $_POST['payer_email'];
    if (strcmp ($res, "VERIFIED") == 0) {
            // process payment
    else if (strcmp ($res, "INVALID") == 0) {
            // log for manual investigation
    ?>

  • Need popup window from cfform to go to PayPal using their button

    I have a cfform page (ColdFusion 8) that is embedded in an iframe in my standard html webpage. (Embedded so that I still have the same outer "envelope" as the rest of the pages; nav bars, etc.) I have the form post back to itself in order to check for injection problems, validation beyond basic form validation, etc, then insert form entries into a database. I am trying to then pass the visitor on to PayPal for them to make the payment. This could be either by way of a popup window or a redirect. The problem is that if I just put the PayPal button in my .cfm page it doesn't work. Also, it seems I need to get it out of the iframe context. Of course it would be nice to go the other way (which I have also tried) and have the potential donor first go to PayPal, enter their info, and then have them redirected back to my page. I realize I could then get some of the info I need from them (name, email, etc) in the PayPal IPN return, but there are 2 problems with this. 1) I have to rely on them clicking the "go back to ....." link in PayPal and 2) I still need other info that PayPal doesn;t pick up, like what department category they want their donation to go to, etc. which I can get up front from them if I go the first route mentioned.
    I have looked into cfhttp and cflocation tags. I don't seem to be finding any clearcut answers!
    Thanks for any help in advance!

    This link may help.
    http://www.danvega.org/blog/index.cfm/2008/3/4/ColdFusion-8-Grid-Context-Menu-Part-II

  • Invalid oracle.soa_template_10.1.3.5.0.jar

    Hi there,
    When trying to deploy the Oracle SOA Suite over WebLogics, I get an error message CFGFWK-64056 stating that there is a problem with the template. I tried to install all other applications which templates are located in ..\wls1035_dev\wlserver\common\templates\applications and it worked just fine (domain creation for the first one, domain extension for the other ones). Anybody heard that there could be a problem with this template?
    Thanks,
    Yves.

    Did you find a solution to this issue? We are having a similar issue trying to deploy a Paypal IPN on OAS 10.1.2.3. The IPN messages coming from Paypal appear to be attempting an SSLv2 handshake. In our case SSLv2 is disabled due to our security requirements so the connection is killed by our App Server. We have found that manually sending the IPN messages works correctly.

  • PHP / PayPal / Payment Integration

    Hi Chaps,
    I'm building a simple on-line clothing shop and I've  got to the payments bit and need a bit of advice.
    I've checkedout  PayPal IPN and can figure out how it all links together, but I'm  wondering if there is something similar that doesn't redirect to the  PayPal site and resides within your domain.
    Any guidence would  help a lot.
    Cheers

    Cheers dude, going to take a look at PayPal Web Payments Pro

  • Paypal drops SSL 3

    Just a heads up to anyone who might be using Paypal ipn and ipnlistener.php by Micah Carrick
    Paypal a few day ago cut off SSL3 and subsequently ipn stopped working.
    All you need to do is open ipnlisener.php script and change the line below to 'false'
    public $force_ssl_v3 = false;
    Job done - works again!
    Thanks Paypal for wasting a few hours of my time.

    Yes, we are going to disable ssl_v3 by default for next update. However, you can do this manually at the front ends to avoid running exposed.

  • OT: update database after Paypal payment???

    Anyone been in this position before?
    My client is selling tickets from their website and they have a set quantity, the number of which is stored in the database.
    The objective is to update the database, reducing the amount of tickets by the volume that was purchased BUT only after a Paypal transaction has been made. I can do it before the transcation but that's no good if the buy aborts.
    Anyone had this issue and resolved it using Paypal? I've come across Paypal IPN (Instant Payment Notification) which apparently sends some information back to the clients server but have no idea if this could be used to update a database?
    Cheers
    Os

