Errors in SSL access to API with older versions of Java

Incident Report for Cloudinary

Resolved

The issue has been resolved.

Incident summary -
AWS updated their DHE key from 1024 to 2048 which is not supported in older versions of Java.
We have updated our configuration to disable DHE completely which resolved the issue.
No further action is required.

Posted May 29, 2015 - 14:27 EDT

Investigating

Older versions of Java using the internal SSL support cannot open SSL connections with api.cloudinary.com. We are working to mitigate the issue.

Possible workarounds:
1. Upgrading to the latest version of Java
2. Use the BouncyCastle's JCE provider
3. Settings the upload prefix to http://api.cloudinary.com e.g. cloudinary.config.setUploadPrefix("http://api.cloudinary.com"). Notes: a) this will disable SSL access. b) This will only not work with the Admin API.

Posted May 29, 2015 - 12:36 EDT