rposborne / wkhtmltopdf-heroku

wkhtmltopdf binary for heroku / amd64
MIT License
225 stars 92 forks source link

SSL issues after Poodle? #15

Closed charliemaffitt closed 9 years ago

charliemaffitt commented 9 years ago

Hi -

I'm experiencing errors using this gem suddenly - it was working well before. The errors appeared to start immediately after Heroku disabled SSLv3 support in the wake of Poodle vulnerability.

http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.html

Is anyone able to use wkhtmltopdf-heroku successfully with SSL since Heroku made this update?

https://status.heroku.com/incidents/678

To clarify - building PDFs using templates sourced over HTTP still works, but HTTPS suddenly does not. Any advice is greatly appreciated.

charliemaffitt commented 9 years ago

Following up my own question for posterity having resolved it.

Yes, the recent SSLv3 shutoff by Heroku rendered the binary presently included in this gem obsolete. This gem will not work post-POODLE as presently built. A binary of a more recent WKHTMLTOPDF build (www.wkhtmltopdf.org) will work, so my resolution was to fork and update the binary to fresher (currently 0.12.1) build of WKHTMLTOPDF.

pallymore commented 9 years ago

I have forked the repo and pushed it as a new gem.

https://github.com/pallymore/wkhtmltopdf-heroku-edge