Google Play: "vulnerable version of OpenSSL"

Hi, Google Play just sent me a warning that my Android apps compiled in AIR 4.0 are "running an outdated version of OpenSSL, which has multiple security vulnerabilities."
I don't recall using OpenSSL for anything other than my Apple certificates. Is this something AIR itself would be responsible for, or possibly a native extension? I'm using several ad-based ones such as AdMob and Vungle, as well as in-app purchases.
Doesn't make any sense to me, so I don't know how to react to it. But apparently my apps "may be considered dangerous products and subject to removal from Google Play."

Its not really an error being thrown. It's Google reaching out to devs. I got an email to from Google
Hello,
One or more of your apps is running an outdated version of OpenSSL, which has multiple security vulnerabilities. You should update OpenSSL as soon as possible. For more information about the most recent security vulnerability in OpenSSL, please see http://www.openssl.org/news/secadv_20140605.txt.
Please note, while it's unclear whether these specific issues affect your application, applications with vulnerabilities that expose users to risk of compromise may be considered “dangerous products” and subject to removal from Google Play.
Regards,
Google Play Team
All I can do is just update to Air 14 and wait and see if they tell me the issue still exist. My app has 3 ane from milkmangames. I know they just updated there ANEs too,so I got to update the ANEs in my app first then with 14, hopefully that will do it.

Similar Messages

How to obtain an acceptable APK file for Google Play ?

There is the steps of my trying in my Google Play console :
1) With OpenSSL I've made a PEM file :
openssl pkcs12 -in certificatCreeSurFBuilder.p12 -out certificatCreeSurFBuilder.pem -nodes
With Notepad I've update the content of the PEM file : I've add the key provided between the markups of the "RSA Public Key", the public key from Google which I've divided the text to 64 caracters per row (for 64-base encoded).
So with OpenSSL I've made a PKCS12 file :
openssl pkcs12 -export -in certificatCreeSurFBuilder.pem -inkey certificatCreeSurFBuilder.pem -out certificatPourGooglePlay.p12
2) Finally I've uploaded the PKCS12 file using my console at https://play.google.com/apps/publish, but I've got this error message wich doesn't light me : "Import error. Try to import an other file" !
Moreover, I'd like to know if I would have a best result if I'd buy a certificate provided by a reputed organism, e.g. Verisign or Thatwe ?
NB : I have indicated my personnal datas in "bag attributes" labels named CN and C (CN=myName and C=myCountry), at the first step of primary certificate creation, in the FlashBuilder wizard tool. So is it usefull or is it bad in this case to indicate these datas ?
Thanks for help.

I write about my new tests, I've found this good Google documentation URL : http://developer.android.com/tools/publishing/app-signing.html ;-).
I don't know if this method is more valid or even with my first method, but I downloaded the tools and I followed the method to create a keystore, with no success :
I've created a keystore/ pair of keys, it's Ok :
keytool -genkey -v -keystore certificatAutoSigne-2013.keystore -alias certificatAutoSigne-2013 -keyalg RSA -keysize 2048 -validity 10000
But I don't understand where can I add the Google public key to sign my APK file, because the keystore isn't a text file !
Secondly I've error message with this command line :
jarsigner -verbose -sigalg SHA1withRSA -digestalg SHA1 -keystore certificatAutoSigne-2013.keystore MyAPKFile
Obviously an APK file already signed can't be re-signed. I don't know how to creat APK file no signed with ADT, do you know ?

Error: "This version of the application is not configured for billing through Google Play."

We are preparing update of app for Google Play and during testing of new version (just downloaded as APK from ftp to device) we've encountered this error. In short it means, that we can't buy new issues, nor download previously bought one.
I'm not able to find in Adobe docs any info about this so far, so i would like to ask for some comment.
What i've found on internet is, that this is some kind of Google Play thing, that after app will uploaded to Google Play and correctly set-up. But would like to hear from Adobe, that this will just work after publishing on Google Play.
Thanks
Martin

Hi Martin,
you do not have to publish the app to test and whatever result you have during testing will be what you have once the app is published.
On that basis we cannot guarantee the correct functionality if your current tests are not satisfactory. However, this issue is clearly a Google console setup ...
In the Android developer console, Can you check that you have the 'Licensing & in-ap billing' section completed with publick key (should be there automatically though)
.. as well as the correct test accounts?
I would also check that the APK 'product details' page is complete (including 'Consent' at the bottom of the page).

