Future USPS Shipping Update - POSSIBLE PROBLEM

  • Posts: 713
  • Thank you received: 37
  • Hikashop Business
8 years 1 week ago #255443

-- HikaShop version -- : ?
-- Joomla version -- : 3.6.4
-- PHP version -- : ?
-- Browser(s) name and version -- : Chrome

I just received the following message from the USPS notification center concerning the API HikaShop uses. Could someone please look into this to see if there will be an issue?

Thank you!

Hello,

This message explains some security improvements planned for our services. Effective March 2017 (exact date to be determined), Web Tools will discontinue support of SSLv3 for securing connections to our HTTPS APIs including all shipping label and package pickup APIs. After this change, integrations leveraging SSLv3 will fail when attempting to access the APIs.

You are receiving this message because the Web Tools UserID associated with your email address has made HTTPS requests over the past year. It is possible that no changes are necessary to retain Web Tools services and benefit from the improvements. Please review the entire message carefully and share with your web developer, software vendor or IT service provider to determine if your use of the Web Tools APIs will be affected.If you have already updated your security certificates please disregard this message. If you are not sure if any changes are necessary, please ask your IT service provider.

Background: Security research published in recent years demonstrated that SSLv3 contained weaknesses that limited its ability to protect and secure communications. These weaknesses have been addressed in the replacement for SSL, Transport Layer Security (TLS). Since then, major browser software vendors have been disabling support for SSLv3 and their work is largely complete. Consistent with our priority to protect USPS Web Tools customers, Web Tools will only support versions of the more modern TLS rather than SSLv3.

Contact us at WebTools@usps.gov with any questions or concerns.

Thank you,
USPS Web Tools Program Office

Attachments:

Please Log in or Create an account to join the conversation.

  • Posts: 26158
  • Thank you received: 4028
  • MODERATOR
8 years 1 week ago #255450

Hi,

As usual, there is no relation with HikaShop or the plugin.
Like all other systems (paypal, virtualmerchant, etc, etc), they are removing the support of old SSL protocol and you need to have a PHP version which can handle the new protocols.
HikaShop plugins are using "cURL" for https calls and that's 'cURL" which will handle the SSL negotiation.

Thank you for your understanding.

Regards,


Jerome - Obsidev.com
HikaMarket & HikaSerial developer / HikaShop core dev team.

Also helping the HikaShop support team when having some time or couldn't sleep.
By the way, do not send me private message, use the "contact us" form instead.

Please Log in or Create an account to join the conversation.

  • Posts: 713
  • Thank you received: 37
  • Hikashop Business
8 years 1 week ago #255501

Awesone...thank you very much for the confirmation!

Please Log in or Create an account to join the conversation.

Time to create page: 0.058 seconds
Powered by Kunena Forum