Intel XDK OpenSSL fixed?

Discussion and feedback on Construct 2

Post » Fri May 08, 2015 1:35 pm

Hi,
Firstly i wanna say that I read almost all what I found on the forum on the OpenSSL Intel XDK problem.
So i made a game and I recived that warning with intel xdk and after 1-2 weeks it disappears.
Since than i didn't republish my game anymore ( with the updated Intel XDK )
Today :( I recive a warning with a deadline on mail ( from Google Play)
Mail (optional):



We wanted to let you know that your app(s) listed below statically link against a version of OpenSSL that has multiple security vulnerabilities for users. Please migrate your app(s) to an updated version of OpenSSL within 60 days of this notification. Beginning 7/7/15, Google Play will block publishing of any new apps and updates that use older, unsupported versions of OpenSSL (see below for details).
REASON FOR WARNING: Violation of the dangerous products provision of the Content Policy and section 4.4 of the Developer Distribution Agreement.
The vulnerabilities were fixed in OpenSSL versions beginning with 1.0.1h, 1.0.0m, and 0.9.8za. To confirm your OpenSSL version, you can do a grep via: $ unzip -p YourApp.apk | strings | grep "OpenSSL"
For more information about the vulnerability, please see this OpenSSL Security Advisory. To confirm that you’ve upgraded correctly, upload the updated version of the app(s) to the Developer Console and check back after five hours. For other technical questions about managing OpenSSL, please use https://groups.google.com/forum/#!forum ... nssl.users or http://www.stackoverflow.com/questions.
This is the second warning you’ve received from Google Play. In 60 days, we will not accept app updates containing the vulnerabilities. In addition, we will reject new apps containing the vulnerabilities.

... and they warned me about beeing banned for 3 apps like this.
And in 60 (if i didn't solve this my game will be "banned")
So what to do?
I reexported the app again with Intel XDK and nothing changed...
Do I must add anything else in Intel XDK/ C2?
Thank You
B
11
S
3
Posts: 277
Reputation: 1,395

Post » Fri May 08, 2015 2:18 pm

got the same warning last night. perhaps it is because there are some people that never updated to my cw 10 build( i told many not to upgrade for obvious reasons). contemplating re-releasing my 7 build now,.. if i'm reading this correctly they will not pull the game, rather they will prevent any more updates/new releases?
B
3
G
1
Posts: 15
Reputation: 855

Post » Fri May 08, 2015 2:33 pm

Unfortunately, there has yet to be a resolution to this.

I tried to get this resolved by contacting Google, but they basically said 'no, we won't fix it because it's really old'. I tried to point out that this was a unique case, and that the fix was elementary, but in the end it felt like I was trying to reason with the Daleks. Eventually they locked the bug, took up their plungers, and went home.

Another avenue of appeal is to the crosswalk project itself. I suspect they may be a little more open to reason, but I haven't had time to write up a bug yet and submit it to them.

Intel is being strange about this, in that they acted like they wanted to get this resolved, made a blog post about it...and then just dropped the ball. I'm glad they are being active in the forum, and a recent alpha of the latest crosswalk build looks to be a big improvement, but part of providing a reliable method of deployment is supporting the only freakin' version of the exporter that works well on less-than-bleeding-edge devices.

tl;dr: Why the hell does it come down to users to resolve an issue like this? And what happens when a more significant bug crops up...?

/rant

P.S.
No hard feelings at Scirra, I get that Ashley is crazy overloaded, and this really isn't their responsibility in the first place.
Don't lose your work. Backup your game with Dropbox.
B
44
S
10
G
10
Posts: 1,106
Reputation: 9,202

Post » Fri May 08, 2015 3:00 pm

Recently we sent you a notification that one or more of your apps should be upgraded to more recent version of OpenSSL, due to security vulnerabilities. The notification was sent in error, and we thank you for previously making the necessary changes to your app.

We apologize for any confusion this may have caused.

Regards,
Google Play Team

©2015 Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043

Email preferences: You have received this mandatory email service announcement to update you about important changes to your Google Play Developer account.


As mentioned in the other thread about this. Google just sent out this to us about the OpenSLL and they have dropped the warnings on the CW7 OpenSLL and wont be deleting the apps made in CW7.

I have not made any changes and my games are all made in CW7. So I guess they accepted it now :P
B
54
S
23
G
13
Posts: 751
Reputation: 12,418

Post » Fri May 08, 2015 6:59 pm

@Anonnymitet
CW = Crosswalk ?
@headpain
They said they will take down my app in 60 days :( ....
@TiAm
The problem is since nov. 2014 why isn't a fix yet?
@Anonnymitet
@headpain
@TiAm
What should I do now?
Should I just wait. I dont know what CW version I made the game but I think that in 2 weeks I will republish my game...
Thanks guys.
B
11
S
3
Posts: 277
Reputation: 1,395

Post » Fri May 08, 2015 7:15 pm

@Radulepy The problem was the OpenSLL on crosswalk 7 and all other crosswalk versions had bad performance which made it impossible to switch. I also got the warnings from google but they now emailed me and said that they wont take down the apps made with cw7.

So I guess that it is solved now. But if you want to republish it with another crosswalk version you can because it seems like they finally found a solution for the bad performance on the later crosswalk versions and you should be able to export the game with good performance again even if you are using crosswalk 10+
B
54
S
23
G
13
Posts: 751
Reputation: 12,418

Post » Fri May 08, 2015 8:17 pm

@Anonnymitet
OK, when did you gat that email?
after how many days after you recived the warning dead line email?
B
11
S
3
Posts: 277
Reputation: 1,395

Post » Fri May 08, 2015 8:20 pm

I got the warning yesterday and the other mail today. But the last email ended up in my spam folder for some reason. But if you check the other thread you can see that others got the last email as well :)

viewtopic.php?f=146&t=101139&p=914764#p914764
B
54
S
23
G
13
Posts: 751
Reputation: 12,418

Post » Fri May 08, 2015 9:18 pm

@Anonnymitet
Bro, thanks you so much, I will keep you in touch.
B
11
S
3
Posts: 277
Reputation: 1,395

Post » Tue May 12, 2015 12:23 pm

I received again this information from Google, they will remove my app in July if I don't fix it.
I was trying to rebuild my application using Crosswalk 10 but it crashes a lot.
Does anyone have a good solution for this problem?
Thank you!
B
5
Posts: 13
Reputation: 251

Next

Return to Construct 2 General

Who is online

Users browsing this forum: delgado and 9 guests