View Single Post
  #42  
Old 10-28-2014, 09:41 PM
  moonslice's Avatar 
moonslice moonslice is offline
 

Senior Member
  
Join Date: May 2004
Posts: 128
 

Default Re: POODLE vulnerability in SSLv3

Thanks Steve!

1) regarding post #21, my 4.4.5 is a little different - saying
Quote:
if ($use_ssl3)
$execline .= ' --sslv3';
and
Quote:
if ($use_ssl3)
curl_setopt ($ch, CURLOPT_SSLVERSION, 3);
and
Quote:
if ($use_ssl3)
$args[] = '-ssl3';
instead of what that post showed.

Will it work to comment that those out?

2) And in func.https_ssleay.php it only shows ssl3 in
Quote:
function func_https_request_ssleay($method, $url, $data="", $join="&", $cookie="", $conttype="application/x-www-form-urlencoded", $referer="", $cert="", $kcert="", $headers="", $timeout = 0, $use_ssl3 = false)
and
Quote:
$execline .= " $ui[host] $ui[port] " . ($use_ssl3 ? '1' : '0') . ' ' . func_shellquote($cert) . ' ' . func_shellquote($kcert) . ' < ' . func_shellquote($tmpfile) . ' 2>' . func_shellquote($ignorefile);

Should I also comment those out even tho they aren't "if" statements?

Thanks!
__________________
Jim - X-cart Gold 4.4.5
Reply With Quote