OpenSSL Google Security Alert

Solar2D General Questions/Discussion
#21

Any news on this? No pressure, just wanted to know what the current state of play is  :slight_smile:

#22

I would also like to know that if and when this is updated that it would keep compatibility with loading old encrypted saves.

Im only interested in updating current apps. Any new ones im already using my own home made basic encryption so i never have this problem again. 

#23

Hi Rob, is there a release schedule on this yet?  Time is matching on and this has a massive impact for all of using this plugin for local encryption.

Thanks

#24

There are a bunch of dependencies on this. Engineering is actively working on this. Many times you can’t just grab a new version of a library or SDK and hit the build button and expect it to work out the box.

Rob

#25

What Im doing right now is rolling out 50+ apps with my own version of saving at the same time as the current saving. Then in a few weeks i can roll out another update removing the plugin for good.

This is a real chore and ball ache but will be glad to not have this problem again. I cant take any chances waiting any longer as the potential for losing peoples game saves gets high.

#26

Just an update on this. Yesterday’s daily build included the new LuaSocket 3.0 release. This is a prerequisite for updating the plugin. While I can’t promise any dates, we are hoping the plugin will be updated sooner than later.

Rob

#27

We’ve just published the latest version of the OpenSSL plugin.  You’ll need Daily Build 2016.2883 to use it.
 
It implements the following:

  • Support latest version of OpenSSL (1.0.2h)
  • Support latest LuaSec (0.6)
  • Support latest LuaSocket (3.0rc1)
  • Add new platforms: iOS Simulator, tvOS, tvOS Simulator

There are also improved sample apps at https://github.com/coronalabs/plugins-sample-openssl

This is a complex update due to the number of moving parts so please report any bugs you find (with Lua code to reproduce them, of course).

#28

Ok cool. … Just as I’m half way through updating my apps… Tomorrow, I’ll fly through the last 10 which I haven’t touched yet and see if I have any problems.

#29

I’m assuming I leave things as they were wth the old plugin. IE cipher, mime et. Will be just the same and build settings.?

#30

Perry can provide a more specific answer, but I’ve not heard of any breaking changes. No discussion of migration needs etc. So I’m assuming other than needing daily build 2883, it should be transparent.

You can always look at the sample app and compare it to your use.

Rob

#31

That is the intention.

There was an issue where trying to require plugin_luasec_https didn’t appear to work at all and I don’t know how people were managing to use it.  You should explicitly require it like you would expect:

local plugin\_luasec\_https = require('plugin\_luasec\_https')

and then call its methods on the returned table (previously that require was returning a boolean so none of the methods were accessible).

#32

Corona Enterprise Version -> page not found.

#33

This is also the case for me.

#34

I’ll see about getting it fixed.

#35

I can safely say that updating Corona to this latest build still read the encrypted game/data save file. I also uploaded three apps with this update and the warning on GooglePlay has gone. Bravo.

#36

Nice!  Thanks for the feedback … the update was a long road :slight_smile:

#37

Yes thanks for getting it done. Much easier than what i had done already (which i still have to finish doing on 20 apps)

I notice the ability to override the print function has come back thankfully too.

#38

Hi,

Is there a solution from Corona on this one ?

11-July is very near…

Yuval F

#39

It was fixed about 2 weeks ago, see Perry Clarke’s post above from 19th May:

We’ve just published the latest version of the OpenSSL plugin.  You’ll need Daily Build 2016.2883 to use it.

#40

cool, i uploaded one of my project to google, and the alert was gone, nice solution

but now i am facing new problem, since the facebook was migrating to facebook v4,

i must change the facebook plugin to facebook v4, because it cannot download the facebook plugin,

and when i try to use it, i am facing login problem with the new facebook v4 plugin

like shown in this forum https://forums.coronalabs.com/topic/61308-having-problems-getting-the-facebook-v4-ios-plugin-to-login-possibly-due-to-ats/

is that possible to have this new plugin with corona sdk 2015.2731 so i still can use the old facebook plugin

thank you