Showing results for 
Search instead for 
Did you mean: 

PHP REST API webhook verification not successful, PHP SDK no longer in development

Posted on

As there is currently no official SDK provided provided (which isn't out of date) I decided to integrate the REST API myself.

So far so good. I can create orders and receive webhooks if something happens on the paypal side of things.

However I ran into problems verifying the webhook server side.

There is a documentation which explains it here:

I set together the string which is mentioned there co...


And to verify this I wrote the following code using the openssl_verify() method:
I have spent at least 3-4 days debugging and researching this issue. Does anybody have an idea what I am missing here?


$payload = file_get_contents('php://input');


$cert = file_get_contents($cert_url);

$signature = base64_decode($transmission_sig);

// <transmissionId>|<timeStamp>|<webhookId>|<crc32>
$string_chain = implode('|', [

$success = openssl_verify(
    data: $string_chain,
    signature: $signature,
    public_key: $cert,
    algorithm: 'sha256WithRSAEncryption'



Haven't Found your Answer?

It happens. Hit the "Login to Ask the community" button to create a question for the PayPal community.