cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Want to make sure we keep you updated on the ideas that other users have shared here on the Community? Us too! Check them out over here.

Dropbox API Support & Feedback

Find help with the Dropbox API from other developers.

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
1
Ask
2
Comments

Dropbox API Certificate Problem

Dropbox API Certificate Problem

lazyCoder
Explorer | Level 3

Hi guys~

I wrote a app to manage my dropbox cloud. Recently i found that the app connot work, and from log  found that i got a curl errror [60].

SO i change the Certificate info, it works fine. From this Dropbox Topic i find dropbox change certificates for api.dropboxapi.com and content.dropboxapi.com, i want to know:

  • is the certificate of the website replaced regularly?
  • is this replaced follow the certificate of curl  /   Mozilla cert ?
  • when did dropbox change CA file from DigiCert High Assurance EV Root CA to DigiCert Global Root CA?

Can someone answer my question?Thanks very much~

1 Accepted Solution

Accepted Solutions

Re: Dropbox API Certificate Problem

Greg-DB
Dropboxer

The certificates on the Dropbox servers are updated as needed. I don't have a specific history/schedule to share on exactly when that did/will occur.

 

Dropbox works to ensure that the servers are always served with valid certificates, but we don't guarantee we'll always being using a specific root, so we recommend making sure your trust store trusts both DigiCert High Assurance EV Root CA and DigiCert Global Root CA.

View solution in original post

6 Replies 6

Re: Dropbox API Certificate Problem

Greg-DB
Dropboxer

The certificates on the Dropbox servers are updated as needed. I don't have a specific history/schedule to share on exactly when that did/will occur.

 

Dropbox works to ensure that the servers are always served with valid certificates, but we don't guarantee we'll always being using a specific root, so we recommend making sure your trust store trusts both DigiCert High Assurance EV Root CA and DigiCert Global Root CA.

Re: Dropbox API Certificate Problem

lazyCoder
Explorer | Level 3

Thanks!

I also wanto to konw, if dropbox's Root CA (DigiCert High Assurance EV Root CA and DigiCert Global Root CA) will update with upstream certificates, in case i use the latest CA can't pass through dropbox's Verification

Re: Dropbox API Certificate Problem

Greg-DB
Dropboxer

I'm not quite sure I understand your latest question. Can you clarify? Thanks.

Re: Dropbox API Certificate Problem

lazyCoder
Explorer | Level 3

For example, i use the latest CA  Store from curl(eg: ver 2022-12-09),but dropbox.com use the old DigiCert High Assurance EV Root CA and DigiCert Global Root CA from old CA Store(eg: ver 2021-10-11). The two CA Store are completely different,so i can't pass dropbox verification.

 

Therefore, if upstrem (like MozillaCURL) update its CA Store, will dropbox sync updates?

Or i should download CA file from dropbox.com instead of using CA Store from from a third party?

Re: Dropbox API Certificate Problem

Greg-DB
Dropboxer

The choice of trust store to use with your client is up to you, but to be able to successfully verify and connect to the Dropbox API servers you'll need to trust the root CA(s) used by the Dropbox servers. I can't provide any guarantee on if/when Dropbox will change its certificates.

Re: Dropbox API Certificate Problem

lazyCoder
Explorer | Level 3

OK, I understand. Thanks~

Who's talking

Top contributors to this post

  • User avatar
    lazyCoder Explorer | Level 3
  • User avatar
    Greg-DB Dropboxer
What do Dropbox user levels mean?
Need more support?