View Single Post
  #36  
Old 10-28-2014, 08:45 AM
 
manningbrothers manningbrothers is offline
 

Advanced Member
  
Join Date: Feb 2006
Posts: 52
 

Default Re: POODLE vulnerability in SSLv3

Quote:
Originally Posted by cherie
This is a bigger issue with X-Cart than just X-Payments though another thread was told to look here. For example, 4.3.2 and Authorize.net AIM now fails since Authorize.net turned off SSLv3 support. cflsystems' recommendation to disable SSLv3 is the generic fix but I'm surprised there hasn't been an official patch for some older versions of X-Cart, at least 4.3 and 4.4, and this thread should be moved to an appropriate area.

EDIT: The example of 4.3.2 and Authorize.net is incorrect. This setup appears to still be working fine.
I just got an email from Authorize.net stating that "on November 4, 2014, we will be disabling the use of SSLv3 within our systems. This means that if your website or shopping cart solution uses SSLv3 to send transactions to Authorize.Net, you will no longer be able to process transactions." We are using them on XC 4.3.2 and 4.4.2.. That explains why auth.net is still functioning for the moment, but what should we do before 11/4? Any help would be greatly appreciated.
__________________
X-Cart version 4.3.2, 4.4.2, Windows OS
Reply With Quote