Roku Developer Program

Developers and content creators—a complete solution for growing an audience directly.
cancel
Showing results for 
Search instead for 
Did you mean: 
RokuKevin
Level 7

Firmware v6.1 drops SSLv3 support

Please note that our upcoming firmware v6.1 release will no longer support SSL Protocol version 3. This change is in
response to a recent security vulnerability, CVE-2014-3566 (http://web.nvd.nist.gov/view/vuln/detai ... -2014-3566).
As of this release Roku firmware will only support TLS Protocol version 1, version 1.1 and version 1.2. This change should not
have an impact on Channel applications that use HTTP over TLS (sometimes referred to as HTTPS) to securely communicate
with service endpoints.

We recommend that our Channel Partners follow the advice given in the US-CERT Alert TA14-290A
(https://www.us-cert.gov/ncas/alerts/TA14-290A) and disable the use of SSL Protocol version 3 in their services.

--Kevin
0 Kudos
3 Replies
krh5150
Level 7

Re: Firmware v6.1 drops SSLv3 support

When will 6.1 be available for download and will it work with the Roku2?
0 Kudos
Komag
Level 9

Re: Firmware v6.1 drops SSLv3 support

Does that affect stuff like this:?
myaudio1 = CreateObject("roUrlTransfer")
myaudio1.SetPort(port)
myaudio1.SetCertificatesFile("common:/certs/ca-bundle.crt")
myaudio1.AddHeader("X-Roku-Reserved-Dev-Id", "")
myaudio1.InitClientCertificates()
myaudio1.SetUrl("https://dl.dropboxusercontent.com/u.......mp3")
myaudio1.GetToFile("tmp:/Co.....mp3")
0 Kudos
TheEndless
Level 7

Re: Firmware v6.1 drops SSLv3 support

"Komag" wrote:
Does that affect stuff like this:?
myaudio1 = CreateObject("roUrlTransfer")
myaudio1.SetPort(port)
myaudio1.SetCertificatesFile("common:/certs/ca-bundle.crt")
myaudio1.AddHeader("X-Roku-Reserved-Dev-Id", "")
myaudio1.InitClientCertificates()
myaudio1.SetUrl("https://dl.dropboxusercontent.com/u.......mp3")
myaudio1.GetToFile("tmp:/Co.....mp3")

Only if dropboxusercontent.com doesn't support TLS, which is unlikely.
My Channels: http://roku.permanence.com - Twitter: @TheEndlessDev
Instant Watch Browser (NetflixIWB), Aquarium Screensaver (AQUARIUM), Clever Clocks Screensaver (CLEVERCLOCKS), iTunes Podcasts (ITPC), My Channels (MYCHANNELS)
0 Kudos