Sandbox - Connection Private Issue

[Alex_cp]

 I am using Payment Data Transfer and I am attempting to use Paypal Sandbox for testing. It stopped working correctly but I haven't made any changes so it looks like the issue is on Paypal's end.

When I click on a subscription button it takes me to Sandbox Paypal where it offers me to create a paypal account or login with Paypal.

Choosing the login option, a warning screen is showned and indicates the following information:
"Your connection is not private Attackers might be trying to steal your information from www.sandbox3.paypal.com (for example, passwords, messages, or credit cards). NET::ERR_CERT_COMMON_NAME_INVALID This server could not prove that it is www.sandbox3.paypal.com; its security certificate is from www.sandbox.paypal.com. This may be caused by a miconfiguration or an attacker intercepting your connection. Proceed to www.sandbo3.paypal.com (unsafe)" .

If I tell chrome to proceed anyway it allows me to view the generic login in the following url: https://www.sandbox3.paypal.com/signin/?returnUri=https%3a%2f%2fwww%2esandbox3%2epaypal%2ecom%2fus%2... (note that the htpps:// is red and scratched).

After logging in, it takes me to "my account" and doesn't ask me to confirm the payment.

NOTE: Before the request error, this issue was already happening.

Here is a stackoverflow question showing the problem - https://stackoverflow.com/questions/44640024/paypal-sandbox-ssl-issue-redirect-issue/44652397

[tkadm30]

Hi Justin,

Thanks for the reply. It's working just fine now.

Cheers,

tkadm30

[shanksmax]

Hi, Yes it is working now 🙂

Thank you

[shanksmax]

Thank you, it is working now 🙂

[MTS_Justin]

Thank you all for the updates !

[imranali]

Hi,

I would like to inform the domain "sandbox3.paypal.com" still showing  invalid security certificate message Can you please fix it as soon as possible. Thanks!

[MTS_Justin]

Hello,

You should not be reaching the domain "sandbox3.paypal.com" anymore. If you did reach this URL, the invalid security certificate message would be correct, as the SSL certificate was not signed for that sub-domain.
All requests should be sent / re-directed to "sandbox.paypal.com" now. If this is not the case, please provide step-by-step instructions on how to reproduce the issue.

[lorenzo-stanco]

I'm still reaching the domain with an invalid certicate.

You can try it using this URL:

https://www.sandbox.paypal.com/cgi-bin/webscr?rm=2&cmd=_xclick-subscriptions&business=mysite-busines...

I can see the payment details, I click NEXT and I see the login form. As soon as I enter my sandbox credential, Firefox throw a SSL_ERROR_BAD_CERT_DOMAIN error for this URL:

https://www.sandbox3.paypal.com/it/cgi-bin/webscr?cmd=_ul-xclick-subscriptions&SESSION=...&flowType=...

[MTS_Justin]

Hello @lorenzo-stanco

Please provide the exact steps you took to create this button so I can attempt to re-produce the issue

[lorenzo-stanco]

@MTS_Justin

The URL is created "by myself" using a PHP script, starting from:

https://www.sandbox.paypal.com/cgi-bin/webscr

And then appending this variables:

rm=2
cmd=_xclick-subscriptions
business=my-sandbox-account@...
charset=utf-8
currency_code=EUR
a3=9.9
p3=1
t3=M
src=1
item_name=Abbonamento%20esercente
return=https%3A%2F%2Fmysite...
cancel_return=https%3A%2F%2Fmysite...

[MTS_Justin]

Thanks, I can now re-produce the issue and as such, I've filed a defect with our developers to review and resolve this issue with subscriptions.

A work around is to accept the invalid certificate warning, which you'll only have to do once.

A timeframe for resolution of the issue is currently unavailable.

Thanks for taking the time to report this issue !