Quote:
|
Originally Posted by cflsystems
XC uses SSL 3 in these files as well
func.https_X.php
where X is libcurl, curl, openssl, ssleay
It is OFF by default but other code in XC may set it to true when used. Solution will be to find the line in the file that sets the option for SSL3 and comment it out for example in
func.https_libcurl.php there is this
PHP Code:
if ($use_ssl3)
curl_setopt ($ch, CURLOPT_SSLVERSION, 3);
so just comment it out
PHP Code:
// if ($use_ssl3)
// curl_setopt ($ch, CURLOPT_SSLVERSION, 3);
This is untested so make sure you do some test orders if changing it
QT can we get clarification on this and a patch for XC if possible |
This is the correct patch.
Our team is working on the 4.6.5 release planned to this week. This version will have the necessary corrections to do not use SSLv3