Guest Posted April 27, 2006 Share Posted April 27, 2006 I got an email from USPS that said this As of September 30, 2006, you will be required to communicate via https://, instead of http://, for a total of 46 USPS Web Tools APIs. This change will also require you to change the Web Tools server called from production.shippingapis.com to secure.shippingapis.com. After September 30, 2006, the http:// instances of impacted APIs shall no longer be accessible. I'm assuming this will effect our shipping calculator within OSCommerce, so will there be an update to the USPS shipping module we can download or is there somewhere we need to change the URL ourselves? Quote Link to comment Share on other sites More sharing options...
kgt Posted April 27, 2006 Share Posted April 27, 2006 From what I understand, the affected APIs are for things like order confirmation, etc, that require more than just an quote from USPS. I don't think OSC will be affected, but just ask USPS for confirmation of the types of shipping quotes that require the secure server. Regardless, changing the URL for the USPS module is a matter of changing one line: case 'production': $usps_server = 'production.shippingapis.com'; to case 'production': $usps_server = 'secure.shippingapis.com'; in includes/modules/shipping/usps.php Quote Contributions Discount Coupon Codes Donations Link to comment Share on other sites More sharing options...
kgt Posted April 27, 2006 Share Posted April 27, 2006 Sorry, skipped over the HTTPS part. That will be a bigger change than just changing the URL. Quote Contributions Discount Coupon Codes Donations Link to comment Share on other sites More sharing options...
FixItPete Posted April 28, 2006 Share Posted April 28, 2006 I got this email too... looks like some code changes are going to be needed soon... Quote I find the fun in everything. Link to comment Share on other sites More sharing options...
FixItPete Posted April 28, 2006 Share Posted April 28, 2006 Complete Email Below: (Original Email was in HTML, so there might be some spots where it isn't too clear.) Dear USPS Web Tools Customer, Subject: Important ? Action Required! Secure Sockets Layer (SSL) Implemented for Web Tool APIs As of September 30, 2006, you will be required to communicate via https://, instead of http://, for a total of 46 USPS Web Tools APIs. This change will also require you to change the Web Tools server called from production.shippingapis.com to secure.shippingapis.com. After September 30, 2006, the http:// instances of impacted APIs shall no longer be accessible. Please be advised the list of APIs impacted, as detailed in table below, are currently accessible under SSL and therefore you can begin calling these new instances immediately. Your User ID and the API names are the same. The USPS has implemented such changes to secure your personally-identifiable information (PII) data transmitted over the Internet. Technical user guides available via: http://www.usps.com/webtools/technical.htm have been updated and denote proper URL prefixes. Impacted APIs: API Name CarrierPickupAvailability Carrier Pickup Availability CarrierPickupCancel Carrier Pickup Cancel CarrierPickupChange Carrier Pickup Change CarrierPickupInquiry Carrier Pickup Inquiry CarrierPickupSchedule Carrier Pickup Schedule Courtesy Courtesy Reply Mail Label CustomsCN22 International Customs Form CN 22 CustomsCN22Certify International Customs Form CN 22 Certification CustomsCN22V2 International Customs Form CN 22 V2 CustomsCN22V2Certify International Customs Form CN 22 V2 Certification CustomsCP72V2 International Customs Form CP72 V2 CustomsCP72V2Certify International Customs Form CP72 V2 Certification CustomsCP72V3 International Customs Form CP72 V3 CustomsCP72V3Certify International Customs Form CP72 V3 Certification/Test DelivConfirmCertify Delivery Confirmation Certification DelivConfirmCertifyV3 Delivery Confirmation Certification V3.0 DelivConfirmPICCertify Delivery Confirmation Barcode Only Certification DelivConfirmPICCertifyV3 Delivery Confirmation PIC Certification V3.0 DeliveryConfirmationPICV2 Delivery Confirmation Barcode Only V2.0 DeliveryConfirmationPICV3 Delivery Confirmation Barcode Only V3.0 DeliveryConfirmationV2 Delivery Confirmation V2.0 DeliveryConfirmationV3 Delivery Confirmation V3.0 EMR_DC_ProductionV2 EMR with Delivery Confirmation V2.0 EMR_DC_ProductionV3 EMR with Delivery Confirmation V3.0 ExpressMailLabel Express Mail Label ExpressMailLabelCertify Express Mail Label Certification GlobalExpressMailLabelV2 Global Express Mail V2 GlobalExpressMailLabelV2Certify Global Express Mail V2 Certification GlobalLabelAirmail Global Label Airmail GlobalLabelAirmailCertify Global Label Airmail Certification GlobalLabelExpress Global Label Express GlobalLabelExpressCertify Global Label Express Certification GlobalLabelPriority Global Label Priority GlobalLabelPriorityCertify Global Label Priority Certification MerchandiseReturnV2 Merchandise Return V2.0 MerchandiseReturnV3 Merchandise Return V3.0 MerchReturnCertify EMR with Delivery Confirmation Certification MerchReturnCertifyV3 EMR with