Question about SSL

[noesac]

I'm currently using PayPal express checkout, however I would like to use PayPal API so that I don't have to send customers to a different site.

I just want to clarify that this is all I need to do:

1) Non-PRESTASHOP: Buy an SSL certificate, set it up on my server

2) PRESTASHOP: Setup PayPalAPI module with all my details

3) PRESTASHOP: Select "Yes" to "Enable SSL"


Is it really as simple as this?

Also can someone please clarify what the difference between "PayPal Integral" and "PayPal Option+" is? The website doesn't explain the differences very well.


Thanks

[alexkid]

PayPal Express Checkout is a PayPal API and this doesn't mean that the redirect isn't needed.
If you don't want this redirection you have to go for PayPal Pro but it's only available in UK, US, CA and you can't pay with PayPal accounts (only Credit Cards). Also, I don't think there is any module developed for this product on Prestashop.

“PayPal Option+” it's when PayPal is available as a payment method at the end of the payment flow/cart.
“PayPal Integral” it's the same than “PayPal Option+” but with an additional PayPal short-cut button on the shopping-cart for PayPal account owners. It's a faster way to checkout as it doesn't require to fill the address forms.

Cheers.

[noesac]

PayPal Express Checkout is a PayPal API and this doesn't mean that the redirect isn't needed.

If you don't want this redirection you have to go for PayPal Pro but it's only available in UK, US, CA and you can't pay with PayPal accounts (only Credit Cards). Also, I don't think there is any module developed for this product on Prestashop.

So are you saying even if I buy an SSL cert and use the PayPal API module, customers will still be redirected to the PayPal site (as I am in Australia)?

Doesn't sound like it's worth spending the money then...

“PayPal Option+” it's when PayPal is available as a payment method at the end of the payment flow/cart.
“PayPal Integral” it's the same than “PayPal Option+” but with an additional PayPal short-cut button on the shopping-cart for PayPal account owners. It's a faster way to checkout as it doesn't require to fill the address forms.

Cheers.

Ah I see, so Option+ has the benefit of being faster, but I guess the downside is that you don't have a consistent user experience.

If you use Option+, does all the customer data get captured as it would normally (in the Back Office)? Or is it only partially filled and you have to do the rest manually?

[alexkid]

You don't need to have an SSL Cert if you've Curl enable on your server.

Just made a mistake on the PayPal Integral, this enable the Credit Card Payment on the PayPal landing page.

Express Checkout:it’s the same than “PayPal Option+” but with an additional PayPal short-cut button on the shopping-cart for PayPal account owners. It’s a faster way to checkout as it doesn’t require to fill the address forms.

Alex.

[noesac]

lol ok now I'm a little confused, so do I need SSL or not to have seamless PayPal integration (not having to leave the site)?

[alexkid]

You cannot pay with PayPal without leaving the site at on point (the customer has to login to accept the payment).
SSL cert is not required to use the module PayPal API and the module configuration doesn't speak about SSL certificate but SSL encryption.
Prestashop use 2 communicating method : Curl or fsockopen (if Curl is not available).
For Curl, you don't need an SSL encryption.
For Fsockopen, you'll need SSL encryption, that can be done via OpenSSL.

Please note that the module will first try Curl and if not available it will communicate by Fsockopen.

Alex.

[jhnstcks]

Moved to Security forum as concerns SSL

[noesac]

Thanks, so does Verisign fall under the "Fsockopen" category?

So i'm wondering, what is the point of using PayPal API then if I already have a Credit Card gateway (like eWay)?

Cheers

[alexkid]

Verisign is a Certificate Authority but there services aren't free, so instead you can use a certificate authority software like OpenSSl. It's needed when you use the Fsockopen method.
But if you have Curl, Fsockopen isn't used so don't need all that.

Alex.

[noesac]

Thanks Alex, I already bought a Verisign cert...too late unfortunately, I should have gone with the free OpenSSL!!

[taoreflex]

You don't need to have an SSL Cert if you've Curl enable on your server

So that would be why, in the PaypalAPI module, it says: "Without SSL, PayPalAPI module will not be able to contact PayPal."

If you're correct is there a golden rule as to how to translate Prestashop english into normal english? Such as when you see "not" in a sentence you train your eyes to see *** instead?