    Actually I found a more up to date ipn script on the Paypal site itself which contains the below variables. What I dont quite understand is where does Paypal get those variables from? I have nothing in the cart form that is sent to Paypal that relate to the items below. Can I make up the variables and put them in a hidden field that is sent when the cart form is sent?
    // assign posted variables to local variables
    $item_name = $_POST['item_name'];
    $item_number = $_POST['item_number'];
    $payment_status = $_POST['payment_status'];
    $payment_amount = $_POST['mc_gross'];
    $payment_currency = $_POST['mc_currency'];
    $txn_id = $_POST['txn_id'];
    $receiver_email = $_POST['receiver_email'];
    $payer_email = $_POST['payer_email'];
    I would need the id of the event and the number of tickets that have been sold to be able to update the ticket field in the database. I can put those in hidden field in the Paypal cart form???
    So instead of the above, the below???
    $total_tickets = $_POST['total_tickets'];
    $event_id = $_POST['event_id'];

  • Paypal Instant Pay Notification is doubling URL when sent

    For months now, I have not been able to get any help out of Paypal. When a product is purchased, I have IPN set to on.IN the selling tools section, the following URL is used to return the IPN info:
    Paypal IPN settings
    Notification URL    http://www.heritageseminary.com/paypal/ipn/ipn.cfm
    Below is my config setup sent to payppal.
    config.cfm
    <cfset paypal["notify_url"]="http://www.heritageseminary.com/paypal/ipn/ipn.cfm">
    When a payment is made, I receive the  I am receiving the following error:
    Please check your server that handles PayPal Instant Payment Notifications (IPN). IPNs sent to the following URL(s) are failing:
    This is the URL that paypal is trying to connect with.
    http://www.heritagesemianary.com/http://www.heritageseminary.com/paypal/ipn/ipn.cfm
    When I check the IPN history, the status shows still trying.
    When I click Message ID, I get the following address:
    Notification URL http://www.heritagesemianary.com/http://www.heritageseminary.com/paypal/ipn/ipn.cfm
    Any idea as to where I should be looking?

    The config setting should perhaps be the relative path:
    <cfset paypal["notify_url"]="paypal/ipn/ipn.cfm">

  • Paypal php/mysql

    how can i get paypal ipn to update a column in mysql on success?
    I have a paypal script that has the ability but I do not know how to do it. There is no documentation or a website for help.
    also I need the info from the booking form to insert into the database before submitting to paypal.
    I did it by adding a Summary page last time, but I need to cut down on the number of clicks
    But what I really need to know is how I can redirect the form to just insert into the database and not even going to paypal if the price is 0.00 or FREE or NULL

    "Do this by sending your post data to a separate processing script, and  inserting the required data into the database, then re-posting the data  to paypal."
    I am not sure how to send the form to two scripts this is how its working at the moment:
    <form action="paypal/process.php" method="post" enctype="multipart/form-data" name="booking">
       <label class="bday2">First Name:</label><span id="sprytextfield1">
       <input type="text" name="firstname" id="firstname" />
       <span class="textfieldRequiredMsg">A value is required.</span></span>
       <br />
          <label class="bday2">Ticket Type:</label><select name="amount">
       <?php if ($row_event['single_price'] !="") {?>
       <option label="Single - &pound;<?php echo $row_event['single_price']; ?>" value="<?php echo $row_event['single_price']; ?>"><?php echo $row_event['single_price']; ?></option>
       <?php } else {?>
       <option label="Single - &pound;FREE" value="0.00"></option>
       <?php };?>
       <?php if ($row_event['table_price'] !="") {?>
       <option label="Table - &pound;<?php echo $row_event['table_price']; ?>" value="<?php echo $row_event['table_price']; ?>"><?php echo $row_event['table_price']; ?></option>
       <?php } else {?>
       <option label="Table - &pound;FREE" value="0.00"></option>
       <?php };?>
       </select>
       <br /><br />
       <input name="order" type="submit" id="order" value="Order" />    
    </form>

