After working happily for a year or so, a client’s donation engine that uses the PayPal Web Payments Pro system started throwing errors. Upon closer inspection it was giving a “Connection Failure” error and not even completing the SSL handshake. After talking with PayPal and digging around on the Internet I found the solution.
- Go to: https://www.verisign.com/support/roots.html and download roots.zip file.
- Copy and rename the “Class 3 Public Primary Certification Authority – G2.cer” file from the root certificates zip file provided by VeriSign to c:\vs-g2-import.cer to remove spaces from the filename.
- Issue the following command: C:\CFusionMX7\runtime\jre\bin\keytool.exe -import -keystore c:\cfusionmx7\runtime\jre\lib\security\cacerts -storepass changeit -noprompt -trustcacerts -file c:\vs-g2-import.cer -alias vs-g2-import-09-09-30
- Restart ColdFusion.
Works like a champ now. Thanks PayPal for the advance warning.