您的应用静态链接到的 OpenSSL 版本有多个安全漏洞。建议您尽快更新 OpenSSL

安全提醒

您的应用静态链接到的 OpenSSL 版本有多个安全漏洞。建议您尽快更新 OpenSSL。

在开头为 1.0.1h、1.0.0m和 0.9.8za的 OpenSSL 版本中这些漏洞已得到修复。要确认您的 OpenSSL版本，您可以执行grep命令 ("$ unzip -p YourApp.apk | strings | grep "OpenSSL"")。如需了解有关漏洞的详情，请参阅http://www.openssl.org/news/secadv_20140605.txt。

要确认您是否已正确升级，请将更新后的版本上传至开发者控制台，并在 5 小时后再回来查看。

请注意，尽管目前尚不清楚这些问题是否会影响您的应用，但是，如果应用包含会让用户遭受入侵风险的安全漏洞，那么，我们可能会将其视为“危险产品”，并将其从 Google Play上移除。

刚刚开始真是无从下手。对底层编辑不是很了解熟悉的菜鸟智能百度了。一直专注于游戏引擎实现功能逻辑的同时我们忘记了一些东西。

如果由此现象希望多多补充些知识。

Openssl 安全漏洞升级库 Cocos2dx Curl 1.0.1h版本

下载资源后 替换工程文件对应下面的 cocos2dx/platform/third_party/android/prebuilt/libcurl/libs 所以.a文件。 

然后进行编辑即可。

使用命令查看

$ unzip -p YourApp.apk | strings | grep "OpenSSL""

首先更新前

Last login: Fri May   :: on ttys000
localhost:~ lwuit$ cd /Users/lwuit/projects/client/cocos2d-x-2.2./projects/libsdk/
localhost:libsdk lwuit$ unzip -p com.aossssro.tww..apk |strings|grep "OpenSSL"
OpenSSLDie
DH_OpenSSL
DSA_OpenSSL
ECDH_OpenSSL
ECDSA_OpenSSL
OpenSSL_add_all_ciphers
OpenSSL_add_all_digests
UI_OpenSSL
OpenSSL/%lx.%lx.%lx%s
could not parse PKCS12 file, check password, OpenSSL error %s
%s(%d): OpenSSL internal error, assertion failed: %s
OpenSSL 1.0.0a  Jun
OpenSSL default
OpenSSL PKCS# DH method
OpenSSL DH Method
OpenSSL DSA method
OpenSSL 'dlfcn' shared library method
OpenSSL EC algorithm
OpenSSL ECDH method
OpenSSL ECDSA method
OpenSSL HMAC method
You need to read the OpenSSL FAQ, http://www.openssl.org/support/faq.html
OpenSSL RSA method
OpenSSL default user interface
AES part of OpenSSL 1.0.0a  Jun
ASN. part of OpenSSL 1.0.0a  Jun
Blowfish part of OpenSSL 1.0.0a  Jun
Big Number part of OpenSSL 1.0.0a  Jun
CONF_def part of OpenSSL 1.0.0a  Jun
CONF part of OpenSSL 1.0.0a  Jun
libdes part of OpenSSL 1.0.0a  Jun
DES part of OpenSSL 1.0.0a  Jun
Diffie-Hellman part of OpenSSL 1.0.0a  Jun
DSA part of OpenSSL 1.0.0a  Jun
^ECDH part of OpenSSL 1.0.0a  Jun
ECDSA part of OpenSSL 1.0.0a  Jun
EVP part of OpenSSL 1.0.0a  Jun
lhash part of OpenSSL 1.0.0a  Jun
MD4 part of OpenSSL 1.0.0a  Jun
MD5 part of OpenSSL 1.0.0a  Jun
PEM part of OpenSSL 1.0.0a  Jun
RAND part of OpenSSL 1.0.0a  Jun
RC2 part of OpenSSL 1.0.0a  Jun
RC4 part of OpenSSL 1.0.0a  Jun
RIPE-MD160 part of OpenSSL 1.0.0a  Jun
RSA part of OpenSSL 1.0.0a  Jun
SHA1 part of OpenSSL 1.0.0a  Jun
SHA- part of OpenSSL 1.0.0a  Jun
SHA- part of OpenSSL 1.0.0a  Jun
Stack part of OpenSSL 1.0.0a  Jun
TXT_DB part of OpenSSL 1.0.0a  Jun
X. part of OpenSSL 1.0.0a  Jun
SSLv2 part of OpenSSL 1.0.0a  Jun
SSLv3 part of OpenSSL 1.0.0a  Jun
TLSv1 part of OpenSSL 1.0.0a  Jun
localhost:libsdk lwuit$ 

更新后

OpenSSLDie
DH_OpenSSL
DSA_OpenSSL
ECDH_OpenSSL
ECDSA_OpenSSL
OpenSSL_add_all_ciphers
OpenSSL_add_all_digests
UI_OpenSSL
could not parse PKCS12 file, check password, OpenSSL error %s
OpenSSL/%lx.%lx.%lx%s
OpenSSL CMAC method
OpenSSL default
%s(%d): OpenSSL internal error, assertion failed: %s
OpenSSL 1.0.1h  Jun
OpenSSL PKCS# DH method
OpenSSL DH Method
OpenSSL DSA method
OpenSSL 'dlfcn' shared library method
OpenSSL EC algorithm
OpenSSL ECDH method
OpenSSL ECDSA method
OpenSSL HMAC method
You need to read the OpenSSL FAQ, http://www.openssl.org/support/faq.html
OpenSSL RSA method
OpenSSL default user interface
AES part of OpenSSL 1.0.1h  Jun
ASN. part of OpenSSL 1.0.1h  Jun
Blowfish part of OpenSSL 1.0.1h  Jun
Big Number part of OpenSSL 1.0.1h  Jun
CONF_def part of OpenSSL 1.0.1h  Jun
CONF part of OpenSSL 1.0.1h  Jun
DES part of OpenSSL 1.0.1h  Jun
libdes part of OpenSSL 1.0.1h  Jun
Diffie-Hellman part of OpenSSL 1.0.1h  Jun
DSA part of OpenSSL 1.0.1h  Jun
^ECDH part of OpenSSL 1.0.1h  Jun
ECDSA part of OpenSSL 1.0.1h  Jun
EVP part of OpenSSL 1.0.1h  Jun
lhash part of OpenSSL 1.0.1h  Jun
MD4 part of OpenSSL 1.0.1h  Jun
MD5 part of OpenSSL 1.0.1h  Jun
PEM part of OpenSSL 1.0.1h  Jun
RAND part of OpenSSL 1.0.1h  Jun
RC2 part of OpenSSL 1.0.1h  Jun
RC4 part of OpenSSL 1.0.1h  Jun
RIPE-MD160 part of OpenSSL 1.0.1h  Jun
RSA part of OpenSSL 1.0.1h  Jun
SHA1 part of OpenSSL 1.0.1h  Jun
SHA- part of OpenSSL 1.0.1h  Jun
SHA- part of OpenSSL 1.0.1h  Jun
Stack part of OpenSSL 1.0.1h  Jun
TXT_DB part of OpenSSL 1.0.1h  Jun
X. part of OpenSSL 1.0.1h  Jun
DTLSv1 part of OpenSSL 1.0.1h  Jun
SSLv2 part of OpenSSL 1.0.1h  Jun
(((((sSSLv3 part of OpenSSL 1.0.1h  Jun
TLSv1 part of OpenSSL 1.0.1h  Jun
localhost:libsdk lwuit$