Facebook API gives error today

Question

until today, my facebook api for PHP has worked fine. I have not changed anything. But from today I get the following error:

facebook failed: "error: 14094410: SSL routines: SSL3_READ_BYTES: sslv3 crash on failure /usr/bin/php/var/www/pas/www/cronjobs/cronjob.channelsActions.php

Does anyone have an idea how I can solve this error?

Answer 1

This is due to Vulnerability POODLE: SSLv3.0 (CVE-2014-3566) .

After this vulnerability was announced today, many services have completely disabled SSLv3, including Facebook, and it happens that Facebook uses SSLv3 in its PHP SDK.

, PHP PHP SDK, , base_facebook.php, :

$opts[CURLOPT_SSLVERSION] = 3;

, SSLv3 ( ):

$opts[CURLOPT_SSLVERSION] = CURL_SSLVERSION_DEFAULT;

:

$opts[CURLOPT_SSLVERSION] = CURL_SSLVERSION_TLSv1;

$opts[CURLOPT_SSLVERSION] = CURL_SSLVERSION_TLSv1_0;

, API Facebook TLSv1.0 SSLv3. makeRequest ($ url, $params, $ch = null) " 963, PHP SDK, , .

Answer 2

Facebook SSL 3.0 Facebook, API Facebook API , , 14 2014 (http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.html). .

PHP SDK (Facebook PHP SDK 3.1.1 ), SSL 3.0, . SDK, TLS - Facebook SDK 3.2.3 . SDK, SDK 4.0.0.

• PHP SDK 3.2.3: https://developers.facebook.com/docs/reference/php/3.2.3
• PHP SDK 4.0.0: https://developers.facebook.com/docs/reference/php/4.0.0
• Dev Doc: https://developers.facebook.com/docs/apps/changelog#disable-ssl-v30F

Answer 3

My server is not upgraded to PHP 5.5 or 5.6, the version that includes CURL_SSLVERSION_TLSv1_0.

The fix with older versions of PHP is to comment out a line:

$opts[CURLOPT_SSLVERSION$