Your Digital Media Has Never Looked So Good

 
User avatar
RokuKevin
Roku Engineering
Topic Author
Posts: 796
Joined: Tue Sep 22, 2009 2:29 pm

Firmware v6.1 drops SSLv3 support

Wed Nov 05, 2014 12:02 pm

Please note that our upcoming firmware v6.1 release will no longer support SSL Protocol version 3. This change is in
response to a recent security vulnerability, CVE-2014-3566 (http://web.nvd.nist.gov/view/vuln/detai ... -2014-3566).
As of this release Roku firmware will only support TLS Protocol version 1, version 1.1 and version 1.2. This change should not
have an impact on Channel applications that use HTTP over TLS (sometimes referred to as HTTPS) to securely communicate
with service endpoints.

We recommend that our Channel Partners follow the advice given in the US-CERT Alert TA14-290A
(https://www.us-cert.gov/ncas/alerts/TA14-290A) and disable the use of SSL Protocol version 3 in their services.

--Kevin
 
krh5150
Posts: 48
Joined: Thu Mar 07, 2013 9:36 am

Re: Firmware v6.1 drops SSLv3 support

Wed Nov 05, 2014 7:24 pm

When will 6.1 be available for download and will it work with the Roku2?
 
User avatar
Komag
Posts: 808
Joined: Fri Aug 22, 2014 3:42 am

Re: Firmware v6.1 drops SSLv3 support

Thu Nov 06, 2014 11:23 am

Does that affect stuff like this:?
myaudio1 = CreateObject("roUrlTransfer")
myaudio1.SetPort(port)
myaudio1.SetCertificatesFile("common:/certs/ca-bundle.crt")
myaudio1.AddHeader("X-Roku-Reserved-Dev-Id", "")
myaudio1.InitClientCertificates()
myaudio1.SetUrl("https://dl.dropboxusercontent.com/u.......mp3")
myaudio1.GetToFile("tmp:/Co.....mp3")
 
User avatar
TheEndless
** Valued Community Member **
Posts: 9231
Joined: Mon Oct 04, 2004 10:15 am
Location: US
Contact:

Re: Firmware v6.1 drops SSLv3 support

Thu Nov 06, 2014 9:52 pm

Komag wrote:
Does that affect stuff like this:?
myaudio1 = CreateObject("roUrlTransfer")
myaudio1.SetPort(port)
myaudio1.SetCertificatesFile("common:/certs/ca-bundle.crt")
myaudio1.AddHeader("X-Roku-Reserved-Dev-Id", "")
myaudio1.InitClientCertificates()
myaudio1.SetUrl("https://dl.dropboxusercontent.com/u.......mp3")
myaudio1.GetToFile("tmp:/Co.....mp3")

Only if dropboxusercontent.com doesn't support TLS, which is unlikely.
My Channels: http://roku.permanence.com - Twitter: @TheEndlessDev
Instant Watch Browser (NetflixIWB), Aquarium Screensaver (AQUARIUM), Clever Clocks Screensaver (CLEVERCLOCKS), iTunes Podcasts (ITPC), My Channels (MYCHANNELS)

Who is online

Users browsing this forum: No registered users and 7 guests