Patch on 1.9.0.0 fails too (probably 1.8.0.0 until 1.9.0.1 affected) because of SUPEE-3941. 3941 patches downloader/lib/Mage/HTTP/Client/Curl.php and now the 8788 fails.
checking file downloader/lib/Mage/HTTP/Client/Curl.php
Hunk #1 FAILED at 378.
1 out of 1 hunk FAILED
checking file js/lib/uploader/flow.min.js
Workaround still openfor 1.9.0.1 below. Changes are too thorough, maybe need to adjust the 8788 patch itself.
edit: Edit the patch, search for Curl.php and replace
diff --git downloader/lib/Mage/HTTP/Client/Curl.php downloader/lib/Mage/HTTP/Client/Curl.php
index c55f88d..31f9f77 100644
--- downloader/lib/Mage/HTTP/Client/Curl.php
+++ downloader/lib/Mage/HTTP/Client/Curl.php
@@ -378,8 +378,8 @@ implements Mage_HTTP_IClient
}
$this->curlOption(CURLOPT_URL, $uri);
- $this->curlOption(CURLOPT_SSL_VERIFYPEER, FALSE);
- $this->curlOption(CURLOPT_SSL_VERIFYHOST, 2);
+ $this->curlOption(CURLOPT_SSL_VERIFYPEER, true);
+ $this->curlOption(CURLOPT_SSL_VERIFYHOST, 'TLSv1');
// force method to POST if secured
if ($isAuthorizationRequired) {
diff --git js/lib/uploader/flow.min.js js/lib/uploader/flow.min.js
with
diff --git downloader/lib/Mage/HTTP/Client/Curl.php downloader/lib/Mage/HTTP/Client/Curl.php
index c55f88d..31f9f77 100644
--- downloader/lib/Mage/HTTP/Client/Curl.php
+++ downloader/lib/Mage/HTTP/Client/Curl.php
@@ -378,8 +378,8 @@ implements Mage_HTTP_IClient
$uriModified = $this->getSecureRequest($uri, $isAuthorizationRequired);
$this->_ch = curl_init();
$this->curlOption(CURLOPT_URL, $uriModified);
- $this->curlOption(CURLOPT_SSL_VERIFYPEER, false);
- $this->curlOption(CURLOPT_SSL_VERIFYHOST, 2);
+ $this->curlOption(CURLOPT_SSL_VERIFYPEER, true);
+ $this->curlOption(CURLOPT_SSL_VERIFYHOST, 'TLSv1');
$this->getCurlMethodSettings($method, $params, $isAuthorizationRequired);
if(count($this->_headers)) {
diff --git js/lib/uploader/flow.min.js js/lib/uploader/flow.min.js