# Web SDK SSL error

**URL:** <https://devforum.zoom.us/t/web-sdk-ssl-error/19875>\
**Category:** Web\
**Created:** [June 1, 2020, 9:22pm UTC](https://devforum.zoom.us/t/web-sdk-ssl-error/19875 "2020-06-01T21:22:17Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![adrianogaspar](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/adrianogaspar/32/9636_2.png) [@adrianogaspar](https://devforum.zoom.us/u/adrianogaspar)\
**Post date:** [June 1, 2020, 9:22pm UTC](https://devforum.zoom.us/t/web-sdk-ssl-error/19875/1 "2020-06-01T21:22:17Z")

</div>

Hello, I’m using the local example Web SDK 1.7.8 provided at [https://github.com/zoom/sample-app-web/tree/master](https://github.com/zoom/sample-app-web/tree/master)

It worked 2 days ago, but today some zoom addresses are not accessible and show the error Failed to load resource: net :: ERR\_CERT\_COMMON\_NAME\_INVALID  
as attached image. Could you please help me?

 ![Captura de tela de 2020-06-01 17-56-07](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/2X/1/13a9ff5211c5b733aa082efaf69d33dcb2e7b571.png)

---

<div class="post-metadata">

**Author:** ![grahaampeterson](https://avatars.discourse-cdn.com/v4/letter/g/47e85d/32.png) [@grahaampeterson](https://devforum.zoom.us/u/grahaampeterson)\
**Post date:** [June 2, 2020, 10:43am UTC](https://devforum.zoom.us/t/web-sdk-ssl-error/19875/2 "2020-06-02T10:43:54Z")

</div>

hey @adrianogaspar

I can confirm this also happens on my end when using the web sdk 1.7.8 - in a deployed environment

attached below is the network trace, as an effect of trying to request:

 ![ERR_CERT_COMMON_NAME_INVALID trace](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/2X/b/b1c00819502b7a03fa72d482922a0c94949fb4d4.jpeg)

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [June 8, 2020, 5:35pm UTC](https://devforum.zoom.us/t/web-sdk-ssl-error/19875/3 "2020-06-08T17:35:06Z")

</div>

Hey @adrianogaspar, @grahaampeterson,

This issue should be fixed now. Please let me know if you are still seeing issues. 🙂

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![grahaampeterson](https://avatars.discourse-cdn.com/v4/letter/g/47e85d/32.png) [@grahaampeterson](https://devforum.zoom.us/u/grahaampeterson)\
**Post date:** [June 11, 2020, 11:27am UTC](https://devforum.zoom.us/t/web-sdk-ssl-error/19875/4 "2020-06-11T11:27:53Z")

</div>

hi Tommy, thanks for the update.

Although we’ve noticed we’re only seeing certificate errors occasionally, we’re now noticing the Web SDK seems to be loading images via `data:` [link example](http://data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAA0AAAAMACAMAAAA65fccAAAC+lBMVEUAAAAICAgJCgoCAgIICAgEBAUEBgMGBgcFBQXU1NT5+fn///+UlJU/PD3///8AAADv6OZERUjV1dX7PDtkZGWLi4vCwcN7e34CAwL8/PzY2NiMjI22trba296Hh4dJwAAsLTKHgmP44tfMzMyIiIlniIXv7u////+qqqrOzc1mZmba3N7Y2td1dXm/v7+XIyT9/f76+PaPj5FlZWXe4OEFDALa3N4HCAoqKzKRkZIEBQWwsLCMjI4tLjPp6uyDg4NWVlbQ0NADBASLi4zc3NwvMzKBgYXe4OGIiIiBgYLbSCYveAAsLDPrXl0mJzG/v8k6mgADBAS+vsgoKDLx8fJ7h4fYBgD6ODDeJibwLS////9BrgDytCX8/P2enp66usq7u8m7vsL/d2Lb29v/vJHkh4cuewD9yanf3992doVlbYdEtALOM...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)  
which in turns triggers a content security policy issue on our end as we’re not allowing this.

 ![Screenshot 2020-06-11 at 12.20.07](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/2X/6/6c073d80f5e6c660b8c17c604f03e217aba315a9.png)

Can you confirm?  
Thank you

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [June 16, 2020, 5:28pm UTC](https://devforum.zoom.us/t/web-sdk-ssl-error/19875/5 "2020-06-16T17:28:20Z")

</div>

Hey @grahaampeterson,

Please provide exact steps to reproduce the issue. I am not seeing this when testing.

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![grahaampeterson](https://avatars.discourse-cdn.com/v4/letter/g/47e85d/32.png) [@grahaampeterson](https://devforum.zoom.us/u/grahaampeterson)\
**Post date:** [June 29, 2020, 10:03am UTC](https://devforum.zoom.us/t/web-sdk-ssl-error/19875/6 "2020-06-29T10:03:23Z")

</div>

Hi Tommy, sorry for late reply.

This issue can only be reproduced on a deployed environment (ie not locally) where specific Content Security Policy rules are in place.

In this specific instance, we’re restricting the ability for the front end application to render images via `data:` as this exposes security concerns.

As per [W3 recommendation](https://www.w3.org/TR/CSP3/#csp-directives) it is strongly advised not to load images that way as it leaves it vulnerable to perform XSS type of attacks.

I wanted to check with you whether the Zoom SDK will carry on loading images that way knowing there are still some security exploits left or if you believe this can be addressed in a near future?

Thanks in advance

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [June 30, 2020, 8:37pm UTC](https://devforum.zoom.us/t/web-sdk-ssl-error/19875/7 "2020-06-30T20:37:13Z")

</div>

Hey @grahaampeterson,

Thanks for the additional info. I have asked our Web SDK engineering team to look into this. (CS-1997)

I will get back to you with an update.

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![DeveloperBot](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/developerbot/32/12632_2.png) [@DeveloperBot](https://devforum.zoom.us/u/DeveloperBot)\
**Post date:** [August 21, 2020, 10:30pm UTC](https://devforum.zoom.us/t/web-sdk-ssl-error/19875/8 "2020-08-21T22:30:59Z")

</div>


