January 18th UPS Shipping Update

For general questions and discussions specific to the AbleCommerce GOLD ASP.Net shopping cart software.
Post Reply
User avatar
laramp
Lieutenant, Jr. Grade (LT JG)
Lieutenant, Jr. Grade (LT JG)
Posts: 36
Joined: Tue Jul 25, 2006 1:01 pm

January 18th UPS Shipping Update

Post by laramp » Thu Jan 18, 2018 5:53 am

Has anyone found the URL for UPS is no longer working?
https://www.ups.com/ups.app/xml/ - old address
https://onlinetools.ups.com/ups.app/xml/ - new address
Both these URLs are failing to retrieve UPS rates... Anyone face the same error today?

Thanks!

User avatar
compunerdy
Admiral (ADM)
Admiral (ADM)
Posts: 1283
Joined: Sun Nov 18, 2007 3:55 pm

Re: January 18th UPS Shipping Update

Post by compunerdy » Thu Jan 18, 2018 8:11 am

We have had at least a few people checkout with UPS live rates today and I do not see any errors.

User avatar
Katie
AbleCommerce Admin
AbleCommerce Admin
Posts: 2651
Joined: Tue Dec 02, 2003 1:54 am
Contact:

Re: January 18th UPS Shipping Update

Post by Katie » Thu Jan 18, 2018 8:19 am

Hi Larry,

There should be a notice on the Dashboard concerning the new UPS endpoints, which leads to this document:

http://help.ablecommerce.com/index.htm# ... r_2017.htm

Did you complete the second part by making sure TLS 1.2 is the protocol being used on your server?

Thanks
Katie
Thank you for choosing AbleCommerce!

http://help.ablecommerce.com - product support
http://wiki.ablecommerce.com - developer support

User avatar
laramp
Lieutenant, Jr. Grade (LT JG)
Lieutenant, Jr. Grade (LT JG)
Posts: 36
Joined: Tue Jul 25, 2006 1:01 pm

Re: January 18th UPS Shipping Update

Post by laramp » Thu Jan 18, 2018 10:34 am

Thanks....
My Server supports 1.0, 1.1 and 1.2... It seems the connection will be refused if 1.0 is supported at all.
I heard back from UPS. They said this:
100% of requests from customers who are on TLS 1.0 while using legacy URLS (http://www.ups.com/tool name) will be rejected.
100% of requests from customers who are on TLS 1.0 while using production URLS (onlinetools.ups.com/tool name) will be rejected.
100% of requests from customers who are on TLS 1.0 or 1.1 while using the development (CIE/test) URLS will be rejected

Please contact us if you need any additional assistance.

Tristan W.
UPS Technical Support

User avatar
laramp
Lieutenant, Jr. Grade (LT JG)
Lieutenant, Jr. Grade (LT JG)
Posts: 36
Joined: Tue Jul 25, 2006 1:01 pm

Re: January 18th UPS Shipping Update

Post by laramp » Thu Jan 18, 2018 12:00 pm

Update.... Adding the code as per the link provided by Katie will fix the issue even if your server still supports TLS 1.0 as long as your site isn't utilizing TLS 1.0 protocol.
http://help.ablecommerce.com/index.htm# ... r_2017.htm

User avatar
AbleMods
Master Yoda
Master Yoda
Posts: 5170
Joined: Wed Sep 26, 2007 5:47 am
Location: Fort Myers, Florida USA

Re: January 18th UPS Shipping Update

Post by AbleMods » Fri Jan 19, 2018 1:16 am

laramp wrote:Adding the code as per the link provided by Katie will fix the issue even if your server still supports TLS 1.0 as long as your site isn't utilizing TLS 1.0 protocol.
Keep in mind that this statement is technically not accurate. It's not a question of whether or not your specific server "supports" or "utilizes" TLS 1.0. Any server can (and by default does) support a variety of TLS protocols.

It's a question of what TLS version your server will actually use when it establishes outbound connections. There are separate server-side and client-side protocol lists, and they do not have to be the same. This means a server could easily support inbound TLS 1.0 server connections, but that same server could be configured to only talk TLS 1.2 when establishing outbound client connections. And since those outbound connections are always using TLS 1.2, things work great.

