Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

New USPS shipping server address?


Guest

Recommended Posts

I got an email from USPS that said this

 

As of September 30, 2006, you will be required to communicate via https://, instead of http://, for a total of 46 USPS Web Tools APIs. This change will also require you to change the Web Tools server called from production.shippingapis.com to secure.shippingapis.com.

 

 

 

After September 30, 2006, the http:// instances of impacted APIs shall no longer be accessible.

 

I'm assuming this will effect our shipping calculator within OSCommerce, so will there be an update to the USPS shipping module we can download or is there somewhere we need to change the URL ourselves?

Link to comment
Share on other sites

From what I understand, the affected APIs are for things like order confirmation, etc, that require more than just an quote from USPS. I don't think OSC will be affected, but just ask USPS for confirmation of the types of shipping quotes that require the secure server.

 

Regardless, changing the URL for the USPS module is a matter of changing one line:

 

case 'production': $usps_server = 'production.shippingapis.com';

 

to

 

case 'production': $usps_server = 'secure.shippingapis.com';

 

in includes/modules/shipping/usps.php

Contributions

 

Discount Coupon Codes

Donations

Link to comment
Share on other sites

Complete Email Below: (Original Email was in HTML, so there might be some spots where it isn't too clear.)

 

Dear USPS Web Tools Customer,

 

 

 

Subject: Important ? Action Required! Secure Sockets Layer (SSL) Implemented for Web Tool APIs

 

 

 

As of September 30, 2006, you will be required to communicate via https://, instead of http://, for a total of 46 USPS Web Tools APIs. This change will also require you to change the Web Tools server called from production.shippingapis.com to secure.shippingapis.com.

 

 

 

After September 30, 2006, the http:// instances of impacted APIs shall no longer be accessible.

 

 

 

Please be advised the list of APIs impacted, as detailed in table below, are currently accessible under SSL and therefore you can begin calling these new instances immediately. Your User ID and the API names are the same.

 

 

 

The USPS has implemented such changes to secure your personally-identifiable information (PII) data transmitted over the Internet. Technical user guides available via: http://www.usps.com/webtools/technical.htm have been updated and denote proper URL prefixes.

 

 

 

Impacted APIs:

 

 

 

API

Name

 

CarrierPickupAvailability

Carrier Pickup Availability

 

CarrierPickupCancel

Carrier Pickup Cancel

 

CarrierPickupChange

Carrier Pickup Change

 

CarrierPickupInquiry

Carrier Pickup Inquiry

 

CarrierPickupSchedule

Carrier Pickup Schedule

 

Courtesy

Courtesy Reply Mail Label

 

CustomsCN22

International Customs Form CN 22

 

CustomsCN22Certify

International Customs Form CN 22 Certification

 

CustomsCN22V2

International Customs Form CN 22 V2

 

CustomsCN22V2Certify

International Customs Form CN 22 V2 Certification

 

CustomsCP72V2

International Customs Form CP72 V2

 

CustomsCP72V2Certify

International Customs Form CP72 V2 Certification

 

CustomsCP72V3

International Customs Form CP72 V3

 

CustomsCP72V3Certify

International Customs Form CP72 V3 Certification/Test

 

DelivConfirmCertify

Delivery Confirmation Certification

 

DelivConfirmCertifyV3

Delivery Confirmation Certification V3.0

 

DelivConfirmPICCertify

Delivery Confirmation Barcode Only Certification

 

DelivConfirmPICCertifyV3

Delivery Confirmation PIC Certification V3.0

 

DeliveryConfirmationPICV2

Delivery Confirmation Barcode Only V2.0

 

DeliveryConfirmationPICV3

Delivery Confirmation Barcode Only V3.0

 

DeliveryConfirmationV2

Delivery Confirmation V2.0

 

DeliveryConfirmationV3

Delivery Confirmation V3.0

 

EMR_DC_ProductionV2

EMR with Delivery Confirmation V2.0

 

EMR_DC_ProductionV3

EMR with Delivery Confirmation V3.0

 

ExpressMailLabel

Express Mail Label

 

ExpressMailLabelCertify

Express Mail Label Certification

 

GlobalExpressMailLabelV2

Global Express Mail V2

 

GlobalExpressMailLabelV2Certify

Global Express Mail V2 Certification

 

GlobalLabelAirmail

Global Label Airmail

 

GlobalLabelAirmailCertify

Global Label Airmail Certification

 