Version 4.1.6 of Google Play bug DRAINS your Battery!

Latest version of google play has issues of draining our battery. Here is article and link for a fix.
Download: Latest Google Play Store 4.1.10 With Location Bug Fixes

Thanks for this article! I have been having huge battery problems for the past few days and thought it was the Samsung update that added the caller ID bloatware and multi window that lots of people are complaining about. I updated the google play store and my battery immediately improved. I tried every other fix that people had talked about with no results. Made my day!

Since I updated to latest firefox version, every time I click a link or in a box a google play window opens up

Since I updated to the latest release of Firefox a few days ago every time I click a link or in a dialog box (like this one) or try to pin something in Pinterest a google play window opens up. I have no new pluggi-ns and no add-ons. I have also scanned my cpu for viruses and none was found. What is causing this issue, which is driving me crazy, and how can it be fixed?

To eliminate if it is a corrupted add on or plugin, please check if it happens in a new profile with just the pintrist add on. This will tell you if its a combination. [[Use the Profile Manager to create and remove Firefox profiles]]
Also sometimes one virus scanner will not detect a virus that another one would. Sometimes a problem with Firefox may be a result of malware installed on your computer, that you may not be aware of.
You can try these free programs to scan for malware, which work with your existing antivirus software:
* [http://www.microsoft.com/security/scanner/default.aspx Microsoft Safety Scanner]
* [http://www.malwarebytes.org/products/malwarebytes_free/ MalwareBytes' Anti-Malware]
* [http://support.kaspersky.com/viruses/disinfection/5350 Anti-Rootkit Utility - TDSSKiller]
* [http://general-changelog-team.fr/en/downloads/viewdownload/20-outils-de-xplode/2-adwcleaner AdwCleaner] (for more info, see this [http://www.bleepingcomputer.com/download/adwcleaner/ alternate AdwCleaner download page])
* [http://www.surfright.nl/en/hitmanpro/ Hitman Pro]
* [http://www.eset.com/us/online-scanner/ ESET Online Scanner]
[http://windows.microsoft.com/MSE Microsoft Security Essentials] is a good permanent antivirus for Windows 7/Vista/XP if you don't already have one.
Further information can be found in the [[Troubleshoot Firefox issues caused by malware]] article.
Did this fix your problems? Please report back to us!

Google Play and entitlement

We have successfully built and tested an Android app that when the test user signs on, the entitled folios display correctly with "download". We also have single issues available through Google Play and this feature works as well.
The issue we are having is when we load the app directly to our device, the sign in and entitlement works fine, but when we load the app through the Beta tester on Google Play, when the test user signs in, the entitlement does not show up, only singe copy purchases.
All the other features are working correctly.
We are using an Enterprise version of DPS
Thanks
Christopher Huber

Yes we are using the custom storefront.
Our entitlement is working correctly, i have tested it without the storefront and it works fine.
Christpoher

Google Play ebook issues on ADE 2.0

A pdf e-book downloaded from Google Play does not display the table of contents, and the full-text search function does not work, when viewed on Adobe Digital Editions version 2.067275. However, when the original pdf I submitted to Google Play (I am a publisher) is viewed on ADE, the table of contents does display and the search function works. This suggests that something in Google Play's processing of the pdf disabled the search function and stripped the bookmarks, which are the basis of the table of contents. These problems do not occur in Google Play's preview copy of the ebook which is available to all.
The Google Book Team has been unable to resolve or explain the issue, and has suggested the fault may lie with ADE, perhaps with the settings. I am sceptical about this, but would appreciate advice from others who may have experienced these defects.

It's probably not a bug in ADE 2.0. ADE 2.0 was not designed to run under
Windows Vista. Jeff Wright has posted a couple of entries that have the
address of information that deals with ADE under Vista. Sonce I'm now on 7
and was on XP, I didn't bookmark the post - sorry!
=============

Google play says firefox is installed, but canot find it on my tablet. message says will download shortley after I hit download, but it never did.

I went to google play and downloaded firefox for android, I then got a message that it would download shortly, but i never see it. the tab does not list it as an app on my tablet. When I go back to re download it says "installed"

the problem ended up being that I had googlestore app disabled, which kept all google store apps not download, but thanks... now if I can figure out how to bookmark on this tablet, and can u have the bookmark toolbar on this android version of firefox?

Why can't I see my android app on google play on phone?

I've built a native android app which works fine on a tablet, but I can't see it on a phone App Store, any idea why?

