Is IPWorks Impacted by the POODLE Vulnerability?

The discovery of a serious flaw in SSL 3.0, referred to as POODLE, has raised important security concerns for applications using outdated protocols.

By default, /n software components negotiate the highest mutually supported TLS version when establishing an SSL session. In most cases, this results in TLS 1.0 or higher being used. Unless the server you are connecting to only supports SSL 3.0, the component will not negotiate SSL 3.0.

To ensure that SSL 3.0 is not used and that the connection relies on TLS 1.0 or higher, you can explicitly disable SSL 3.0 support by setting the SSLEnabledProtocols configuration setting:

component.Config("SSLEnabledProtocols=192"); //TLS 1.0 only

If the server you are connecting to supports TLS 1.0 or has already disabled SSL 3.0, no changes are typically required. However, applying the configuration above ensures that SSL 3.0 is completely excluded, eliminating any risk associated with the POODLE vulnerability.