Hello all, I've been having some sslv3 issues in Ibrowse of late. Unfortunately, I don't know if this is due to the Poodle thing, or the new cable modem that got swapped out the same day this started. Anyway, I used to check my facebook account (using m.facebook.com and some spoofing), and search using duckduckgo.com, among a few other things. If this is a poodle thing, is there any kind of update planned? Otherwise, what might cause these sslv3 probs? (linky to screengrab)

_________________

@kvasir

discussed here I believe

#6

_________________
This posting, in its entirety, represents solely the perspective of the author.
*Secrecy has served us so well*

@number6

Ah, ok. Thanks for linky, was kinda what I was afraid of.. (Tried both amissl and openssl to no avail)

_________________

@kvasir

Not sure if this applies to your situation or if you've seen this bulletin... Maybe it will help... read carefully for iBrowse specific instructions...

https://sintonen.fi/advisories/amiga-ssl-vulnerabilities.txt

Also, iBrowse news http://www.ibrowse-dev.net/news.php?id=1393094281
Notice it mentions an iBrowse v2.5 future version possibility!

Also, after applying the following instructions, iBrowse v2.4 is vulnerable checking with the poodle test site below as SSLv3 will still be enabled (must use the non-java script test method on the poodle test page or enable java script). Without SSLv3 enabled no secure pages will be displayed and secure pages don't seem to load under TLSv1 either (no auto fallback?). Hmmm...

BTW, I recently turned off SSLv3 in Firefox v3.6.28 for OSX 10.5.8 (I know - old as HE!!) and am NOT vulnerable under poodle test https://www.poodletest.com/

Hope it helps....

Last edited by Amiga4000 on 20-Oct-2014 at 06:37 AM.

_________________
Fulfill newlight's Elite Narcissist Demands NOW Or He Will Send You To H3LL!