Forum Discussion

RokuKevin's avatar
RokuKevin
Visitor
11 years ago

Firmware v6.1 drops SSLv3 support

Please note that our upcoming firmware v6.1 release will no longer support SSL Protocol version 3. This change is in
response to a recent security vulnerability, CVE-2014-3566 (http://web.nvd.nist.gov/view/vuln/detai ... -2014-3566).
As of this release Roku firmware will only support TLS Protocol version 1, version 1.1 and version 1.2. This change should not
have an impact on Channel applications that use HTTP over TLS (sometimes referred to as HTTPS) to securely communicate
with service endpoints.

We recommend that our Channel Partners follow the advice given in the US-CERT Alert TA14-290A
(https://www.us-cert.gov/ncas/alerts/TA14-290A) and disable the use of SSL Protocol version 3 in their services.

--Kevin
Roku Developer Program

3 Replies

  • krh5150's avatar
    krh5150
    Visitor
    11 years ago
    When will 6.1 be available for download and will it work with the Roku2?
  • Komag's avatar
    Komag
    Roku Guru
    11 years ago
    Does that affect stuff like this:?
    myaudio1 = CreateObject("roUrlTransfer")
    myaudio1.SetPort(port)
    myaudio1.SetCertificatesFile("common:/certs/ca-bundle.crt")
    myaudio1.AddHeader("X-Roku-Reserved-Dev-Id", "")
    myaudio1.InitClientCertificates()
    myaudio1.SetUrl("https://dl.dropboxusercontent.com/u.......mp3")
    myaudio1.GetToFile("tmp:/Co.....mp3")
  • TheEndless's avatar
    TheEndless
    Channel Surfer
    11 years ago
    "Komag" wrote:
    Does that affect stuff like this:?
    myaudio1 = CreateObject("roUrlTransfer")
    myaudio1.SetPort(port)
    myaudio1.SetCertificatesFile("common:/certs/ca-bundle.crt")
    myaudio1.AddHeader("X-Roku-Reserved-Dev-Id", "")
    myaudio1.InitClientCertificates()
    myaudio1.SetUrl("https://dl.dropboxusercontent.com/u.......mp3")
    myaudio1.GetToFile("tmp:/Co.....mp3")

    Only if dropboxusercontent.com doesn't support TLS, which is unlikely.