Adobe AIR and OpenSSL version - Google Play

[ryanj10833657]

So I got a email from Google Play about one of my apps was using a version of OpenSSL that will be blocked as of July 11th 2016

Google wants OpenSSL version 1.0.2f/1.0.1r or higher.  Yet AIR 21 only has 1.0.2d.

When can we expect an update for AIR that will address this issue?

Thanks

[drzoom]

Sorry I don't have an answer, but I just had the same message from Google Play and would also like to know when to expect the update for AIR that includes OpenSSL 1.02f/1.01r or higher?

[Anki_AG_]

Hi All,

We have verified and AIR 21.0 is using openSSL version 1.02f. AIR 20.0 is using openSSL 1.02d. This might be an issue from Google developer console. Could you please use this command "unzip -p YourApp.apk | strings | grep "OpenSSL" to check the openSSL version in your app.

Thanks,

Adobe Air Team

[Guest]

I tried to find that information in those places:

http://fpdownload.macromedia.com/pub/labs/flashruntimes/shared/air21_flashplayer21_releasenotes.pdf

https://helpx.adobe.com/security/products/flash-player/apsb16-08.html

https://helpx.adobe.com/flash-player/release-note/fp_21_air_21_release_notes.html

And also tried to follow links from http://labs.adobe.com/downloads/air.html

and downloaded the latest one and tried to find this information inside the downloaded SDK with no success.

The only information I get so far, is the one from this forum.

I'm not confident to go to someone telling "we don't need to worry version 21 will contain the correct version"

when the only source for this information is this forum and people are not sure whether this works.

I have a suggestion that would ease this reoccurring problem a lot:

Make that information easily accessible for every upcoming release by adding it to the SDK somewhere!

Or at least mention it in the release notes.

[ryanj10833657]

So downloaded from http://airdownload.adobe.com/air/win/download/latest/AIRSDK_Compiler.zip

^

AIR

21.0.0.176

Ran the command from above.

says 1.0.2d

Did the AIR 21 beta

Same result

[Colin Holgate]

This is the command I saw in another thread:

unzip -p YourApp.apk | strings | grep "OpenSSL"

and I tried it on an APK I made five days ago. It says this:

OpenSSL 1.0.2f  28 Jan 2016

[Anki_AG_]

Hi,

AIR SDK 21.0.0176 is using OPenSSL version 1.0.2f. Could you please let us know in which scenario you are getting 1.02d for the same SDK?

Thanks,

Ankit

Adobe Air Team

[Guest]

So if the information is available via the SDK, why is it so complicated to extract it?

Do I really need to build an APK and execute those commands to know what I get?

Are there multiple versions contained in one SDK?

To update the SDK for our app we need to merge it with Flex SDK, patch resource files and build and test the app, so it takes several hours to get this information if we use our std build chain.

Of course we could create a small test app for that purpose and build that one with the downloaded SDK...

Could somebody explain why it is so difficult about putting the information about the contained libraries in a text file or script inside the SDK?

Sincerely Mc Flex

[Lars Laborious]

Seem to work fine with the latest AIR version here. I have 9 apps on Google Play, that was all marked with a warning. Yesterday I updated one of them with AIR 21.0.0176, and nothing changed at once, but today the warning is removed for that specific app only.

[Roostergames]

who tried with AIR SDK 21.0.0176 and how the result ? Cleared errors ?

[Lars Laborious]

I did. And yes, it cleared the errors.

[drzoom]

Yes, AIR SDK 21.0.0176 cleared the error for me too.

But I agree with Mc Flex, this information should really be somewhere easily accessible. I ended up posting to this forum because I couldn't find any official confirmation anywhere.