X-Cart forums

[Ene]

Hi,

I would like to inform you that we have received the following notice from UPS:

May 19 2009 UPS is moving from Unchained Digital Certificates to Chained Digital Certificates. Therefore, we will disable SSLv2 on all our UPS OnLine Tool servers. We have identified a few of your customers as uploading via SSLv2. We believe on May 19 2009 these customers' connection will break.

We require your assistance in informing your customers about this upcoming change.

To find out if your customer's or your system supports SSL Version 3.0 please connect to our Customer Integration Environment (CIE). The CIE has already been migrated to chained certificates. Please refer to the developer's guide for the Tool(s) you are using for the correct CIE connection URL.

Again I want to iterate that if your customers are not able to connect via SSLv3 by May 19, 2009 their connection for the UPS OnLine Tools will break!

Thank you.

X-Cart v4.x is not compatible with SSLv3 out of the box. So, if you use UPS Online Tools, you need to apply the patches attached in my next messages. The patches are for the 4.1.12 and 4.2.1 versions.

X-Cart 4.3 will support SSLv3 communication with UPS Online Tools out of the box.

If you have any questions or issues on the patch application please contact our support staff and we will be glad to answer all questions and help you to apply the necessary patches.

Instructions on how to apply patches: http://forum.x-cart.com/showthread.php?t=5324

[Ene]

For 4.1.12

[Ene]

For 4.2.1

[balinor]

And what about all the poor souls who are on versions PRIOR to 4.1.12? Will you be releasing patches for them as well?

[Ene]

Originally Posted by balinor

And what about all the poor souls who are on versions PRIOR to 4.1.12? Will you be releasing patches for them as well?

It is possible to apply these patches on any version of 4.1.x and 4.2.x branches.

The users of the earlier branches (3.4.x, 3.5.x, 4.0.x) should contact our Support Team of the patch adaptation.
(we will provide the patch for free, of course, however the patch application will cost 40 points as usual)

[cflsystems]

Do we have to wait for May 19 or we can apply the patch now?

[Ene]

Do we have to wait for May 19 or we can apply the patch now?

You can apply it now.

[ranger82nd]

The users of the earlier branches (3.4.x, 3.5.x, 4.0.x) should contact our Support Team of the patch adaptation.
(we will provide the patch for free, of course, however the patch application will cost 40 points as usual)

Why not post them here as you did for the other branches? Why do we need to contact support?

[balinor]

Agreed, please post patches for all versions here.

[carpeperdiem]

If anyone is keeping track of a changelog, for 4.1.x, the files that ill be edited are:

include/func/func.https_curl.php
include/func/func.https_httpscli.php
include/func/func.https_libcurl.php
include/func/func.https_openssl.php
include/func/func.https_ssleay.php
payment/netssleay.pl
shipping/mod_UPS.php