That's why you're able to change how the outbound connections are made (using the fix provided by Katie) without having to alter the server registry itself. The server is still supporting all of the TLS protocols, you're simply telling your app (AbleCommerce) to only use a specific TLS protocol every time it wants to make an outbound SSL connection.
Joe Payne
AbleCommerce Custom Programming and Modules http://www.AbleMods.com/
AbleCommerce Hosting http://www.AbleModsHosting.com/
Precise Fishing and Hunting Time Tables http://www.Solunar.com

User avatar
Katie
AbleCommerce Admin
AbleCommerce Admin
Posts: 2651
Joined: Tue Dec 02, 2003 1:54 am
Contact:

Re: January 18th UPS Shipping Update

Post by Katie » Fri Jan 19, 2018 5:02 am

I just updated the help site with some additional information since we are getting a lot of calls and tickets from customers still using older 7.x versions.

TLS 1.2 will work with Asp.Net 3.5 and AbleCommerce versions 7.0.3 through 7.0.7, but you will need to make sure that you have the patch from Microsoft and make a change to the AbleCommerce global.asax file.

http://help.ablecommerce.com/index.htm# ... LS_1.2.htm

Thanks
Katie
Thank you for choosing AbleCommerce!

http://help.ablecommerce.com - product support
http://wiki.ablecommerce.com - developer support

User avatar
AbleMods
Master Yoda
Master Yoda
Posts: 5170
Joined: Wed Sep 26, 2007 5:47 am
Location: Fort Myers, Florida USA

Re: January 18th UPS Shipping Update

Post by AbleMods » Fri Jan 19, 2018 5:55 am

Katie wrote: from customers still using older 7.x versions.
Maybe someday they'll hop on that theres-a-reason-you-update-software train <insert Sheldon eye roll>
Joe Payne
AbleCommerce Custom Programming and Modules http://www.AbleMods.com/
AbleCommerce Hosting http://www.AbleModsHosting.com/
Precise Fishing and Hunting Time Tables http://www.Solunar.com

eileen
Lieutenant, Jr. Grade (LT JG)
Lieutenant, Jr. Grade (LT JG)
Posts: 41
Joined: Sun Feb 11, 2007 10:59 pm
Location: Novato, CA
Contact:

Re: January 18th UPS Shipping Update

Post by eileen » Fri Jan 19, 2018 6:26 am

We are continuing to have UPS rate quote errors after updating our UPS endpoint URL and disabling TLS 1.0 and 1.1.

Ablecommerce: 7.0.92.9266, GoldR12SR1

User avatar
Katie
AbleCommerce Admin
AbleCommerce Admin
Posts: 2651
Joined: Tue Dec 02, 2003 1:54 am
Contact:

Re: January 18th UPS Shipping Update

Post by Katie » Fri Jan 19, 2018 7:08 am

Very interesting... I'm assuming you haven't made the changes to web.config yet?

I did confirm that TLS 1.2 is the ONLY one active on your server. Joe, do you have any thoughts about this? If it's the only one active on the server, then why would you still need to force it through AC?

Eileen, the change the web.config is simple and quick. Please see if that is done. If not, then make the change and it should start working.
Thank you for choosing AbleCommerce!

http://help.ablecommerce.com - product support
http://wiki.ablecommerce.com - developer support

User avatar
AbleMods
Master Yoda
Master Yoda
Posts: 5170
Joined: Wed Sep 26, 2007 5:47 am
Location: Fort Myers, Florida USA

Re: January 18th UPS Shipping Update

Post by AbleMods » Fri Jan 19, 2018 7:20 am

Katie wrote:If it's the only one active on the server, then why would you still need to force it through AC?
From your perspective, you can only see what the server is listening on. That only tells you what connections the server will accept inbound. What you cannot tell is whether the server's "client" protocols have TLS 1.0 enabled or disabled. So you can't tell what protocols the server will try to use when it makes an outbound connection to a web service like the UPS endpoint.

That can only be determined via the server console using a Windows app or manually reading the Windows registry.
Joe Payne
AbleCommerce Custom Programming and Modules http://www.AbleMods.com/
AbleCommerce Hosting http://www.AbleModsHosting.com/
Precise Fishing and Hunting Time Tables http://www.Solunar.com

Post Reply