Differences

This shows you the differences between two versions of the page.

--- admin_dashboard:system_admin:system_settings:create_sandboxpaypaladaptiveapi [2015/07/29 09:52]
mooeditor [Encrypting your certificate]
+++ admin_dashboard:system_admin:system_settings:create_sandboxpaypaladaptiveapi [2015/07/29 10:03]
mooeditor [Renewing an API certificate]
@@ Line 27: / Line 27: @@
 ^Credential Set ^Credential Names |
-|//Signature// set  |
+|  \\   \\  \\ Signature Set \\  |  \\ API Username \\  \\ API Password \\  \\ Signature \\  |
-  * API Username
+|  \\   \\  \\ Certificate Set \\  |  \\ API Username \\  \\ API Password \\  \\ Certificate \\  |
-  * API Password
-  * Signature
-|//Certificate// set  |
-  * API Username
-  * API Password
-  * Certificate
 While you can use either set to authenticate requests to the Classic API platform, for security reasons, PayPal recommends you use Certificate credentials. For more on Certificate credentials, see [[https://developer.paypal.com/docs/classic/api/apiCredentials/#certs|Managing Certificate Credentials]].
 **Note:**  You authenticate calls to the //Adaptive//  APIs (Adaptive Accounts, Adaptive Payments, the Invoicing service, and the Permissions service) using these same credentials. However, all Adaptive platform APIs require that you also supply an ''appID''  in addition to your Signature or Certificate credential values.
+\\
 ===== Creating Classic API credentials =====
@@ Line 57: / Line 53: @@
 ==== 3. Generate the Certificate set ====
-  -
+.Click **Request API Credentials** on the **API Access** page:
-Click **Request API Credentials**  on the **API Access**  page:
 {{https://www.paypalobjects.com/webstatic/en_US/developer/docs/api/classicApiCerts/requestApiCreds.png?nolink&}}
-**Note:**  If you’ve already generated a set of API credentials, you’ll have to delete your existing set before you can generate a new set of credentials.
+**Note:** If you’ve already generated a set of API credentials, you’ll have to delete your existing set before you can generate a new set of credentials.
-  -
+.Select **Request API signature** and click **Agree and Submit** to generate a set of Signature credentials.
-Select **Request API signature**  and click **Agree and Submit**  to generate a set of Signature credentials.
 Here’s an example showing a set of Signature credentials (for [[https://developer.paypal.com/docs/classic/api/apiCredentials/#certs|Certificate]] credentials, see the section below):
@@ Line 77: / Line 69: @@
 Certificate credentials are much like the Signature credentials described above, however there are differences in the way that you generate and use the credentials.
-**Note:**  If your API Certificate is expiring, skip ahead to [[https://developer.paypal.com/docs/classic/api/apiCredentials/#renew|Renewing an API Certificate]].
+**Note:** If your API Certificate is expiring, skip ahead to [[https://developer.paypal.com/docs/classic/api/apiCredentials/#renew|Renewing an API Certificate]].
 You create an API Certificate much like create Signature credentials. The steps below describe the differences:
-  -
+.On the **Request API Credentials** page, select the **Request API Certificate** radio button, then click the **Agree and Submit** button (see [[https://developer.paypal.com/docs/classic/api/apiCredentials/#step3|Step 3]] above for more details).{{https://www.paypalobjects.com/webstatic/en_US/developer/docs/api/classicApiCerts/createCert.png?nolink&}}
-On the **Request API Credentials**  page, select the **Request API Certificate**  radio button, then click the **Agree and Submit**  button (see [[https://developer.paypal.com/docs/classic/api/apiCredentials/#step3|Step 3]] above for more details).
+The **Download or Remove API Certificate** page displays.
-{{https://www.paypalobjects.com/webstatic/en_US/developer/docs/api/classicApiCerts/createCert.png?nolink&}}
+.Click **Download Certificate**.\\
+The certificate is downloaded to a file named ''cert_key_perm.txt''. Be sure to save the file to a secure location.
-The **Download or Remove API Certificate**  page displays.
+PayPal formats the API Certificate file in PEM format. The file contains both your //public certificate// and the associated //private key//. Although the PEM certificate is not human readable, the file is not [[https://developer.paypal.com/docs/classic/api/apiCredentials/#encrypt|encrypted]].
-  -
-Click **Download Certificate**. \\ The certificate is downloaded to a file named ''cert_key_perm.txt''. Be sure to save the file to a secure location.
-PayPal formats the API Certificate file in PEM format. The file contains both your //public certificate//  and the associated //private key//. Although the PEM certificate is not human readable, the file is not [[https://developer.paypal.com/docs/classic/api/apiCredentials/#encrypt|encrypted]].
 ==== Renewing an API certificate ====
@@ Line 101: / Line 88: @@
 The certificate renewal process generates a new certificate that you can install to replace any expiring certificate.
-  -
+.Log in to your PayPal account, and navigate to the **Manage API Certificate** page.\\
+To do so, select **My Account > Profile > My Selling Tools**, click the **Update (API Access)** link, then click **View API Certificate**.
