For all VPCart merchants that are using UPS module, if your UPS is suddenly not working on your site, or you are getting error "An error occurred in the secure channel support Using XML2" then you may want to contact your web host regarding the TLS 1.2 ciphers suite settings.
According on UPS page at:
https://www.ups.com/us/en/help-center/technology-support/data-security.page
Previously UPS allow most of chipers below for the application to:
Now that we found UPS only limited to support the following chipers:
So you will need to contact your webhost to allow ONE of the above ciphers for UPS to work.
IMPORTANT NOTE: The above is not our VPCart standard to require those ciphers to run UPS module, but it is requirements from UPS.
==================================================================================================
Below are the steps on how to set up your server to accept the required ciphers. (This must be done by server administrators or you can forward this to your web host administrator):
This field is a whitelist of ciphers your server is permitted to use for SSL/TLS handshake in order of server preference. You can keep from disabling weak ciphers in registry, specifying the ciphers you like in this field.
cipherABC,cipherXYZ,cipherXXX,cipherYYY etc..
Then you can add the cipher(s) required by UPS followed by your existing ciphers. So it should become:
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_DHE_RSA_WITH_AES_256_GCM_SHA384,TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,cipherABC,cipherXYZ,cipherXXX,cipherYYY
NOTE: Remember to replace cipherABC,cipherXYZ,cipherXXX,cipherYYY with your existing available ciphers.
Once the required ciphers are entered, click Apply >> OK.
==================================================================================================
For existing Business Ready Plan customers and VPCart hosting customers, you do not need to worry about this as we have updated all our VPCart servers to support one of the 4 chipers above.
If you are hosting with external server and having such UPS issue, please follow these:
- Ask your webhost to enable ONE of the 4 ciphers above on the server.
If your webhost is unable to do the TLS 1.2 ciphers change for you, you can consider moving to our Business Ready Plan or VPCart hosting which is already supporting the TLS 1.2 ciphers suite required by UPS.
- The problem with UPS error "An error occurred in the secure channel support Using XML2" is related to the ciphers issue above. If your webhost able to fix the chipers on your server then UPS will work ok.
If you are using VPCart 9, we recommend you to use our latest VPCart UPS module at:
https://www.vpcart.com/sales/addons900.asp
If you have done the above and UPS are still not showing you can post a helpdesk ticket to us at:
https://helpdesk.vpcart.com
Thank You.