  • Createodbcdatetime problem in cf9

    Hi, im stuck on a problem that i just cannot seem to figure out.
    I have a script that recieves popsts from the paypal IPN.
    This is my code for decoding the date/time:
    <cfif isdefined("form.payment_date")>
           <cfset payment_date=urldecode(form.payment_date)>
           <cfset dl = len(payment_date)>
           <cfset cut = dl - 3>
           <cfset paymentdate_temp=removechars(payment_date,cut,4)>
          <cfset paymentdate = #createodbcdatetime(paymentdate_temp)#>
    </cfif>
    The script works fine in CF7 and 8 but kicks an error in CF9. I use cfcatch to snag the error. The error is this:
    Error at decoding the payment_date, Expression, , 08:38:49 Apr 11, 2012 is an invalid date or time string.
    I cannot figure out what to do to save my live. Can someone please help?
    Thanks
    Tony

    WebDevKid wrote:
    So try using parsedatetimne instead of createodbcdatetimne? Or instead of ulrencode?
    Yes. Why not just
    <cfif isdefined("form.payment_date")>
           <cfset payment_date=parseDatetime(form.payment_date)>
    </cfif>

  • Connection Reset on Oracle SOA-Suite 10.1.3.5.0 Apache-Webserver with SSLv3

    Hi,
    I'm trying to use SSL with my SOA-Suite 10.1.3.5.0 Webserver. This Problem occurs on both a windows and a linux machine. I'm referring to the windows-machine, as this has the latest patch-level. My problems are about the Apache-Webserver only. I didn't do any special configuration, and SSL is working fine in the Browser (FF3.5 and IE 8). But for Paypal IPN Notification i'm having serious troubles. I was able to track down the problem to a SSLv3 problem. I installed the latest openssl version and issued the following command:
    openssl s_client -connect localhost:443
    This gives me the following output:
    C:\OpenSSL\bin>openssl s_client -connect localhost:443
    Loading 'screen' into random state - done
    CONNECTED(000002E8)
    depth=0 /C=US/ST=OR/L=PORTLAND/O=ORACLE/OU=PDC/CN=WARNING: FOR TEST PURPOSES ONLY! DO NOT USE COMMERCIALLY!
    verify error:num=18:self signed certificate
    verify return:1
    depth=0 /C=US/ST=OR/L=PORTLAND/O=ORACLE/OU=PDC/CN=WARNING: FOR TEST PURPOSES ONLY! DO NOT USE COMMERCIALLY!
    verify error:num=10:certificate has expired
    notAfter=Dec 8 16:18:11 2006 GMT
    verify return:1
    depth=0 /C=US/ST=OR/L=PORTLAND/O=ORACLE/OU=PDC/CN=WARNING: FOR TEST PURPOSES ONLY! DO NOT USE COMMERCIALLY!
    notAfter=Dec 8 16:18:11 2006 GMT
    verify return:1
    Certificate chain
    0 s:/C=US/ST=OR/L=PORTLAND/O=ORACLE/OU=PDC/CN=WARNING: FOR TEST PURPOSES ONLY! DO NOT USE COMMERCIALLY!
    i:/C=US/ST=OR/L=PORTLAND/O=ORACLE/OU=PDC/CN=WARNING: FOR TEST PURPOSES ONLY! DO NOT USE COMMERCIALLY!
    Server certificate
    -----BEGIN CERTIFICATE-----
    Here is the certificate...
    -----END CERTIFICATE-----
    subject=/C=US/ST=OR/L=PORTLAND/O=ORACLE/OU=PDC/CN=WARNING: FOR TEST PURPOSES ONLY! DO NOT USE COMMERCIALLY!
    issuer=/C=US/ST=OR/L=PORTLAND/O=ORACLE/OU=PDC/CN=WARNING: FOR TEST PURPOSES ONLY! DO NOT USE COMMERCIALLY!
    No client certificate CA names sent
    SSL handshake has read 807 bytes and written 325 bytes
    New, TLSv1/SSLv3, Cipher is AES256-SHA
    Server public key is 1024 bit
    Secure Renegotiation IS NOT supported
    Compression: NONE
    Expansion: NONE
    SSL-Session:
    Protocol : TLSv1
    Cipher : AES256-SHA
    Session-ID: A66F9DD036604C6B2DDF05591FC3614D
