• dl.dropboxusercontent.com links being blocked by certificate errors, help?
    10 replies, posted
As of today, links from dropbox have started getting flagged for certificate errors. [img]https://i.gyazo.com/003a1759c37dc51c222f5993079cb217.png[/img] It's seemingly the only website/domain that I'm having the issue with, and it's on all my browsers and my mobile. Any thoughts as to what the issue may be? I had it yesterday, but it went away but has come back. I'm currently running a Malwarebytes scan, followed by a DNSFlush per the reccomendation of something I googled. Any help is appreciated. [editline]14th December 2016[/editline] The MWB scan + DNS flush didn't work.
It's not just you. Dropboxes certificate is only valid for dropbox.com but they are using it on dropboxusercontent.com. Just wait for them to fix it. [editline]14th December 2016[/editline] Not sure why Chrome doesn't tell you what's wrong, then again Google does assume everyone using their stuff is retarded and might get scared easily. [quote]dl.dropboxusercontent.com uses an invalid security certificate. The certificate is only valid for the following names: *.dropbox.com, dropbox.com Error code: SSL_ERROR_BAD_CERT_DOMAIN[/quote]
Oh, so it's an issue with them and not me? [editline]14th December 2016[/editline] Here's a [url=https://dl.dropboxusercontent.com/u/206956179/ACC.jpg]link[/url] to something from my DropBox to check if so, thanks for the reply man.
Compare your local certificate (click the red SSL padlock thingy in the address bar) against [URL="https://archive.is/2kfom"]this external analysis of the cert's fingerprint.[/URL] Check against the secondary keys as well as the main one because your browser's display may not present the info in the same way that the site does. If nothing matches properly at all, your certificate store may be out of date or something fishy [I]could[/I] potentially be going on -- do your Windows Updates if you've been putting them off, because Windows cert updates are delivered that way. If things are still screwy then, there's a small chance of something bigger going on. And, yeah, it could also just be Dropbox fucking up and if that's the case it'll fix itself in a day or so.
[QUOTE=elixwhitetail;51525562]Compare your local certificate (click the red SSL padlock thingy in the address bar) against [URL="https://archive.is/2kfom"]this external analysis of the cert's fingerprint.[/URL] Check against the secondary keys as well as the main one because your browser's display may not present the info in the same way that the site does. If nothing matches properly at all, your certificate store may be out of date or something fishy [I]could[/I] potentially be going on -- do your Windows Updates if you've been putting them off, because Windows cert updates are delivered that way. If things are still screwy then, there's a small chance of something bigger going on. And, yeah, it could also just be Dropbox fucking up and if that's the case it'll fix itself in a day or so.[/QUOTE] Heading out of the house for a couple of hours so I'll give this a look over when I get back. I don't suppose I could trouble you for some visual cues as to what I should be comparing? I'm really not very well versed in all this. [editline]14th December 2016[/editline] Also worth noting that (to my knowledge), I've done all the recent Windows updates.
Okay, so from the site with presumably a red cert (it's green for me and Chrome doesn't complain, which is why it might be outdated certs or something): [IMG]http://i.imgur.com/JoMuByM.png[/IMG] That pops up this business, and you navigate to this entry in the second tab, and then make sure your computer's certificate matches the SHA1 fingerprint from [URL="https://www.ssllabs.com/ssltest/analyze.html?d=dl.dropboxusercontent.com&latest"]the site's analysis[/URL] (this is not an archive but the live site in case the Australian CDN has different certs). [IMG]http://i.imgur.com/aPZJGrC.png[/IMG] The reason we're doing this is making sure that you have the correct certificate, or if you've got an outdated or bogus cert. Outdated cert should be resolved by WU or waiting for the server to unfuck itself, bogus cert is a more complicated situation to tackle because it could be completely benign and it could be evidence of deep shenanigans. If it is the correct cert, then it's likely a case of waiting for Dropbox to unfuck things.
My mum was having the same problem with dropbox yesterday. I'm guessing it's their end.
Actually, the only three people in here with issues are from Australia and I can dl stuff from there fine on my French server so it's likely that they fucked up the Australian part of the CDN specifically. [editline]14th December 2016[/editline] Netherlands server works fine too.
Came back and it's fixed, guess it really was a fuck up on their part. Appreciate the information fellas, honestly get lost so quickly in this sort of thing.
They updated their terms and added some features or something, I guess that's what it was.
Sorry, you need to Log In to post a reply to this thread.