After you test the .apk file, log in to the Google Play Developer Console (https://play.google.com/apps/publish/). From there, you can either unpublish the previous app and add the new app, or you can submit a new version (upload a new .apk binary) of the existing app. If you're updating the existing app, you might need to go back into Web App Builder and override the version number. Instructions for doing this are in the link Neil provided.

How do I undo the damage from Google Play?

I am not sure which forum to send this to. Please refer me to the correct forum if I cannot be helped here.
I used Google Play, a free cloud where I can store ITunes songs. I uploaded all 4500 songs over 4 days, but now my IMac is totally messed up!
I never had any problems until this Google Play.
I have an IMac and the operating system is Mac OS X 10.6.8 Snow Leopard. Everything was fine until I started using "Google Play" and it's Music Manager.
I used "Google Play" and sent (uploaded) all my 4500 ITunes songs to the cloud called Google Play. This took 4 days to upload, because Google Play is a very slow program. My IMac has been messed up since:
1) Everything now is super - super slow.
2) Cannot restart or shut down my iMac computer. Get a message that I must quit Safari first. But I can't quit safari because the quit safari option in the menu is always grayed out now. So the only way I can shut down or restart is to manually shut off the computer, (via the button in the back of the IMac) which may harm it. And when I click the button or switch in the back to turn the iMac back on, the problems and the trash dialogue boxes (see #3 below) remain the same. They do not go away.
3) cannot move anything to the trash. (I am trying to empty the cache in the library to speed up the computer.) I just get dozens of trash dialogue boxes that say "preparing to move to trash" but this goes on forever and nothing is moved to the trash. And I can't get rid of these dialogue boxes that say "preparing to move to trash". There are loads of them and they stay forever, even if I shut down the computer and turn it on again.
Some things I try to move to trash but I get a "copy" dialogue box with the message "Prepare to move to desktop" and that message goes on forever also.
Or it says "Preparing to move to "com.apple.AddressBook" but nothing happens.
(the last one - "com.apple.AddressBook"- is one I had tried to move to the trash).
Shutting off the computer does not help. These trash dialogue boxes are back when I turn on the computer.
4) Trying to speed up computer by going into Utilities (Finder/Go/Utilities) and then clicking on Disk Utility, then McIntosh HD, and then "verify disk". This is supposed to speed up the computer. But when I go into Utilities, the Utilities dialogue box is empty - there is no "Disk Utility" to click on. There is nothing in the dialogue box, except a small spinning circle in the bottom right of the dialogue box that looks like it is trying to do something, but nothing ever happens.
5) Can no longer save documents. If I try to save a new document (click file/save or save as) the new document does not show up in my documents folder.
Maybe the 4 days of uploading filled my IMac with all kinds of spyware and that messed things up. Who knows?
I do have Intego VirusBarrier 6, and have had that and their previous version VirusBarrier 5 for a few years. I ran a full scan yesterday and it found only one new virus besides the 2 I previously had and that were already in quarantine I put the new one in quarantine too.
Is there anything I can do?

If I use the Google box, then when I copy the text from Google, it's plain text? Is that correct?
I just used the EditText method and it worked. Thanks

How can i use google play on my blackberry 10

Hello,
I'm a bit confused about the product description of Blackberry 10.
The usage of 700000 Apps? From the Android App Store from Google play?
Well goggle play isn't working on my Blackberry Z10 (Swisscom)
Any ideas how I can handle Android Apps on a BB10?
Thanks,
Daniel

