Need to see if your shared folder is taking up space on your dropbox 👨💻? Find out how to check here.
Forum Discussion
Solved
Change of Certification
Hi,
We are using Dropbox API to download firmware updates to our devices. I understand that there has been a recent change with the certification of your servers. This change causes our update ...
We've switched content.dropboxapi.com back to using DigiCert High Assurance EV Root CA. Please let us know if you're still seeing any issues.
4mooreben Yes, that's correct, this switch should not be considered permanent. We recommend updating the trust store, to trust both roots if possible. I'll ask the team for some longer term guidance as to a timeline.
Greg-DB
Dropbox Community Moderator
Dropbox Community Moderatorcharlesfish We don't currently have anything like that, but I'll bring this up with the team to see if we can formalize some sort of system/notification for this. I can't promise if or when that might be implemented though. Thanks for the note!
Greg-DBDropbox Community Moderator
Dropbox Community ModeratorIn order to provide more time for clients to update their trust stores, we will continue the use of DigiCert High Assurance EV Root CA until at least January 1st, 2022. We will soon replace the current certificate for api.dropboxapi.com, which expires soon, with another one also from DigiCert High Assurance EV Root CA. However starting starting January 1st, 2022, we may switch our CA at any time, so make sure to update your trust store to trust both DigiCert High Assurance EV Root CA and DigiCert Global Root CA by then.
Dear Greg,
I believe a customer of ours is confronted with the described issue as well.
The concerned device only has the DigiCert High Assurance EV Root CA certificate to connect to ‘api.dropboxapi.com’ (162.125.65.19) for its OTA-updates.
The product is using an older version of the SimpleLink-cc32xx-sdk from TI (< v5.10). This version is not handling the update Dropbox rolled out in August 2021.
If different certificates are used for the Dropbox OTA (CDN) server and the Dropbox fileserver itself, the one that’s needing the ‘DigiCert Global Root CA’ will not work.
Apparently, this is only noticed very late. The update process isn’t triggered regularly or monitored that closely. A warning message from dropbox was not received or was overlooked.
The dropbox method is the only way to get the devices updated over the air. The number of devices is significant.
What options do we have to get all these devices updated?
Feel free to contact me at temporary.mail4dropbox@gmail.com
Thanks in advance,
Bart- Greg-DB
BartVD Thanks for your message. As you found, Dropbox changed the certificate for api.dropboxapi.com from DigiCert High Assurance EV Root CA and it is currently being served with a valid certificate using DigiCert Global Root CA. (You can find the details on the transition in my previous messages from 2021 in this thread.) So, any remaining devices without a more complete trust store, or without at least the two necessary for that transition, would have no longer been compatible once that was done.
Unfortunately this isn't user-configurable; in order to connect to api.dropboxapi.com now, clients would need to trust DigiCert Global Root CA to validate the certificate to establish the secure connection. I'm afraid I don't have any other options to offer if the client does not do so.
About Dropbox API Support & Feedback
Find help with the Dropbox API from other developers.
