Installation fails for people from Serbia due to certificates - Solution (Windows)

[bgr]

I've noticed that Dropbox has been failing to upgrade from v112 to v113 last week. I've decided to uninstall it and try installing it manually, but the installer would stop with "Error 2" (v114 is also affected). Reading up on it I saw that that error means the issue is outside of Dropbox's control. I've dug up the installation log file and saw that it ends with

File "ssl.pyc", line 482, in _load_windows_store_certs
ssl.SSLError: nested asn1 error (_ssl.c:4034)

which for me was (un)fortunately a known issue. I am from Serbia and this error is common for Python when there are government certificates (for reading government ID or driver license smart cards) installed on Windows. In order to have these on the computer you have to install them manually from the government's website, but many people / offices will have them so I suspect many people will be having problems with Dropbox until this is resolved.

I've solved it by removing the certificates (search for "Internet options" in Start menu, go to Content > Certificates, look for everything that looks like it has to do with Serbia - I deleted one from "Personal" tab and one with name starting with MUPCA from "Intermediate" tab). Of course, do this at your own risk if you know what you're doing, I deleted them since I don't really need them. After deleting these Dropbox installed without problems.

Feel free to forward this to Dropbox engineers because I know a bug like this can be a hell to debug and they'll be grateful to be aware of this. Something was changed after v112 since Dropbox worked fine on my machine for months/years. This is a known issue (with a known workaround for local Python installations) https://bugs.python.org/issue35665.

[bgr]

I'll submit a ticket.

[Lusil]

Once you do, let me know the ticket ID (eg. #1234567) so that I can pass your comments along, @bgr. 

Cheers!

[bgr]

#12105893 @Lusil 

[Lusil]

Thanks for your swift reply, @bgr. I found and have made sure to reply to you. 

Whenever you have a moment, check for my latest message in your inbox and we'll go from there. 

[nmiTools]

You don't have to remove certificates, you can disable them, so in case you need them later just enable it:

- Right click on a certificate

- Properties

- Disable all purposes for this certificate