Delivery Confirmation Certification V3.0 SignatureConfirmation Signature Confirmation SignatureConfirmationCertify Signature Confirmation Certify SignatureConfirmationCertifyV3 Signature Confirmation Certify V3.0 SignatureConfirmationPIC Signature Confirmation Barcode Only SignatureConfirmationPICCertify Signature Confirmation PIC Certify SignatureConfirmationPICCertifyV3 Signature Confirmation Certify Barcode Only V3.0 SignatureConfirmationPICV3 Signature Confirmation Barcode Only V3.0 SignatureConfirmationV3 Signature Confirmation V3.0 In summary, the implementation of SSL in Web Tools will require you to alter your code for aforementioned APIs to call URL: - https://secure.shippingapis.com, instead of http://production.shippingapis.com Please note that the XML schema will not change as a result of this effort. You are strongly encouraged to alter your software to accommodate these changes as soon as possible. Thank you in advance for your cooperation and understanding as these changes are implemented. If you have any additional concerns or technical inquiries, please contact the USPS Internet Customer Care Center via email at [email protected] or phone at 1-800-344-7779. Thank you, Patti Mason Manager, USPS.com Quote I find the fun in everything. Link to comment Share on other sites More sharing options...
TADD Posted April 28, 2006 Share Posted April 28, 2006 Sorry, skipped over the HTTPS part. That will be a bigger change than just changing the URL. Yes, and what are those changes - please? :P I received the USPS email, but I was wondering if there was a quicker fix. Thanks, TADD Quote Link to comment Share on other sites More sharing options...
Michael Tran Posted April 29, 2006 Share Posted April 29, 2006 Can anyone confirm if this change by usps will necessitate making osc sites "ssl aware and use a SSL certificate"? I was told this by a friend somewhat knowledgable in these matters. If confirmed, maybe we need to make the url change as indicated above and then get our osc sites "SSL aware". He also mentioned that SSL certificate could be provided by web provider as a generic certificate. I'll have to search the forums on how this is done. Quote Link to comment Share on other sites More sharing options...
ripthesystem Posted April 30, 2006 Share Posted April 30, 2006 this only affects the API's in that list, right? What is the current API used by OSC? Quote Link to comment Share on other sites More sharing options...
Michael Tran Posted May 2, 2006 Share Posted May 2, 2006 On another thread about this subject, one of the users contacted usps and was told that the changes would only affect the listed API's. If you are using only the rate calculator, then it should be fine since it is not listed. Hope this helps. Quote Link to comment Share on other sites More sharing options...
Guest Posted May 5, 2006 Share Posted May 5, 2006 Thanks for all the info!! So I'll just leave it alone for now. Quote Link to comment Share on other sites More sharing options...
nfrobertson Posted June 1, 2006 Share Posted June 1, 2006 From what I understand, the affected APIs are for things like order confirmation, etc, that require more than just an quote from USPS. I don't think OSC will be affected, but just ask USPS for confirmation of the types of shipping quotes that require the secure server. Regardless, changing the URL for the USPS module is a matter of changing one line: case 'production': $usps_server = 'production.shippingapis.com'; to case 'production': $usps_server = 'secure.shippingapis.com'; in includes/modules/shipping/usps.php I have also received the letter on 4/27/06. I tried this quick test, chaning the server name, but it hung and returned nothing. I'm really hoping that we don't have to switch from http://production.shippingapis.com to https://secure.shippingapis.com Anyone else heard any more on this? Nathan Quote Link to comment Share on other sites More sharing options...
kgt Posted June 1, 2006 Share Posted June 1, 2006 I have also received the letter on 4/27/06. I tried this quick test, chaning the server name, but it hung and returned nothing. I'm really hoping that we don't have to switch from http://production.shippingapis.com to https://secure.shippingapis.com Anyone else heard any more on this? Nathan No there is more to it than that, because of the switch to https. Regardless, this should not affect you unless you're using something like delivery confirmation. You can contact them to make sure. Just give them a list of what quotes you offer on your site and they can tell you yes or no. Quote Contributions Discount Coupon Codes Donations Link to comment Share on other sites More sharing options...
Guest Posted June 27, 2006 Share Posted June 27, 2006 I got this email. I have been using: http://Production.ShippingAPIs.com/ShippingAPI.dll This worked and is still working. However, I tried: https://secure.shippingapis.com/ and https://secure.shippingapis.com/ShippingAPI.dll Neither of those returned anything at all. So, am I simply out of luck after Sept? Usagi Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.