    Session-ID-ctx:
    Master-Key: DC0E5BB6EEFE0E6B60AA4A2A65974B793500803930A8EFABB141F9DED25819A98FA00C365B9D61D579745C69CAA60C56
    Key-Arg : None
    Start Time: 1272964747
    Timeout : 300 (sec)
    Verify return code: 10 (certificate has expired)
    ---This looks fine so far. But when I'm issuing an HTTP-Command, e.g. GET / HTTP/1.0, the connection gets closed immediately (openssl just says 'closed' and I'm back to the commandline again). When adding the -msg to the openssl commandline, I'm getting the following output:
    GET / HTTP/1.0
    TLS 1.0 Alert [length 0002], warning close_notify
    01 00
    closed
    TLS 1.0 Alert [length 0002], warning close_notify
    01 00The ssl_engine_log contains the following (set to LogLevel debug):
    [04/Mai/2010 11:23:19 00976] [info] Connection to child 2 established (server soa1.karlsbad2.promatis.de:443, client 127.0.0.1)
    [04/Mai/2010 11:23:20 00976] [trace] inside shmcb_store_session
    [04/Mai/2010 11:23:20 00976] [trace] session_id[0]=89, masked index=25
    [04/Mai/2010 11:23:20 00976] [trace] entering shmcb_insert_encoded_session, *queue->pos_count = 0
    [04/Mai/2010 11:23:20 00976] [trace] entering shmcb_expire_division
    [04/Mai/2010 11:23:20 00976] [trace] we have 14385 bytes and 133 indexes free - enough
    [04/Mai/2010 11:23:20 00976] [trace] storing in index 0, at offset 0
    [04/Mai/2010 11:23:20 00976] [trace] session_id[0]=89, idx->s_id2=51
    [04/Mai/2010 11:23:20 00976] [trace] leaving now with 124 bytes in the cache and 1 indexes
    [04/Mai/2010 11:23:20 00976] [trace] leaving shmcb_insert_encoded_session
    [04/Mai/2010 11:23:20 00976] [trace] leaving shmcb_store successfully
    [04/Mai/2010 11:23:20 00976] [trace] shmcb_store successful
    [04/Mai/2010 11:23:20 00976] [trace] Inter-Process Session Cache: request=SET status=OK id=593330BC94651266418548085D63F57C timeout=300s (session caching)
    [04/Mai/2010 11:23:25 00976] [info] Connection to child 2 closed with standard shutdown (server soa1.karlsbad2.promatis.de:443, client 127.0.0.1)This seems fine for me.
    When adding the -bugs to the openssl commandline (saying "Switch on all SSL implementation bug workarounds") everything is working fine (with the same output for openssl, using sslv3 and the following additional line in the ssl-log: [info] Initial (No.1) HTTPS request received for child 34 (server soa1.karlsbad2.promatis.de:443) (at the end just before connection close).
    When setting the client to use ssl2 (-ssl2) everything is fine too. When doing -ssl3 it is the same as without any parameter.
    The certificate has expired message and the test-certificate seem not to be related with my problems, since the same problems arise on our production server having a "real and valid" SSL certificate certified by a renowned SSL-CA.
    When setting SSLProtocol +SSLv2 in the ssl.conf openssl is working fine too. But this is not an option as sslv2 is no longer supported by Firefox (giving me an error-message when accessing the page).
    I played around with SSLCipherSuite in the ssl.conf without success. I fear mod_ossl has a bug when working with the specified ssl-parameters. Is there any way out of this?
    Any help would be highyl appreciated,
    Best regards
    Johannes Michler
    PS: This is the ssl_engline_log during startup:
    [04/Mai/2010 11:22:32 00880] [info] Server: Oracle-HTTP-Server/1.3.34, Interface: mod_ossl/10.1.3.0.0, Library:
    [04/Mai/2010 11:22:32 00880] [info] Init: 1st startup round (still not detached)
    [04/Mai/2010 11:22:32 00880] [trace] Shared-memory segment has 512000 available
    [04/Mai/2010 11:22:32 00880] [trace] shmcb_malloc attempt for 512000 bytes failed
    [04/Mai/2010 11:22:32 00880] [trace] shmcb_malloc attempt for 511998 bytes failed
    [04/Mai/2010 11:22:32 00880] [trace] shmcb_malloc attempt for 511996 bytes failed
    [04/Mai/2010 11:22:32 00880] [trace] shmcb_malloc attempt for 511994 bytes failed
    [04/Mai/2010 11:22:32 00880] [trace] shmcb_init allocated 511992 bytes of shared memory
    [04/Mai/2010 11:22:32 00880] [trace] entered shmcb_init_memory()
    [04/Mai/2010 11:22:32 00880] [trace] for 511992 bytes, recommending 4266 indexes
    [04/Mai/2010 11:22:32 00880] [trace] shmcb_init_memory choices follow
    [04/Mai/2010 11:22:32 00880] [trace] division_mask = 0x1F
    [04/Mai/2010 11:22:32 00880] [trace] division_offset = 64
    [04/Mai/2010 11:22:32 00880] [trace] division_size = 15997
    [04/Mai/2010 11:22:32 00880] [trace] queue_size = 1604
    [04/Mai/2010 11:22:32 00880] [trace] index_num = 133
    [04/Mai/2010 11:22:32 00880] [trace] index_offset = 8
    [04/Mai/2010 11:22:32 00880] [trace] index_size = 12
    [04/Mai/2010 11:22:32 00880] [trace] cache_data_offset = 8
    [04/Mai/2010 11:22:32 00880] [trace] cache_data_size = 14385
    [04/Mai/2010 11:22:32 00880] [trace] leaving shmcb_init_memory()
    [04/Mai/2010 11:22:32 00880] [info] Shared memory session cache initialised
    [04/Mai/2010 11:22:32 00880] [info] Init: Initializing (virtual) servers for SSL
    [04/Mai/2010 11:22:32 00880] [info] Init: Configuring server soa1.karlsbad2.promatis.de:443 for SSL protocol
    [04/Mai/2010 11:22:32 00880] [trace] Init: (soa1.karlsbad2.promatis.de:443) Configuring permitted SSL ciphers [ALL:!ADH:!EXPORT56:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP]
    [04/Mai/2010 11:22:32 00880] [trace] Init: (soa1.karlsbad2.promatis.de:80) Configuring permitted proxy SSL ciphers [DEFAULT]
    [04/Mai/2010 11:22:32 00880] [trace] Init: (soa1.karlsbad2.promatis.de:443) Configuring permitted proxy SSL ciphers [DEFAULT]
    [04/Mai/2010 11:22:32 00880] [trace] Init: (127.0.0.1:7200) Configuring permitted proxy SSL ciphers [DEFAULT]
    [04/Mai/2010 11:22:33 00880] [info] Init: 2nd startup round (already detached)
    [04/Mai/2010 11:22:33 00880] [trace] Shared-memory segment has 512000 available
    [04/Mai/2010 11:22:33 00880] [trace] shmcb_malloc attempt for 512000 bytes failed
    [04/Mai/2010 11:22:33 00880] [trace] shmcb_malloc attempt for 511998 bytes failed
    [04/Mai/2010 11:22:33 00880] [trace] shmcb_malloc attempt for 511996 bytes failed
    [04/Mai/2010 11:22:33 00880] [trace] shmcb_malloc attempt for 511994 bytes failed
    [04/Mai/2010 11:22:33 00880] [trace] shmcb_init allocated 511992 bytes of shared memory
    [04/Mai/2010 11:22:33 00880] [trace] entered shmcb_init_memory()
    [04/Mai/2010 11:22:33 00880] [trace] for 511992 bytes, recommending 4266 indexes
    [04/Mai/2010 11:22:33 00880] [trace] shmcb_init_memory choices follow
    [04/Mai/2010 11:22:33 00880] [trace] division_mask = 0x1F
    [04/Mai/2010 11:22:33 00880] [trace] division_offset = 64
    [04/Mai/2010 11:22:33 00880] [trace] division_size = 15997
    [04/Mai/2010 11:22:33 00880] [trace] queue_size = 1604
    [04/Mai/2010 11:22:33 00880] [trace] index_num = 133
    [04/Mai/2010 11:22:33 00880] [trace] index_offset = 8
