Hi Mattw1000,
Your site does not have to be SSL-enabled, but you do need to have a more recent version of OpenSSL installed on your server. This is because PayPal’s servers are SSL-enabled, and a newer version of OpenSSL is required for your site to be able to talk to PayPal (version 1.0.1, or any newer version, should be sufficient — unless your setup is configured to use something other than OpenSSL for secure communications).
Thanks,
Matt Cole
Senior Integration Engineer, PayPal