Facebook SDK for PHP error - CurlException: 35: error: 14094410: SSL routines: SSL3_READ_BYTES: sslv3 call confirmation rejection

Question

My application using the Facebook SDK for PHP v2.0 has stopped working in the past 20-24 hours. I keep getting the following error: base_facebook.php -

CurlException: 35: error: 14094410: SSL procedures: SSL3_READ_BYTES: sslv3 notification failure failed

From reading other threads in stackoverflow, I added the following lines of code to base_facebook.php, but none of them help.

$opts[CURLOPT_SSL_VERIFYPEER] = false; $opts[CURLOPT_SSL_VERIFYHOST] = false; $opts[CURLOPT_SSLVERSION] = 3; curl_setopt($ch, CURLOPT_SSL_CIPHER_LIST, 'SSLv3'); 

Any suggestions for fixing the problem would be greatly appreciated. Thanks.

Answer 1

This is because there is an SSLv3 vulnerability here: https://access.redhat.com/articles/1232123 Facebook has disabled SSLv3, so you can no longer use it.

If you have php 5.5 or 5.6, try changing

 $opts[CURLOPT_SSLVERSION] = 3; 

to

 $opts[CURLOPT_SSLVERSION] = CURL_SSLVERSION_TLSv1; 

If you can use it without a constant error, this is normal. If you have php version lower than 5.5, just comment on these 2 lines, and after that will be fine.

 $opts[CURLOPT_SSLVERSION] = 3; curl_setopt($ch, CURLOPT_SSL_CIPHER_LIST, 'SSLv3');