    [04/Mai/2010 11:22:33 00880] [trace] index_size = 12
    [04/Mai/2010 11:22:33 00880] [trace] cache_data_offset = 8
    [04/Mai/2010 11:22:33 00880] [trace] cache_data_size = 14385
    [04/Mai/2010 11:22:33 00880] [trace] leaving shmcb_init_memory()
    [04/Mai/2010 11:22:33 00880] [info] Shared memory session cache initialised
    [04/Mai/2010 11:22:33 00880] [info] Init: Initializing (virtual) servers for SSL
    [04/Mai/2010 11:22:33 00880] [info] Init: Configuring server soa1.karlsbad2.promatis.de:443 for SSL protocol
    [04/Mai/2010 11:22:33 00880] [trace] Init: (soa1.karlsbad2.promatis.de:443) Configuring permitted SSL ciphers [ALL:!ADH:!EXPORT56:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP]
    [04/Mai/2010 11:22:33 00880] [trace] Init: (soa1.karlsbad2.promatis.de:80) Configuring permitted proxy SSL ciphers [DEFAULT]
    [04/Mai/2010 11:22:33 00880] [trace] Init: (soa1.karlsbad2.promatis.de:443) Configuring permitted proxy SSL ciphers [DEFAULT]
    [04/Mai/2010 11:22:33 00880] [trace] Init: (127.0.0.1:7200) Configuring permitted proxy SSL ciphers [DEFAULT]
    [04/Mai/2010 11:22:33 00976] [info] Server: Oracle-HTTP-Server/1.3.34, Interface: mod_ossl/10.1.3.0.0, Library:
    [04/Mai/2010 11:22:33 00976] [info] Init: 1st startup round (still not detached)
    [04/Mai/2010 11:22:33 00976] [trace] Shared-memory segment has 512000 available
    [04/Mai/2010 11:22:33 00976] [trace] shmcb_malloc attempt for 512000 bytes failed
    [04/Mai/2010 11:22:33 00976] [trace] shmcb_malloc attempt for 511998 bytes failed
    [04/Mai/2010 11:22:33 00976] [trace] shmcb_malloc attempt for 511996 bytes failed
    [04/Mai/2010 11:22:33 00976] [trace] shmcb_malloc attempt for 511994 bytes failed
    [04/Mai/2010 11:22:33 00976] [trace] shmcb_init allocated 511992 bytes of shared memory
    [04/Mai/2010 11:22:33 00976] [trace] entered shmcb_init_memory()
    [04/Mai/2010 11:22:33 00976] [trace] for 511992 bytes, recommending 4266 indexes
    [04/Mai/2010 11:22:33 00976] [trace] shmcb_init_memory choices follow
    [04/Mai/2010 11:22:33 00976] [trace] division_mask = 0x1F
    [04/Mai/2010 11:22:33 00976] [trace] division_offset = 64
    [04/Mai/2010 11:22:33 00976] [trace] division_size = 15997
    [04/Mai/2010 11:22:33 00976] [trace] queue_size = 1604
    [04/Mai/2010 11:22:33 00976] [trace] index_num = 133
    [04/Mai/2010 11:22:33 00976] [trace] index_offset = 8
    [04/Mai/2010 11:22:33 00976] [trace] index_size = 12
    [04/Mai/2010 11:22:33 00976] [trace] cache_data_offset = 8
    [04/Mai/2010 11:22:33 00976] [trace] cache_data_size = 14385
    [04/Mai/2010 11:22:33 00976] [trace] leaving shmcb_init_memory()
    [04/Mai/2010 11:22:33 00976] [info] Shared memory session cache initialised
    [04/Mai/2010 11:22:33 00976] [info] Init: Initializing (virtual) servers for SSL
    [04/Mai/2010 11:22:33 00976] [info] Init: Configuring server soa1.karlsbad2.promatis.de:443 for SSL protocol
    [04/Mai/2010 11:22:33 00976] [trace] Init: (soa1.karlsbad2.promatis.de:443) Configuring permitted SSL ciphers [ALL:!ADH:!EXPORT56:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP]
    [04/Mai/2010 11:22:33 00976] [trace] Init: (soa1.karlsbad2.promatis.de:80) Configuring permitted proxy SSL ciphers [DEFAULT]
    [04/Mai/2010 11:22:33 00976] [trace] Init: (soa1.karlsbad2.promatis.de:443) Configuring permitted proxy SSL ciphers [DEFAULT]
    [04/Mai/2010 11:22:33 00976] [trace] Init: (127.0.0.1:7200) Configuring permitted proxy SSL ciphers [DEFAULT]

