search

westoforange / TOA-Website

0 stars 0 forks source link

TOA Web Site SO# tracking does not find UPS shipments #189

Open rescobar2 opened 6 years ago

rescobar2 commented 6 years ago

TOA Web Site SO# tracking does not find UPS shipments

rescobar2 commented 6 years ago

Hi Rick,

After spending a while troubleshooting the UPS tracker, I found a few issues that we may need to address.

Access Denied

  1. Go to http://toaelectronics.com/testpagesam#track
  2. Enter 68721 for the TOA Order Number
  3. Enter 98008 for the destination zip code
  4. Notice the error output at the top:

RESULT: 1HTTP/1.1 403 Forbidden Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 289 Expires: Thu, 22 Feb 2018 19:51:42 GMT Date: Thu, 22 Feb 2018 19:51:42 GMT Connection: close Access Denied You don't have permission to access "http://www.ups.com/ups.app/xml/Track" on this server.

Is the server blocking external URLs?

Invalid License Number

To test my theory that external urls are being blocked, I uploaded the code to my server and ran it. The output was as follows:

HTTP/1.1 200 OK Server: Apache Strict-Transport-Security: max-age=15768000; includeSubDomains Pragma: no-cache Content-Length: 398 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Type: application/xml Debug-AK-TLS: No bypass Date: Thu, 22 Feb 2018 19:45:15 GMT Connection: keep-alive 1.00FailureHard250003 Invalid Access License number An error occurred

It looks like the request went through, but there is an error regarding the license number. We’re using this license number for UPS: 8D082FE81352E8C5. Do you know if this number has changed?

Happy to talk this through over the phone. Call me when you can.

Thanks, Erin

rescobar2 commented 6 years ago

Hi Erin,

The license key is valid, I was able to use Developer Kit login to find it. I talked to UPS API support and I was told the TLS was changed to 1.1 or 1.2

Also it’s possible we are not using the correct URL’s that are in the current developer kit. Let me know what you may need.

Rick

rescobar2 commented 6 years ago

From: Erin Commarato erin@westoforange.com Sent: Monday, March 12, 2018 10:28 AM To: Hiromi Shimizu hiromi@devicenet-usa.com Cc: Rick Escobar ricke@toaelectronics.com Subject: Server TLS version

Hi Hiromi,

We noticed calls to an external API failed possibly because the TLS version on the server is out of date. Can you tell us which TLS version is being used on toaelectronics.com?

Best regards, Erin

rescobar2 commented 6 years ago

Hi Erin,

SSL certificate is not installed on your web server from the beginning If you’d like to use a SSL/TLS certificate on toaelectronics.com, you need to purchase the SSL certificate first and then install it on your server using a Plesk panel.

Please let me know if you have any questions.

Thank you for your time.

Hiromi

rescobar2 commented 6 years ago

Hi Rick,

I wanted to ask your thoughts about the SSL cert. I believe this is the right move for many reasons. However, I don’t believe this is the cause of the UPS form working inconsistently on the site since my test on another server was done without SSL. At this point, I’m sure it’s a server setting that is causing the behavior but I’m not sure what setting that would be.

Your thoughts?

Erin

rescobar2 commented 6 years ago

Erin,

Here are some sales orders to try Orders: 94596 94587 94389

rescobar2 commented 6 years ago

Per Erin the package form is actually sending more information than the tracking code api requires. I believe ups stops the request because it sees this additional unknown information