Google Play alert about OpenSSL

Get help using Construct 2

Post » Thu Dec 18, 2014 10:28 am

We got an answer form the Intel team:

This warning from Google Play pertains to the App Security API plugin which includes the older OpenSSL library. This plugin is being updated and will be available in the next Intel XDK release after the first of the year. In the meantime, you shouldn’t need to worry about the security as the plugin does not actually use the vulnerable part of the Open SSL code. So, you should be prepared to update your app when we get the plugin updated.

Source: https://software.intel.com/en-us/forums/topic/537301
B
10
S
2
G
1
Posts: 27
Reputation: 1,159

Post » Thu Dec 18, 2014 12:30 pm

@IIDanII so what happens if Googleplay removes our apps until that time?? Do you think we should unpublish our games until then for not to loose our game @googleplay??
B
19
S
6
Posts: 179
Reputation: 2,202

Post » Thu Dec 18, 2014 12:59 pm

I don't think Google is taking any action soon, but it's just my guess.
I'm pretty new to Google Play so I'm not in the postion to give good advice about this, sorry ^_^'
B
10
S
2
G
1
Posts: 27
Reputation: 1,159

Post » Thu Dec 18, 2014 1:04 pm

@IIDanII I hope so and even if they do I hope they give one final warning like a week before so we can un publish our games until XDK is updated. The small sentence in @HellKitty7 thread just gave me some worries that's why.

Murphy 2:37 PM
Currently, there's no deadline at the moment, our policy team has just states "ASAP".

you know the ASAP word :)

anyways Good Luck to everyone.
B
19
S
6
Posts: 179
Reputation: 2,202

Post » Thu Dec 18, 2014 1:33 pm

If you update the OpenSSL this fixes the problem. The errors have gone away for me after I then re built my apps

I updated here: http://cygwin.com/install.html but you can install without cygwin: http://slproweb.com/products/Win32OpenSSL.html
Some games: https://play.google.com/store/search?q= ... s&hl=en_GB Feel free to show the panda some support, he would appreciate it :)
B
19
S
5
G
1
Posts: 155
Reputation: 1,619

Post » Thu Dec 18, 2014 1:47 pm

@BinaryPanda Thank You for the Great Tip and Help which gave me a relief.

Happy Programming :)
B
19
S
6
Posts: 179
Reputation: 2,202

Post » Thu Dec 18, 2014 2:16 pm

@BinaryPanda

Sorry if I'm being ignorant, but how can this actually help us fix the problem, if the problem is in Intel XDK? How do we use Cygwin anyway? Thanks in advance for any help.
Btw, I just got a second warning from Google (first one came a day ago) with this title:
"Google Play Second Warning: You are using a highly vulnerable version of OpenSSL"
B
5
S
2
G
1
Posts: 16
Reputation: 532

Post » Thu Dec 18, 2014 4:32 pm

I have no idea how the Intel XDK is working, but it maybe using files on your computer to assist in the build, so updating those helps. It maybe that when Intel XDK is updated this has the same effect as updating now with the links I have used.

It maybe none of the above and it might all be magic, but I suggest updating and trying to see if it works for you as it has resolved the issues for me. If this changes to being broken again in the future I will let you know.

Either way looks like it will be fixed if Intel are working on it too.

Oh and you dont need to use Cygwin I just installed that way which gave me the OpenSSL update. You can use the other link
Some games: https://play.google.com/store/search?q= ... s&hl=en_GB Feel free to show the panda some support, he would appreciate it :)
B
19
S
5
G
1
Posts: 155
Reputation: 1,619

Post » Thu Dec 18, 2014 5:54 pm

IIDanII wrote:I don't think Google is taking any action soon, but it's just my guess.
I'm pretty new to Google Play so I'm not in the postion to give good advice about this, sorry ^_^'


I'm not so sure. I've been on Google Play (GP) for quite some time now and Android forums are full of sob stories of GP 'banning' devs for far less offences (very minor copyrighted 'words' used in app descriptions for example). The problem is that once banned, its next to impossible to create a secondary account for GP as they track everything from your bank accnt payment details to the IP of the PC being used to create the apps.

Another caveat is that if your Google Voice, Google Merchant or Google+, and those account are linked to the same banned account, everything is banned. There's next to no appeal process and GP is a faceless entity that really does what it wants.

I would really appreciate knowledgeable feedback on this as my GP account earns me revenue that i would most definitely miss.
B
15
S
2
Posts: 229
Reputation: 1,353

Post » Thu Dec 18, 2014 6:32 pm

I read this , thank you a lot , so the fix is to wait till Intel will update or ?
Thank you again.
B
11
S
3
Posts: 277
Reputation: 1,395

PreviousNext

Return to How do I....?

Who is online

Users browsing this forum: htmlgames, Lancifer and 9 guests