iSSLfix: Jailbreak Tweak Fixes SSL Vulnerability For Jailbroken iPhone, iPad, iPod Touch On iOS 4.3.3

JailbreakMe 3.0

Apple had released iOS 4.3.4 to fix the vulnerability used by JailbreakMe 3.0, which was one of the easiest solutions to jailbreak iPhone, iPad and iPod Touch. Comex had also released a patch called PDF Patcher 2 on Cydia to fix the vulnerability associated with viewing malicious PDF files.

It was meant for users you didn’t want to upgrade to iOS 4.3.4, but also didn’t want to be exposed to the security vulnerability.

However, Apple quickly followed it up by releasing iOS 4.3.5 for iPhone, iPad and iPod touch to fix the security vulnerability for certification validation. This meant that users who had jailbroken their iPhone, iPad or iPod touch using JailbreakMe 3.0, but didn’t want to upgrade to iOS 4.3.5 were exposed to the security vulnerability with certificate validation.

The goods news for these users is that a new jailbreak tweak called iSSLfix has just been released on Cydia that fixes the security vulnerability with certificate validation, thus bringing them on par with iOS 4.3.5.

Here’s a quick description of the fix from Cydia:

Fix for iOS SSL vulnerability CVE-2011-0228 for iOS < 4.3.5 + stoen Comodo certificates blacklist for iOS < 4.3.2

You can follow these instructions to install the iSSLfix on your jailbroken iOS device:

  • Launch Cydia from your jailbroken iOS device homescreen.
  • Tap on the Search tab and search for iSSLfix.
  • Tap on iSSLfix from the search results and then tap on the ‘Install’ button.
  • Then Tap on the ‘Confirm’ button to install the patch on your iOS device.
  • After the patch is successfully installed, reboot your iOS device.

With this you have the best of both worlds, you have patched the vulnerability that is likely to be fixed by Apple in iOS 4.3.4 and you also get to keep your jailbreak.

Like this post? Share it!

  • Kagetsu

    Cool

  • Shika

    fool apple! u think comex can’t keep up? maybe another patch? hahahaha!

  • stranger

    does this apply for all ios versions prior to 4.3.5? cause im still on 4.3.1 on the iphone 4 32gb

  • http://www.motorbeam.com/ fas

    Yeah, it was quick. where is 2.10 -4.10 unlock?

  • titanss

    Not found on Cydia, anyone have the repo?

  • Sako

    i can’t find it on cydia too.. can someone write the source down please.. thanx

  • FredMC

    It shows up in Cydia for me, install went fine.

  • Sako

    maybe you had the source.. do you mind to tell us which source you used to find this?

  • Sako

    oh i got it… first we need to download PDF Pathcer 2 .. then search iSSLfix ..

  • Sako

    i need help.. anytime i reboot my iphone 4 i get message on the screen says Runtime Error info.plist not found.. any clue how to fix this?

  • Ziggary

    Stay away from this rubbish package….
    So far this has bricked every iPad that has been installed onto…

  • Vivi4711

    I installed it without any problems. So can I update to 4.3.5, too? I don’t want anything to get deleted.

    • http://www.iphonehacks.com/ iPhoneHacks

      If you upgrade, you will end up losing the jailbreak and all the jailbreak apps you have installed. Also you should bear in mind that the jailbreak for iOS 4.3.5 is a tethered jailbreak, which means you need to connect to your computer and use Redsn0w – everytime you reboot your iPhone.

  • jasmin

    i still dnt get how to do it