    Did you find a solution to this issue? We are having a similar issue trying to deploy a Paypal IPN on OAS 10.1.2.3. The IPN messages coming from Paypal appear to be attempting an SSLv2 handshake. In our case SSLv2 is disabled due to our security requirements so the connection is killed by our App Server. We have found that manually sending the IPN messages works correctly.

  • SOA BPEL 10.1.3.5.0 CPU Patches

    We are on 10.1.3.3.1 at US Marine Corps -Department of Defense
    We dont have a security patches for 10.1.3.3.1
    open issues/questions:
    Open Issues:
    1. What is Oracle's recommendation from Oracle about upgrading 10.1.3.5 vs 10.1.3.4 (CPU Patch support length). Also CPU Patch support policy for BAM 10.1.3.3.1 and B2B 10.1.2.3.
    2. Any MLRs to apply after upgrading SOA/BPEL/WSM/BAM/B2B 10.1.3.5 ?
    3. Interoperability of OWSM 10.1.3.4, BAM 10.1.3.3.1, B2B 10.1.2.3 and SOA/BPEL 10.1.3.5. Can they co-exist or must they(one or more) be in same release level?
    What is the supported method
    Please advise
    thanks
    sri

    Did you find a solution to this issue? We are having a similar issue trying to deploy a Paypal IPN on OAS 10.1.2.3. The IPN messages coming from Paypal appear to be attempting an SSLv2 handshake. In our case SSLv2 is disabled due to our security requirements so the connection is killed by our App Server. We have found that manually sending the IPN messages works correctly.

Maybe you are looking for

  • Sales Invoice Approval Workflow

    Hello Experts,    I want to trigger workflow when any billingis generated with the transaction VF01.    After research, I've found that there might be no standard workflow for approval of Sales Invoice.    However I've found the business object VBRK.

  • MN05: setting the number of printer copies for the whole range of vendors

    Hi all, by t.code MN05 I can set the number of copies of the MM documents printed the FIRST TIME. I can do it for doc.type or vendor. I can't set the number of printer copies for the whole range of vendors. Should I do it for each one of them? Thanks

  • Work Center in Project System

    Hi Experts, As per our requirement, We need to send a workflow task to the users in that particular activity's work center after activity confirmation. We have an internal Activity been created with some workcenter value for some plant. But we are no

  • Why client installation fails in untrusted forest?

    I have one untrusted forest and my ConfigMgr site is published to this untrusted forest ad successfully. When running ccmsetup.exe in untrusted forest it fails and when I look ccmsetup.log I can see that it fails to locate management point. Why is th

  • BT Site error preventing me from using the service...

    Hi, The following error has been there since the launch of BT Sports. I can't use BT Sports/ BT Smart Talk/ BT Cloud due to this error. I have called the BT techincal helpdesk several times, however, none of those guys know a dam/n thing. What do I d