cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Want to learn some quick and useful tips to make your day easier? Check out how Calvin uses Replay to get feedback from other teams at Dropbox here.

Dropbox API Support & Feedback

Find help with the Dropbox API from other developers.

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Re: Dropbox API Integration

Dropbox API Integration

AS131
Explorer | Level 4

I am integrating the DropBox API calls into a web application.

I see the following warning during application startup :

WARNING [com.dropbox.core.http.StandardHttpRequestor] (default task-50) Certificate pinning disabled for HTTPS connections. This is likely because your JRE does not return javax.net.ssl.HttpsURLConnection objects for https network connections. Be aware your app may be prone to man-in-the-middle attacks without proper SSL certificate validation. If you are using Google App Engine, please configure DbxRequestConfig to use GoogleAppEngineRequestor.

How to get rid of this warning ?

1 Reply 1

Greg-DB
Dropbox Staff

Are you running on Google App Engine? If so, you should use GoogleAppEngineRequestor as documented here.

Otherwise, you can consider switching to a JRE that does return javax.net.ssl.HttpsURLConnection objects for HTTPS network connections, as that would enable the SDK to implement better security for your Dropbox API calls.

If not though, this is just a logged warning, so it shouldn't interfere with the operation of your app.

Need more support?