Sideloading Android apps isn't as convenient as using the app store, unfortunately, but it's pretty simple. google around for complete instructions, but I used the BB10/Playbook Chrome extension. I set the IP address to the same as the BB 10 device I'm using (settings/about/network dropdown on the BB10) and turned on the Development Mode (Settings/Security&Privacy/Development Mode). From there it's drag and drop Bar files.
Where to get Bar files? Many are available on
http://apps.goodereader.com/apk-2-bar/ and
http://apk2bar.org/
Note that sometimes only a very specific version of the Android app will work (hopefully OS10.2 will expand the universe). This can be a problem with apk2bar site.
If you are a tinkerer and you have an android device (like a nexus 7 tablet) that is rooted, you can create backups of installed apps, copy them to your computer, and convert the resulting APK to a BAR.
This is a list of the Android apps that I've found to work, most extremely well. I may attempt to bundle all the files and put them into a torrent link for others to download, though this is something of a project for me as I'm a newbie to torrents.
Frankly, I see no reason why a curated Android App Store shouldn't be available natively for the BlackBerry. Amazon has one for the Kindle Fire, and many other android devices have app stores that are limited to the apps that have been shown to work properly on the specific hardware of the device. While for some games sideloading is imperfect, for many (especially many utilities, socia, news reader, and podcast/audiobook apps) it is an excellent solution. I am sorry that no reliable repository of working Bar files has been established. I'm even more sorry that BlackBerry isn't out there flogging developers of the apps listed below to make official ports available on Blackberry Workd - they work out-of-the-box, without modification, why would a Dev not take the 30 min necessary to make an official port available? (Here's an idea: BlackBerry, set a team of interns on the taks of making official ports available, turn-key; then, contact the relevant Dev, say "Hey, would you like your app on App World? Just say 'yes' or 'no' and 'paid' or 'free' and you're done).
3D camera.pro_vl.0.3 86.0.bar
American Alrllnes_v2.4.2040000 (perfect].bar
amtrak.rider_vl.0.794.0.bar
APMobile_vl.O.3713.0.bar
AstroPlayer_beta_vl.l3 5.145 (PERFECT).bar
AVR_Remote_vl.O. 04.0 (Marantz Denon_great].bar
BeyondPod_3 .1.39 [perfect but won't accept pro license key].bar
BGR_v1.0.1.2 [Boy Genius Report].bar
BingMaps [perfect].bar
bloomberg-android [perfect].bar
booking.com hotel search_v3.9.7.43.bar
chess for Android_v4.2.bar
CNN Money [perfect, text & video].bar
ConvertPad - Unit Converter_2.6.bar
Craigslist_clapp_v .0.3l.O.bar
craigslist_Ver_3.24 (perfect).bar
Duolingo-18-v1.01 [language learning].bar
ebay.mobile_vl.0.29.0 [perfect].bar
Economist_v1.3.3.bar
Evernote_S.l (perfect).bar
Flipboard.app_v2.0.31 [beautiful].bar
Google Maps with Navigation vl.936 bid 19 (excellent].bar
Google Sky Map [perfect].bar
Google Translate_v2.7 [excellent, written and spoken translation].bar
Grace - learn what you love_v1.17 [TED, Kahn Academy, MITetc] [requires YouTube app, Sideload].bar
Hopstop (perfect).bar
IMDB (perfect].bar
instagram [perfect].bar
iremote iTunes_v3.1(server for PC only].bar
iRemote.free_vl.l.O [could not connect].bar
Kingsoft-Office_5.1 [good but only docs in misc/android folder no SD card support].bar
Listen Audiobook Player (works but unstable].bar
mapquest.android.ace_v1.8.1(great].bar
meetup_vl.0.95.0 [great].bar
moonreader_vl.9.9 [ebook reader, perfect].bar
MortPiayer_Audio_Book_0. 8.6 (perfect].bar
MTAsubway.bus_vl.O.l.O.bar
netflix-mediaclient 1.8 build 561(perfect].bar
NYC Transit Status.MTAStatus_v l. 0.2. 0.bar
nyclite_v2.1.7 (NY Subway router].bar
NYCMate_4.2 l.bar
nycsubwaymap_v l.0.30.0.bar
OpenSignai_3G 4G WiFi maps (v good, adv funcs not available].bar
ParisLite_v2. 1.4 (Paris Subway router].bar
PayPa1_2.2 [perfect).bar
PicasaTool_5. 2.0.2 (PERFECT].bar
pinterest_v1.6.2 [perfect].bar
Pocket.Readitlater.pro_v4.6.3 [great].bar
Podtrapper_vl.0.7.0 (pperfect].bar
Pulse News_v3.1.8 [News Aggregator, crash on 1st launch then OK].bar
ReclpeSearch_v3. 23 (perfect).bar
Relmtech.Remote_v2.9.l (Server for PC only).bar
Rfi remote for Roku_rokumote_v2.10 [Simple, works perfect].bar
Rick Steves Audio Europe_vl.O.7.0.bar
RightTrack.LIRR_v.l0. 12. 0.bar
Shazam [excellent].bar
SchedNYC_vl.0.46.0 [MTA train status, very good].bar
scrabble.classicwords_v.l5 .5 (perfect].bar
Seeking Alpha Dividend_v1.1.0.bar
Seeking Alpha Portfolio_v3.5.5 [excellent].bar
Seeking Alpha Tech_v1.1.0.bar
snapchat.android_v2.1.0.26.bar
springpad [perfect].bar
stumbleupon_v3.0.2.115.bar
talkray-client-tex t call [good].bar
td_ameritrade_mobile.bar
Ted Talks_TedAir_vl.0.l21206 [BEST Ted app_video, great controls].bar
Ted Talks_vl.12 [video, perfect].bar
TradeKing_vl.0.3.0.bar
TravelMoroccoAppFree_v21.9.16.bar
TripAdvisor_seatguru_vl.l.bar
tripadvisor_v3.0.1(may crash in initial install).bar
TripAdvisor.cityguide.amsterdam_v4.0.1.bar
TripAdvisor.cityguide.london_v4.0..lbar
TripAdvisor.cityguide.newyorkcity_v1.0.30.0 (great).bar
TripAdvisor.cityguide.paris_v4.0.1(excellent].bar
Tumblr_3.3. 2 [perfect].bar
ubergenius_v1.3 [brain games].bar
urbanspoon [perfect].bar
us.news_vl.0.3.0.bar
wordbreaker_v4.3.l.bar
Words with Friends (good].bar
WorldCiock_vl.O. l48.0 (great).bar
Yahoo Finance_v1.1.9.1187014080.bar
yelp.android_v4. 2.0.808703 [bookmarks fails, reqs Google Play Services].bar
youmail.android.wm_v3. 7.30.0S.1482.bar
Wiki_Encyclopedia_wikipedia+news_v3.1.7.bar

