The reason people on stackoverflow are downvoting is because the question is really not one that an average, technically-informed user could answer. Rather, this touches on questions which only project members could answer, since we maintain and develop URL Fetch and its certificate files, signing algorithms. App Engine issue reports should go to the google app engine public issue tracker, issues or errors with your own code/project should go to stackoverflow, and threads like this one belong here.
Given that there's already a public issue tracker issue opened for better documenting the HTTPS behaviour/settings of Url Fetch, I'll have to update this thread within the next week, after seeing if I can glean any more useful information. One easy way to determine whether things are working for you is to attempt to make API calls and observe if any errors occur, when targeting the API in the "sandbox environment", since the document you linked says the changes would be implemented in February 2015 in this "sandbox environment" (sorry I'm not more familiar with paypal's infrastructure or terminology). So, I hope to update this thread within the next week with any information I can gather. Sincerely, Nick On Thursday, June 4, 2015 at 4:08:34 PM UTC-4, Iron Mountain Foundry wrote: > > > PayPal is upgrading their SSL certificates this year, according to their > [Merchant Security System Upgrade Guide][1]. It the guide, it says to: > > - Discontinue use of the Verisign G2 Root Certificate and use the G5 Root > Certificate, and > - Update to the SHA-256 signing algorithm > > My merchant site uses the Google Appengine and the `urlfetch()` call to > PayPal. Has AppEngine already made these upgrades? > > P.S. I posted this same question on StackOverflow but was downvoted. I > thought SO was the preferred place for AppEngine questions? > > > [1]: > https://ppmts.custhelp.com/ci/fattach/get/487025/1429638687/redirect/1/filename/2015%20Merchant%20Security%20System%20Upgrade%20Guide%20(U.S.%20English).pdf > -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/google-appengine. To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/83642c73-9038-40da-8a0a-acca3af96385%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
