The Braintree gateway is updating their SSL cert, invalidating older versions of their SDKs. We will need to update the API library included with Braintree to at least version 3.8.0 (the gateway currently uses v3.2.0). It looks like the latest version is v3.40.0 on that major branch. We are unable to update to v4.x of their php API SDK because it requires php 7 or 7.2+, which is above Blesta's minimum requirements.

Braintree plans to update our root SSL certificate provider for API traffic on April 1, 2020 in the sandbox environment and May 1, 2020 in production. Our records show that you are using a legacy SDK version that will not be compatible with this SSL update. We’re reaching out to provide the information you need to ensure you can continue processing payments without any interruption.

What’s changing?
An SSL certificate is a security technology that enables encrypted communication between a web browser and a web server. Braintree maintains this certificate to process requests securely. The SSL certificate update will go into effect on April 1 in the sandbox environment and May 1 in production. Integrations using the latest versions of our SDKs are compatible with the SSL certificate update.

What action is required?
To avoid interruption to your processing, you must update your SDK version to the appropriate minimum version before May 1:
Java 2.67.0
Python 3.24.0
Ruby 2.57.0
PHP 3.8.0
Note: Node and .NET Server SDKs should not be impacted by these upcoming changes.
Where can I find more information?
For information on how to update your SDK version, see our developer docs.