SSL 错误/RSA 预主密码错误 [英] SSL Error / RSA premaster secret error

问题描述

有谁知道在 PayPal 沙箱中遇到的错误是什么问题?

上次它工作了好几个月，我们更换了服务器，IPN 停止工作.我们不确定是 PayPal 问题还是我们的问题.

在 Web 服务器访问日志中，没有显示 PayPal IPN POST 日志条目，我们无法弄清楚是什么问题.

<块引用>

IPN Delivery Failed:I/O error: RSA premaster secret error;嵌套异常是 javax.net.ssl.SSLKeyException: RSA premaster secret 错误

- 对于主网站(SSL 证书 A)

https://ipn.example.com/ - 对于 PayPal IPN(SSL 证书 B)

服务器名称 ipn.example.comDocumentRoot "/path/to/ipn.example"SSL引擎开启SSLCertificateFile "/path/to/ipn_example_com.crt"SSLCertificateKeyFile "/path/to/ipn_example_com.key"SSLCertificateChainFile "/path/to/CA1.pem"</虚拟主机><虚拟主机 x.x.x.x:443>服务器名称 www.example.comServerAlias example.comDocumentRoot "/path/to/www.example"SSL引擎开启SSLCertificateFile "/path/to/www_example_com.crt"SSLCertificateKeyFile "/path/to/www_example_com.key"SSLCertificateChainFile "/path/to/CA2.pem"</虚拟主机>

x.x.x.x 是一个 IP 地址(两个 IP 是一样的)

解决方案

我遇到了同样的问题，似乎 IPN 模拟器无法正确处理 https.(或者它的 RSA 密钥可能超过 1024 位有问题?)我无法使用模拟器，但是如果我使用 Paypal 企业/消费者帐户测试所有内容(在沙箱中)并伪造购买，我确实会收到 IPN 消息给我的处理程序.

anyone know what is the problem regarding the error that encountered in the PayPal sandbox?

It was working fine for months last time and we changed our server and IPN stopped working. We are not sure is PayPal issue or our issue.

In the web server access log there's no entry of the PayPal IPN POST log shown up and we can't figure out what is the problem.

IPN Delivery Failed:I/O error: RSA premaster secret error; nested exception is javax.net.ssl.SSLKeyException: RSA premaster secret error

https://developer.paypal.com/webapps/developer/applications/ipn_simulator

---

Extra info : We are using two different sub domain with two SSL certificate in a single IP.

Example :

https://www.example.com/ - For main website (SSL cert A)

https://ipn.example.com/ - For PayPal IPN (SSL cert B)

<VirtualHost x.x.x.x:443>
    ServerName ipn.example.com
    DocumentRoot "/path/to/ipn.example"

    SSLEngine on
    SSLCertificateFile "/path/to/ipn_example_com.crt"
    SSLCertificateKeyFile "/path/to/ipn_example_com.key"
    SSLCertificateChainFile "/path/to/CA1.pem"
</VirtualHost>

<VirtualHost x.x.x.x:443>
    ServerName www.example.com
    ServerAlias example.com
    DocumentRoot "/path/to/www.example"

    SSLEngine on
    SSLCertificateFile "/path/to/www_example_com.crt"
    SSLCertificateKeyFile "/path/to/www_example_com.key"
    SSLCertificateChainFile "/path/to/CA2.pem"
</VirtualHost>

x.x.x.x is an IP address (Both IP is the same)

解决方案

I have run into the same problem and it seems as if the IPN Simulator is unable to handle https properly. (or perhaps it has trouble with RSA keys over 1024 bits?) I am unable to use the simulator, but if I test everything (in the sandbox) using a Paypal business / consumer accounts and fake a purchase, I do get IPN messages sent to my handler.

这篇关于SSL 错误/RSA 预主密码错误的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！