-Log in to your PayPal account, and navigate to the **Manage API Certificate**  page. \\ To do so, select **My Account > Profile > My Selling Tools**, click the **Update (API Access)**  link, then click **View API Certificate**.
+.On the **Manage API Certificate** page, check the status of your API Certificate, whether it is **Active** or **About to expire**.
-  -
-On the **Manage API Certificate**  page, check the status of your API Certificate, whether it is **Active**  or **About to expire**.
 {{https://www.paypalobjects.com/webstatic/en_US/developer/docs/api/classicApiCerts/certAlert.png?nolink&}}
-  -
+.If the status of your certificate is **About to expire**, click the **Renew certificate** button.
-If the status of your certificate is **About to expire**, click the **Renew certificate**  button.
-An additional certificate is generated and given an **Active**  status. Both the new and old certificates appear in the **Manage API Certificate**  page.
+An additional certificate is generated and given an **Active** status. Both the new and old certificates appear in the **Manage API Certificate** page.
 {{https://www.paypalobjects.com/webstatic/en_US/developer/docs/api/classicApiCerts/certRenewed.png?nolink&}}
-  -
+.On the certificate marked as //Active//, click **Download certificate** and follow the steps in [[https://developer.paypal.com/docs/classic/api/apiCredentials/#certs|Managing Certificate Credentials]] for details on downloading and using the updated certificate.
-On the certificate marked as //Active//, click **Download certificate**  and follow the steps in [[https://developer.paypal.com/docs/classic/api/apiCredentials/#certs|Managing Certificate Credentials]] for details on downloading and using the updated certificate.
+After you’ve imported the new API Certificate, test your integration to ensure it works with the new certificate. Distribute your new API Certificate to all affected partners. Once the old certificate expires, remove it by clicking the **Remove certificate** button associated with the certificate.
-After you’ve imported the new API Certificate, test your integration to ensure it works with the new certificate. Distribute your new API Certificate to all affected partners. Once the old certificate expires, remove it by clicking the **Remove certificate**  button associated with the certificate.
 ==== Encrypting your certificate ====
@@ Line 133: / Line 113: @@
 The steps to encrypt your certificate require the OpenSSL encryption tool. While Unix users likely have this tool installed with their operating system, Windows users need to download OpenSSL. Accept the defaults to install OpenSSL.
-  -
+.Open a command prompt.
-Open a command prompt. \\ In Windows, select **Start > Programs > Accessories > Command Prompt**.
-  -
-Ensure OpenSSL bin directory is in your system path. If it is not, add it to your path.
-  -
+In Windows, select **Start > Programs > Accessories > Command Prompt**.
-Change directories to the location of the certificate you want to encrypt (''cert_key_pem.txt'') and execute the following command:
+.Ensure OpenSSL bin directory is in your system path. If it is not, add it to your path.
-<prettyprint prettyprinted> ''openssl pkcs12 -export -in cert_key_pem.txt -inkey cert_key_pem.txt -out paypal_cert.p12''  </prettyprint>
+.Change directories to the location of the certificate you want to encrypt (''cert_key_pem.txt'') and execute the following command:
+<code asp>
+ ''openssl pkcs12 -export -in cert_key_pem.txt -inkey cert_key_pem.txt -out paypal_cert.p12''
+</code>
-**Note:**  When encrypting a certificate, you’re prompted for a password that you use to decrypt the file. Enter a password at the **Enter Export Password**  prompt and be sure to store it in a secure location.
+**Note:** When encrypting a certificate, you’re prompted for a password that you use to decrypt the file. Enter a password at the **Enter Export Password** prompt and be sure to store it in a secure location.
 The above process creates a file named ‘paypal_cert.p12’, your encrypted API certificate.
@@ Line 153: / Line 130: @@
 === Installing the certificate for .NET or Classic ASP ===
-If you’re using either the PayPal SDK for .NET or the SDK for Classic ASP, you need to //install//  the encrypted certificate.
+If you’re using either the PayPal SDK for .NET or the SDK for Classic ASP, you need to //install// the encrypted certificate.
 If you’re developing with the PayPal SDK for .NET, Windows requires you to import the certificate into the Windows Certificate Store and grant access to your private key to the user executing your web application. Microsoft provides a utility that accomplishes these tasks in a single command. The utility, called the Windows HTTP Services Certificate Configuration Tool (or WinHttpCertCfg.exe) is freely available from Microsoft.
@@ Line 159: / Line 136: @@
 To use the utility, you need Administrator rights. Enter the following command at a command prompt, and make the appropriate replacements as described below:
-<code php> ''WinHttpCertCfg -i \<paypal_cert.p12> -p \<privateKeyPassword> -c LOCAL_MACHINE\my -a \<userName>''  </code>
+<code php>
+ ''WinHttpCertCfg -i \<paypal_cert.p12> -p \<privateKeyPassword> -c LOCAL_MACHINE\my -a \<userName>''
+</code>
   * Replace <paypal_cert.p12> with the name of PKCS12 Encrypted API Certificate you previously generated.

mooWiki - Everything mooSocial

User Tools

Site Tools

Differences

Page Tools