Need to see if your shared folder is taking up space on your dropbox 👨‍💻? Find out how to check here.

Forum Discussion

lazyCoder's avatar
lazyCoder
Explorer | Level 3
3 years ago
Solved

Dropbox API Certificate Problem

Hi guys~

I wrote a app to manage my dropbox cloud. Recently i found that the app connot work, and from log  found that i got a curl errror [60].

SO i change the Certificate info, it works fine. From this Dropbox Topic i find dropbox change certificates for api.dropboxapi.com and content.dropboxapi.com, i want to know:

  • is the certificate of the website replaced regularly?
  • is this replaced follow the certificate of curl  /   Mozilla cert ?
  • when did dropbox change CA file from DigiCert High Assurance EV Root CA to DigiCert Global Root CA?

Can someone answer my question？Thanks very much~

API
  • Greg-DB's avatar
    Greg-DB
    3 years ago

    The certificates on the Dropbox servers are updated as needed. I don't have a specific history/schedule to share on exactly when that did/will occur.

     

    Dropbox works to ensure that the servers are always served with valid certificates, but we don't guarantee we'll always being using a specific root, so we recommend making sure your trust store trusts both DigiCert High Assurance EV Root CA and DigiCert Global Root CA.

6 Replies

Replies have been turned off for this discussion
  • Greg-DB's avatar
    Greg-DB
    Icon for Dropbox Community Moderator rankDropbox Community Moderator
    3 years ago

    The certificates on the Dropbox servers are updated as needed. I don't have a specific history/schedule to share on exactly when that did/will occur.

     

    Dropbox works to ensure that the servers are always served with valid certificates, but we don't guarantee we'll always being using a specific root, so we recommend making sure your trust store trusts both DigiCert High Assurance EV Root CA and DigiCert Global Root CA.

  • lazyCoder's avatar
    lazyCoder
    Explorer | Level 3
    3 years ago

    Thanks!

    I also wanto to konw, if dropbox's Root CA (DigiCert High Assurance EV Root CA and DigiCert Global Root CA) will update with upstream certificates， in case i use the latest CA can't pass through dropbox's Verification

  • Greg-DB's avatar
    Greg-DB
    Icon for Dropbox Community Moderator rankDropbox Community Moderator
    3 years ago

    I'm not quite sure I understand your latest question. Can you clarify? Thanks.

  • lazyCoder's avatar
    lazyCoder
    Explorer | Level 3
    3 years ago

    For example, i use the latest CA  Store from curl(eg: ver 2022-12-09)，but dropbox.com use the old DigiCert High Assurance EV Root CA and DigiCert Global Root CA from old CA Store(eg: ver 2021-10-11). The two CA Store are completely different，so i can't pass dropbox verification.

     

    Therefore, if upstrem (like Mozilla、CURL) update its CA Store, will dropbox sync updates?

    Or i should download CA file from dropbox.com instead of using CA Store from from a third party?

  • Greg-DB's avatar
    Greg-DB
    Icon for Dropbox Community Moderator rankDropbox Community Moderator
    3 years ago

    The choice of trust store to use with your client is up to you, but to be able to successfully verify and connect to the Dropbox API servers you'll need to trust the root CA(s) used by the Dropbox servers. I can't provide any guarantee on if/when Dropbox will change its certificates.

About Dropbox API Support & Feedback

Node avatar for Dropbox API Support & Feedback
Find help with the Dropbox API from other developers.

The Dropbox Community team is active from Monday to Friday. We try to respond to you as soon as we can, usually within 2 hours.

If you need more help you can view your support options (expected response time for an email or ticket is 24 hours), or contact us on X, Facebook or Instagram.

For more info on available support options for your Dropbox plan, see this article.

If you found the answer to your question in this Community thread, please 'like' the post to say thanks and to let us know it was useful!