SSL ERROR with PAYPAL and TLS 1.2

[icantsleep]

Hello everybody,

I get issues with Paypal, getting ssl errors :
"Send with CURL method failed ! Error: SSL connect error - Connect failed with fsockopen method"


- I'm on Plesk 12.5.30 centos 6.7
- My configuration looks good with TLS 1.2
- I got last update for everything

when I run the command :
curl -sv https://api-3t.sandbox.paypal.com/nvp

i get :

* About to connect() to api-3t.sandbox.paypal.com port 443 (#0)
* Trying 173.0.82.83... connected
* Connected to api-3t.sandbox.paypal.com (173.0.82.83) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* NSS error -12286
* Closing connection #0
* SSL connect error


I'm trying to figure this out for 2 days. Any one an idea?

my brain is melting... help

 

[Tommy10]

I don't have this issue on Plesk 12.5, Debian 8.4. Please check the version of `curl` and maybe `libnss3`.

curl:
curl 7.38.0 (x86_64-pc-linux-gnu) libcurl/7.38.0 OpenSSL/1.0.1k zlib/1.2.8 libidn/1.29 libssh2/1.4.3 librtmp/2.3

libnss3:
2:3.17.2-1.1+deb8u2

 

[icantsleep]

Hello Tommy, thanks for your answer.
my curl : 7.19.7 - 46.el6 / NSS : 3.21.0 - 0.3.el6_7 / openssl 1.0.1

I found this about the NSS error -12286 : https://dumbailo.wordpress.com/2016/01/22/solving-nss-error-12286/

But I'm not sure about how to update the libcurl :


rpm -Uvh http://www.city-fan.org/ftp/contrib/yum-repo/rhel6/x86_64/city-fan.org-release-1-13.rhel6.noarch.rpm
yum install libcurl

any thought?

 

[icantsleep]

Hello Tommy, thanks for your answer.
my curl : 7.19.7 - 46.el6 / NSS : 3.21.0 - 0.3.el6_7 / openssl 1.0.1

I found this about the NSS error -12286 : https://dumbailo.wordpress.com/2016/01/22/solving-nss-error-12286/

But I'm not sure about how to update the libcurl :


rpm -Uvh http://www.city-fan.org/ftp/contrib/yum-repo/rhel6/x86_64/city-fan.org-release-1-13.rhel6.noarch.rpm
yum install libcurl

any thought?

I did it and everything works fine !