rposborne/wkhtmltopdf-heroku

SSL issues after Poodle?

charliemaffitt opened this issue · 2 comments

Hi -

I'm experiencing errors using this gem suddenly - it was working well before. The errors appeared to start immediately after Heroku disabled SSLv3 support in the wake of Poodle vulnerability.

http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.html

Is anyone able to use wkhtmltopdf-heroku successfully with SSL since Heroku made this update?

https://status.heroku.com/incidents/678

To clarify - building PDFs using templates sourced over HTTP still works, but HTTPS suddenly does not. Any advice is greatly appreciated.

Following up my own question for posterity having resolved it.

Yes, the recent SSLv3 shutoff by Heroku rendered the binary presently included in this gem obsolete. This gem will not work post-POODLE as presently built. A binary of a more recent WKHTMLTOPDF build (www.wkhtmltopdf.org) will work, so my resolution was to fork and update the binary to fresher (currently 0.12.1) build of WKHTMLTOPDF.

I have forked the repo and pushed it as a new gem.

https://github.com/pallymore/wkhtmltopdf-heroku-edge