Forum Discussion

Sejda P.'s avatar
Sejda P.
New member | Level 1
11 years ago

Saver API - SSL v3 handshake failure

I'm using the Saver API (saver js dropin) and been receiving an SSL v3 related error when attempting to save a file to Dropbox:

Error Dropbox transfer: Error downloading http://sejda.com/path/to/file.pdf error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure

Please also note that this error also occurs when passing in a regular http URL, not only with a https URL.

Could you help me understand what's causing this and how I can work around it?

Thanks

3 Replies

Replies have been turned off for this discussion
  • Sejda P.'s avatar
    Sejda P.
    New member | Level 1
    11 years ago

    Our servers are behind Cloudflare, which disabled SSL v3 due to the POODLE SSL vulnerability.
    Could it be an issue on your side related maybe to an old curl library that doesn't handle SSL negotiation well?

    And nevertheless, wondering why does this occur when we're passing a regular http url.

  • If I try to GET http://sejda.com/path/to/file.pdf, I get redirected to https://sejda.com/path/to/file, so I imagine that's why HTTP isn't working either. (It's just being redirected to HTTPS and then failing.)

    As to the underlying cause, on my computer, I get the same SSL cert when using curl. When I use the latest version of the requests library in Python, I get this error:

    requests.exceptions.SSLError: hostname 'sejda.com' doesn't match either of 'ssl2000.cloudflare.com', 'cloudflare.com', '*.cloudflare.com'
    

    I don't get an error in my browser, where the SNI setup on the cert seems to work okay. We will investigate a bit more this coming week to try to understand how we can handle an SSL setup like yours.

  • Sejda P.'s avatar
    Sejda P.
    New member | Level 1
    11 years ago

    Hi Steve,

    Thanks for your reply.
    Oh of course, because we're forcing https.
    I've allowed both http and https and can use this as a workaround.

    Would be great if can use https as well with Save to Dropbox in the future.
    Thanks for your time

About Dropbox API Support & Feedback

Node avatar for Dropbox API Support & Feedback
Find help with the Dropbox API from other developers.

The Dropbox Community team is active from Monday to Friday. We try to respond to you as soon as we can, usually within 2 hours.

If you need more help you can view your support options (expected response time for an email or ticket is 24 hours), or contact us on X, Facebook or Instagram.

For more info on available support options for your Dropbox plan, see this article.

If you found the answer to your question in this Community thread, please 'like' the post to say thanks and to let us know it was useful!