Child Item

Saver API - SSL v3 handshake failure

I'm using the Saver API (saver js dropin) and been receiving an SSL v3 related error when attempting to save a file to Dropbox:

Error Dropbox transfer: Error downloading http://sejda.com/path/to/file.pdf error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure

Please also note that this error also occurs when passing in a regular http URL, not only with a https URL.

Could you help me understand what's causing this and how I can work around it?

Thanks

Find more posts tagged with

API

Abuse

Comments

Sejda P.

Our servers are behind Cloudflare, which disabled SSL v3 due to the POODLE SSL vulnerability.

Could it be an issue on your side related maybe to an old curl library that doesn't handle SSL negotiation well?

And nevertheless, wondering why does this occur when we're passing a regular http url.

Steve M.

If I try to GET http://sejda.com/path/to/file.pdf, I get redirected to https://sejda.com/path/to/file, so I imagine that's why HTTP isn't working either. (It's just being redirected to HTTPS and then failing.)

As to the underlying cause, on my computer, I get the same SSL cert when using curl. When I use the latest version of the requests library in Python, I get this error:

requests.exceptions.SSLError: hostname 'sejda.com' doesn't match either of 'ssl2000.cloudflare.com', 'cloudflare.com', '*.cloudflare.com'

I don't get an error in my browser, where the SNI setup on the cert seems to work okay. We will investigate a bit more this coming week to try to understand how we can handle an SSL setup like yours.

Sejda P.

Hi Steve,

Thanks for your reply.

Oh of course, because we're forcing https.

I've allowed both http and https and can use this as a workaround.

Would be great if can use https as well with Save to Dropbox in the future.

Thanks for your time