PayPal - ssl connection error: handshake failed: unable to get local issuer certificate (6)

All of a sudden I get this error message when paypal is trying to report UM a successful payment
I use ROS6.27 on a RB2011
The problem just appeared without any setup changes
Any ideas?

Known issue.
http://forum.mikrotik.com/t/paypal-return-error-after-upgrade/80629/1

ROS 6.28rc17 and User Manager 6.28rc17 still the same error.

ROS 6.28rc18 and User Manager 6.28rc18 Works fine. Thanks MikroTik.

http://www.mikrotik.com/download/share/all_files_6latest.zip

It is strange, maybe Mikrotik is able to explain.

The same error message appeared again but the UM did everything ok. The user got his profile.

Any changes at Peypal maybe?

The changes were in PayPal dropping/shutting off SSL 3.0, MikroTik seem to have provided a part fix. I am experiencing the same Handshak error but user gets profile.

Any body else with feedback?

Does it work fine? We are still experiencing same error message but profile is assigned this time. Not completely a fix. Are you experiencing a complete fix?

I tried 6.28rc20. We have notification about successful payment and handshake is ok, user gets activated but profile NOT assigned correctly and user cannot log in. Does anybody see the same?

For way Mikrotik team never answer ???

Hi!
Can anybody send me ROS 6.28rc18 for tests? Because 6.28rc20 has some issues with profile assignment nevertheless successful payment.

Thanks!

What is taking so long to get MikroTik to fix this correctly!
I am seriously disappointed that its taken almost a month to get half a fix- The fix in 6.28rc20 doesn’t even work right!

The user manager paypal problem which now has evolved in to a profile assignment issue as well is an utter shame for this brand. I really hope that is will get fixed soon or we will not be commissioning any new networks with their products.

If any body has any updates on their intentions please let us know

what you get is exactly what you pay for…
(an old Greek saying)

I have to say that Mikrotik is very honest giving such products at such a price.
If someone wants what someone wants, then the price is out there…

I’m researching hardware to deploy a major government wireless network.
I’m close to choose certain well known products, carrier grade class.
You don’t wanna know the price…!!!

So be happy with what Mikrotik offers, or put your hand deep in your pocket
in order to have exactly what you want…

Regards
AK

PS: Of course I’m also mad about the time Mikrotik needs to respond. I’ sure
they can do better.

It looks like you are the only one who is facing this issue, well at least the only one, who opened support ticket. We have not changed anything with profiles for a very long time. This leads me to suspect that it is some sort of misconfiguration issue on your side. Is ‘starts-at’ set to now? When was the first time you saw this issue?

Hi!

I also has this problem and I’ve opened ticket #2015040366000416 a week ago but without any answers at all despite I wrote almost every day after that. I sent supout attached and I can replicate this problem every time! I tried to get things working with clean setup and tried it with one surely working backup that was downloaded from production system (it was working till 24th of March PayPal changed certificates). The problem is that after successful payment I see that user is activated and I can see profile added at “All profiles” but the “Actual profile” is blank and user have no chance to log in because “no valid profile found”. In 6.26 and 6.27 you can get in the same trouble just renaming old profiles. After renaming it behaves the same way as I wrote above. But we could re-add profiles and go on (if not tacking into account users that lost their profiles). But with 6.28rc20 I couldn’t manage to make it working at all! And yes, there is “Starts: Now”.
I can provide config and do any tests you want, if you cannot do. Just bring it back working, please!

Forgot to say that manual addition of profile works ok but assignment of the profile via paypal doesn’t work at all with 6.28rc20.

Quite the contraindication in your words, Bottom line is you sell some thing, you support it. Even if you don’t want to support it or don’t have the man power to support it that doesn’t change anything, its a legal obligation. No one said anything was wrong with MT products so I think you sprung to their defence a little quick there.

Any feedback using v6.28? Is the problem solved?

Please write to support@mikrotik.com. There are no known bugs at the moment regarding this issue.

I suppose that you want to inform us that the problem is solved. When? In which version?
But I don’t understand what do you mean by saying that “there are no known bugs”
The whole post refers to the specific bug, please read the post.

The whole thread refers to the specific bug, please read the thread.