Error when submitting R29 to Google Play

Tried to publish app as a beta in Google Play for internal testing (never did this in the past).
I've got this error:
This configuration cannot be published for the following reason(s):
It is forbidden that a device upgrading from API levels in range 8-18 to API levels in range 19+ should downgrade from version 16000000 to version 14000000, which would occur when
Release track containing any of and
Screen layouts containing any of and
Native platforms containing any of and
Features containing all of .
Any idea? Thanks!

I've sent screenshots via email, didn't get them through. Here they are.

Do MacBooks support google play movies in 1080p or 720p High Definition?

I have a MacBook Pro 2011 with Yosemite and am trying to watch a movie purchased on google play in HD on the chrome browser.

Hi
Part of answer
HD to use them to export to DVDs
There are no HD DVD format - DVD is as standard SD-video as it's best !
To get HD - one needs to use Blu-Ray (Roxio Toast™ + BD-burner + BD-disks)
And to put even more salt in the wounds. iMovie'08 or 09 or 11 are not tools of choise
when doing DVDs. They discard every second line resulting in even less quality (50%)
Use
• iMovie up to HD6 - or -
• FinalCut any version
Yours Bengt W

PS Touch for phone Google Play Market problems

Google play market doesn't allow install PS Touch for phone. It says that my phone is not compatible with this application. I bought this application earlier, reinstalled operation system and now have such problem. What should I do? Phone is Samsung Galaxy Note 3 LTE edition

So Guido,
A more expensive version arrives in the play store and Boom, you just say.... we don't have any control
I guess the fact that we did install Photoshop Touch for Phone on our Galaxy Note 3 was just something that never happened? Google knows that we had this running on our Galaxy Note 3
One good solution to offer would be:
Oh guys, so sorry to hear that. I look into that but if you don't want to wait than you can ask Google for a refund for this version and buy the new other version called ""
Here's the link to the new version...
Here's the link to Googles refund / contact page bla bla....
Common' Guido is this so hard? Please please be a little bit more helpful to your customers.
We all gladly contribute to your salary.
Best regards.

Publishing ADF Mobile App to Google Play

Hi,
I wrote an application in ADF Mobile, and I published it to Google Play.
When I try to install it on some devices from Google Play (Nexus 7 for example) I get the following error: "Your device isn't compatible with this version error message".
I also tried to install "El Perico" app (https://play.google.com/store/apps/details?id=com.synergetic.EPMobile&feature=search_result#?t=W251bGwsMSwyLDEsImNvbS5zeW5lcmdldGljLkVQTW9iaWxlIl0.) and I got the same error.
When I download the app to the device and install it manually, it works perfectly.
How can I disable any limitation on this app?
Thanks,
Yossi

Hi,
I found the issue.
Nexus 7 lacks backward camera, so it was not compatible to this device.
I removed from Android manifest all the unnecessary required permissions, and it works like a charm.
Thanks,
Yossi

Google Play: "vulnerable version of OpenSSL"

Similar Messages

Maybe you are looking for