Google Play alert about OpenSSL

BinaryPanda ok for me the build never works at the first attempt! At first build it fails, I close the build tab and try to rebuild again and it works!! weird!

How long did it take for the warnings to dissappear in your Google Pla developer account?? Cause one of my updated game still has the yellow warning sign.

This is the email I just received from Google after contacting them today.

Thanks for contacting Google Play Developer Support about the security alert you have received with regard to using highly vulnerable version of OpenSSL.

We want you to have time to update now, but eventually, to help protect users we may need to block apps that have out of date dependent libraries or other vulnerabilities. We will provide a clear deadline before any action is taken. We recommend that you update OpenSSL as soon as possible to protect your users from the risk of compromise, and to make sure that your app is compliant with Google Play Policy on ‘dangerous products’.

This is the email I just received from Google after contacting them today.

Thanks for contacting Google Play Developer Support about the security alert you have received with regard to using highly vulnerable version of OpenSSL.

We want you to have time to update now, but eventually, to help protect users we may need to block apps that have out of date dependent libraries or other vulnerabilities. We will provide a clear deadline before any action is taken. We recommend that you update OpenSSL as soon as possible to protect your users from the risk of compromise, and to make sure that your app is compliant with Google Play Policy on ‘dangerous products’.

volcank so is the update functional?

Intel XDK folks seem to be quiet on the matter. :/

BinaryPanda ok for me the build never works at the first attempt! At first build it fails, I close the build tab and try to rebuild again and it works!! weird!

How long did it take for the warnings to dissappear in your Google Pla developer account?? Cause one of my updated game still has the yellow warning sign.

volcank took a while to update. Think the times can vary. Google says 5 hours atleast

I don't think there seems to be an update with XDK recently but I also mentioned about the threads and how worried everyone of us about this situation at Intel's Developer Forum site. I hope this can fasten up the situation. You can check the thread and the subjects discussed from the link below.

software.intel.com/en-us/forums/topic/537301

For the time being I followed BinaryPanda 's way and updated my SSL from the second link he had given. I just have to wait around 5 hours to see the results. But ofcouse the best and more safer way will be when the XDK is updated. I just wish good luck with this one to everyone and hope Googleplay do not ban our accounts. But from their reply to me it seems they will only disable the apps that has Open SSL alert. Well.....Hope so <img src="{SMILIES_PATH}/icon_e_smile.gif" alt=":)" title="Smile" />)

BinaryPanda Right after you messaged you I got an email from Googleplay mentioning the 5 hours time inside the email

Now all my Warnings in MY Google Play Account are gone and looks clear. Hope they don't come back later on for some reason. Thank You BinaryPanda

volcank Cool, yeah fingers crossed.

BinaryPanda

intel xdk is updating https://forums.html5dev-software.intel. ... b74bb71233

...not sure if this will fix it or not

I am comfirming that BinaryPanda's method removed the alert and everything is ok in my Google Developer's Console for now. Thanks Panda!!!!

thanx BinaryPanda

Hi guys

We are developing a business application and I have received a similar message from Google

Also what confuses me a bit is that everyone is saying upgrade OpenSLL but on the build server (because we have one) there is no OpenSLL installed.

So can anyone shed some light?

If you update the OpenSSL this fixes the problem. The errors have gone away for me after I then re built my apps

I updated here: http://cygwin.com/install.html but you can install without cygwin: http://slproweb.com/products/Win32OpenSSL.html

It worked here too. Thanks! <img src="{SMILIES_PATH}/icon_e_wink.gif" alt=";)" title="Wink">

Hi guys

We are developing a business application and I have received a similar message from Google

Also what confuses me a bit is that everyone is saying upgrade OpenSLL but on the build server (because we have one) there is no OpenSLL installed.

So can anyone shed some light?

This is a good point. Also, as previously stated, I built apps on two different machines and all my C2 apps were flagged for the SSL issue. So its not machine independent. i still think its an XDK issue.

Im not so sure we fully understand the problem, but THANKS for the attempts.