enforce tlsv1

README.md

@@ -1,10 +1,11 @@
 Block.io PHP
 ===========
 
-**Current Release**: 1.0.4
+**Current Release**: 1.0.7
 
+**15/08/14**: Enforce use of TLSv1, step away from the vulnerable SSLv3.  
 **10/08/14**: Added 3 of 4 MultiSig example.  
-**09/28/14**: Updated for v2 handling.
+**09/28/14**: Updated for v2 handling.  
 
 PHP wrapper for [Block.io](https://block.io/) for use with [Dogecoin](http://dogecoin.com/), [Bitcoin](http://bitcoin.org/), and [Litecoin](http://litecoin.org). API key validation on instantiation, simple abstraction layer on top of existing API interfaces, and automatic JSON decoding on response.
 

composer.json

@@ -1,7 +1,7 @@
 {
     "name": "block_io-php/block_io-php",
     "license": "MIT",
-    "version": "1.0.6",
+    "version": "1.0.7",
     "description": "Block.io is the easiest way to create wallets, send, and accept payments through Bitcoin, Litecoin, and Dogecoin. This is its PHP library.",
     "keywords": ["block.io", "dogecoin", "bitcoin", "litecoin", "block_io"],
     "homepage": "https://block.io",

lib/block_io.php

@@ -14,6 +14,10 @@
     throw new \Exception('mCrypt extension seems not to be installed');
 }
 
+if (!extension_loaded('curl')) {
+    throw new \Exception('cURL extension seems not to be installed');
+}
+
 class BlockIo
 {
 
@@ -83,6 +87,7 @@ private function _request($path, $args = array(), $method = 'POST')
 	// it's a GET method
 	if ($method == 'GET') { $url .= '&' . $addedData; }
 
+	curl_setopt($ch, CURLOPT_SSL_CIPHER_LIST, 'TLSv1'); // enforce use of TLSv1
         curl_setopt($ch, CURLOPT_URL, $url);
 
 	if ($method == 'POST')