About Isabel Honikel

Senior Technical Product Manager for PTV xServer internet and Developer Components

Zero-day “Spring4Shell”

Since this week there is a new zero-day vulnerability in the Spring framework. Please note that we are aware of this and currently analyzing how far the PTV xServer is affected.
 
 
We like to share the current state of our analysis with you.
The essential requirement for exploiting the vulnerability is a JDK9. We are still running JDK8 on all PTV xServer API versions.
Thus, the PTV xServer is not affected by CVE-2022-22965 (according to the current status).
 
Of course, there may be new findings, so we will continue to investigate this issue. We will inform you as soon as there are further findings. To stay tuned subscribe to our blog.
 
 
 

PTV xServer internet – SSL certificate update

We would like to inform you that we plan to update our SSL certificates we will start with the production updates on March 23rd, 2022.
We plan to have all production clusters updated on March 28th, 2022.

This change is needed because PTV changed the legal form to PTV Planung Transport Verkehr GmbH.

Today all test systems of  API Version 1 and API Version 2 were updated successfully with the new certificate. 

If you need further information about our Certificates please see the developer blog post PTV xServer internet – PTV xServer internet SSL certiicate renewal information 
There you can find information about the certificate hierarchy, and you can download the root and intermediate certificate.

Please test your application on the
already updated test systems and report any problem immediately to support.xServer support.de@xserver.ptvgroup.com .  




New geocoding data and geocoding improvements

In the new version of the PTV Developer Geocoding & Places API V1.3.1 you have the possibility to use the newest geocoding data available from Here. The new geocoding data is based on the Here data delivery from Q1/2022. 

With V1.3.1 and V1.3.0 we released some geocoding improvements:

  • Missing postal code map data does affect the total score less than before.
  • Added support for additional iana language tags.
  • If the results are ambiguous because only few input words are given (city, postal code), then we now return a longer list than before.

You can test PTV Developer for free by registering a MyPTV account and activating the product on the website.
By doing this you will gain 100k transaction per month for free to directly start testing.

To keep yourself updated about upcoming releases and news you can use the subscribe function on the right hand side.

If you got any question do not hesitate to get in contact.

PTV xServer internet  – SSL certificate renewal information

Where can I find the new certificate?

PTV xServer internet uses a SSL certificate issued by T-Systems Trust Center. This certificate is usually supported by the majority of clients, client library or browsers.

The certificate is deployed e.g. on the following test systems:

API Version 1:

https://xmap-eu-n-test.cloud.ptvgroup.com
https://xmap-na-n-test.cloud.ptvgroup.com

API Version 2:
https://xserver2-test.cloud.ptvgroup.com

 

It can be viewed or downloaded through any browser.In Google Chrome you need to navigate to https://xmap-eu-n-test.cloud.ptvgroup.com and to open the Security tab in the development tools (F12) (see screenshot above).

The certificate chain is as it is shown in the screen shot on the right hand side. If your client requires manual configuration to establish the trust chain, you will find the official root and intermediate certificates here:

Please refer to your client documentation for further details how to import and activate those certificates.

PTV xServer internet – PTV America City Map cluster Here with API Version 1 – deactivation of TLS 1.0 and 1.1

We would like to inform you that we plan to deactivate TLS 1.0 and 1.1 on the PTV America City Map [Here] production cluster with API Version 1 on March 22nd , 2022.

The following tasks will be completed in the scope of this maintenance:

  • Deactivation of Transport Layer Security (TLS) 1.0 and 1.1
  • Map update to PTV America City Map 2022.2H

The deactivation of TLS 1.0 and 1.1 is a major change that may have effect on your application.

More details regarding this topic can be found on our Developer Blog post about deactivation of TLS 1.0 and 1.1.

Please test your application on the already updated test system and report any problem immediately.  

PTV xServer internet – PTV Europe and World City Map cluster TomTom with API Version 1 – deactivation of TLS 1.0 and 1.1

We would like to inform you that we plan to deactivate TLS 1.0 and 1.1 on the PTV World and Europe City Map [TomTom] production cluster with API Version 1 on March 8th and 10th, 2022.

The following tasks will be completed in the scope of this maintenance:

March 8th, 2022:   PTV World City Map [TomTom] production

  • Deactivation of Transport Layer Security (TLS) 1.0 and 1.1
  • Map update to PTV World City Map 2022.1T
  • PTV xServer update to newest xServer API version 1

March 10th, 2022:  PTV Europe City Map [TomTom] production

  • Deactivation of Transport Layer Security (TLS) 1.0 and 1.1

The deactivation of TLS 1.0 and 1.1 is a major change that may have effect on your application.
More details regarding this topic can be found on our Developer Blog post about deactivation of TLS 1.0 and 1.1.

Please test your application on the already updated test system and report any problem immediately.