PDA

View Full Version : Paypal Encrypted Website Payments?


sharktacos
12-5-05, 09:32 PM
I realize that this is not a paypal forum, but you folks are so snmart and helpful that I thought I'd ask

I'm reading about Encrypted Website Payments
https://www.paypal.com/us/cgi-bin/webscr?cmd=p/xcl/rec/ewp-techview
"PayPal now gives merchants the ability to maintain their own code while using standard public-key encryption. With Encrypted Website Payments, merchants can dynamically encrypt payment information using public and private keys before it is sent to PayPal".

and it says "After a merchant uploads his public certificate, PayPal will assign a unique ID to it"

I downloaded the "paypal_cert_pem.txt" and "cert_key_pem.txt" files, but being a non-tech noob I dont know where to get a public certificate from (are these them?) nor do I get how to upload this to paypal. The webpage refers me to a 116 page "guide"
https://www.paypal.com/en_US/pdf/PP_WebsitePaymentsStandard_IntegrationGuide.pdf
which makes my head spin.

Is there a simple step-by-step someone can point me to of what I need to do here?

thanks!

atwg
12-10-05, 01:33 PM
sign up for paypa pro (you have to wait a few days for prod, but I suggest signing up for developer.paypal.com first)
1. go to paypal - profile - api access - click on 2nd link and get certificate. Make note of account name/pwd
2. download cert
4. go to paypal - profile - api access - click on first link and add access for account name you just verified

sharktacos
12-10-05, 03:48 PM
sign up for paypa pro (you have to wait a few days for prod, but I suggest signing up for developer.paypal.com first)
1. go to paypal - profile - api access - click on 2nd link and get certificate. Make note of account name/pwd
2. download cert
4. go to paypal - profile - api access - click on first link and add access for account name you just verified

Thanks, I managed to get the certificates and upload them.
You dont need to have a "pro" account (which is not free) to do this btw. Works fine with the regular free account.

So far so good. Those are the 1st 2 steps:
1) Get a key pair
2) Exchange public certificates with PayPal

the next are
3) Sign the Website Payments Standard Code: The merchant will add a digital signature (hash) using his private key to his Website Payments button values.

I have no idea how to do that.

4) Encrypt the Website Payments Standard Code: Additionally, the Merchant will use PayPal's public certificate to encrypt the Website Payments Code.

Again no idea how to do that. I have seen people using multiple php scripts like this
http://paypaltech.com/Dave/api_sourcebook/html/ewp/ewpphp.html
which looks unbelievably complicated for a non-programmer. I tried to follow the steps and of course it did not work because I'm sure I did something wrong along the way, but I have no idea where and only get a blank page with no error messages.

Good grief could this possibly be more complicated? Why can't this just be automated for the "add to cart" button factory like it is for the "buy now" button factory ?