IPLISTNER.php ssl3.0 FIX and server fix

[jay-dogg2009]

As most of you are awaer that that announced on the 14th the The flaw in SSL 3.0.

As most have already updated there servers, paypal will not automaticly credit your players, to fix this.

Find:

public $force_ssl_v3 = true;  

 

Replace with:

 

public $force_ssl_v3 = false;  

 

If you use a server hosting compay your server would of already been updated, but if your a dedicated server owner, or a VPS customer you wil have to fix it yourself, to fix this:

.

The only thing you have to do is perform an

yum update

 

It will automatically download and update a backported version of openssl-1.0.1e-16.el6_5.7 which has been patched by RedHat with heartbeat disabled.

To verify the update simply check the changelog:

#

rpm -q --changelog openssl-1.0.1e | grep -B 1 CVE-2014-0160

you should see the following:

* Mon Apr 07 2014 Tomáš Mráz <[email protected]> 1.0.1e-16.7 - fix CVE-2014-0160 - information disclosure in TLS heartbeat extension.

Your server is now fixed.

[Tangled]

where is this found?

I've been looking for this:

public $force_ssl_v3 = true;

[jay-dogg2009]

It's Located in IPLISTNER.php file.

[Tangled]

I don't have that file or I'm just blind in one eye and can't see out the other:confused:

[Magictallguy]

Forgive the gravedig - spotted this on MCCodes.com and laughed..

iplistener.php is a file I include with my free PayPal IPN integration.. The IPN itself can be found here

Only those using that particular IPN class (or equivalent) would need to update their SSL setting