You might see that the Dropbox Community team have been busy working on some major updates to the Community itself! So, here is some info on what’s changed, what’s staying the same and what you can expect from the Dropbox Community overall.
Forum Discussion
Change of Certification
Hi,
We are using Dropbox API to download firmware updates to our devices. I understand that there has been a recent change with the certification of your servers. This change causes our update ...
We've switched content.dropboxapi.com back to using DigiCert High Assurance EV Root CA. Please let us know if you're still seeing any issues.
4mooreben Yes, that's correct, this switch should not be considered permanent. We recommend updating the trust store, to trust both roots if possible. I'll ask the team for some longer term guidance as to a timeline.
Greg-DB
Dropbox Staff
Dropbox StaffWe are working on switching this back now. I'll follow up here once that's done.
Thanks, Greg. I'll continue to monitor for updates.
I assume this wouldn't be a permanent change on your side. I think it would be good to review the timeline around how long you can keep it switched back for. We will start communicating to our customers asap to make sure they are aware.
Best,
Ben M
- Greg-DB
We've switched content.dropboxapi.com back to using DigiCert High Assurance EV Root CA. Please let us know if you're still seeing any issues.
4mooreben Yes, that's correct, this switch should not be considered permanent. We recommend updating the trust store, to trust both roots if possible. I'll ask the team for some longer term guidance as to a timeline.
Thank you very much for your fast response. The update procedure works now. It is important for us to know how long this change will be effective, in order to communicate with our customers for a firmware update. Please let us know as soon as you hear back from the team.
I also am interested in how long this change will persist for. We have some boards that use OTA that we plan on using for testing during the next few weeks. They are supposed to go out Monday, but if we have to deal with changing certificates during the next month or two, we will have to push back our release to implement a method to handle that.
Thanks in advance,
Charles
- Greg-DB
I've confirmed with the team that this switch back to DigiCert High Assurance EV Root CA is not permanent. As our current certificates expire, we will be moving away from using EV certificates. Please update your trust store as mentioned, and do so by August. (The current certificate using DigiCert High Assurance EV Root CA for api.dropboxapi.com expires this coming September, so we'll be updating it by then.)
Is there a way for us to know when the certificates are about to switch? Like some sort of e-mail notifiaction or something we could sign up for that will warn us when this is going to happen, so we know to update to the new certificates in advance?
Thanks!!
Charles Fleck
- Greg-DB
charlesfish We don't currently have anything like that, but I'll bring this up with the team to see if we can formalize some sort of system/notification for this. I can't promise if or when that might be implemented though. Thanks for the note!
Thank you for the update. We will work on getting the word out to our customers to prepare them for the change.
About Dropbox API Support & Feedback
Find help with the Dropbox API from other developers.