GlobalLabelExpress

Global Label Express

 

GlobalLabelExpressCertify

Global Label Express Certification

 

GlobalLabelPriority

Global Label Priority

 

GlobalLabelPriorityCertify

Global Label Priority Certification

 

MerchandiseReturnV2

Merchandise Return V2.0

 

MerchandiseReturnV3

Merchandise Return V3.0

 

MerchReturnCertify

EMR with Delivery Confirmation Certification

 

MerchReturnCertifyV3

EMR with Delivery Confirmation Certification V3.0

 

SignatureConfirmation

Signature Confirmation

 

SignatureConfirmationCertify

Signature Confirmation Certify

 

SignatureConfirmationCertifyV3

Signature Confirmation Certify V3.0

 

SignatureConfirmationPIC

Signature Confirmation Barcode Only

 

SignatureConfirmationPICCertify

Signature Confirmation PIC Certify

 

SignatureConfirmationPICCertifyV3

Signature Confirmation Certify Barcode Only V3.0

 

SignatureConfirmationPICV3

Signature Confirmation Barcode Only V3.0

 

SignatureConfirmationV3

Signature Confirmation V3.0

 

 

 

 

 

 

In summary, the implementation of SSL in Web Tools will require you to alter your code for aforementioned APIs to call URL:

 

 

 

- https://secure.shippingapis.com, instead of http://production.shippingapis.com

 

 

 

Please note that the XML schema will not change as a result of this effort.

 

 

 

You are strongly encouraged to alter your software to accommodate these changes as soon as possible.

 

 

 

Thank you in advance for your cooperation and understanding as these changes are implemented. If you have any additional concerns or technical inquiries, please contact the USPS Internet Customer Care Center via email at [email protected] or phone at 1-800-344-7779.

 

 

 

 

 

Thank you,

 

 

 

 

 

 

 

Patti Mason

 

Manager, USPS.com

I find the fun in everything.

Link to comment
Share on other sites

Sorry, skipped over the HTTPS part. That will be a bigger change than just changing the URL.

 

Yes, and what are those changes - please? :P

 

I received the USPS email, but I was wondering if there was a quicker fix.

 

Thanks,

 

TADD

Link to comment
Share on other sites

Can anyone confirm if this change by usps will necessitate making osc sites "ssl aware and use a SSL certificate"?

 

I was told this by a friend somewhat knowledgable in these matters. If confirmed, maybe we need to make the url change as indicated above and then get our osc sites "SSL aware". He also mentioned that SSL certificate could be provided by web provider as a generic certificate.

 

I'll have to search the forums on how this is done.

Link to comment
Share on other sites

On another thread about this subject, one of the users contacted usps and was told that the changes would only affect the listed API's. If you are using only the rate calculator, then it should be fine since it is not listed. Hope this helps.

Link to comment
Share on other sites

  • 4 weeks later...
From what I understand, the affected APIs are for things like order confirmation, etc, that require more than just an quote from USPS. I don't think OSC will be affected, but just ask USPS for confirmation of the types of shipping quotes that require the secure server.

 

Regardless, changing the URL for the USPS module is a matter of changing one line:

 

case 'production': $usps_server = 'production.shippingapis.com';

 

to

 

case 'production': $usps_server = 'secure.shippingapis.com';

 

in includes/modules/shipping/usps.php

 

 

I have also received the letter on 4/27/06.

 

I tried this quick test, chaning the server name, but it hung and returned nothing. I'm really hoping that we don't have to switch from http://production.shippingapis.com to https://secure.shippingapis.com

 

Anyone else heard any more on this?

 

Nathan

Link to comment
Share on other sites

I have also received the letter on 4/27/06.

 

I tried this quick test, chaning the server name, but it hung and returned nothing. I'm really hoping that we don't have to switch from http://production.shippingapis.com to https://secure.shippingapis.com

 

Anyone else heard any more on this?

 

Nathan

 

 

No there is more to it than that, because of the switch to https.

 

Regardless, this should not affect you unless you're using something like delivery confirmation. You can contact them to make sure. Just give them a list of what quotes you offer on your site and they can tell you yes or no.

Contributions

 

Discount Coupon Codes

Donations

Link to comment
Share on other sites

  • 4 weeks later...

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Unfortunately, your content contains terms that we do not allow. Please edit your content to remove the highlighted words below.
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...