Vanguard Download Error - SecurityException: Server sent redirect from a secure connection to a non-secure connection.
Probably just a temporary glitch, but I have not seen it before:
MD error message:
Account: S-Vangd TIRA
I'm sorry, an error occurred. The details of this error are below.
Error Description:java.lang.SecurityException: Server sent redirect from a secure connection to a non-secure connection. Stopping
java.lang.SecurityException: Server sent redirect from a secure connection to a non-secure connection. Stopping
java.lang.SecurityException: Server sent redirect from a secure connection to a non-secure connection. Stopping
at com.moneydance.apps.md.controller.olb.CustomURLStreamHandlerFactory$HttpURLConnectionImpl.beginResponse(CustomURLStreamHandlerFactory.java:430) at com.moneydance.apps.md.controller.olb.CustomURLStreamHandlerFactory$HttpURLConnectionImpl.getResponseCode(CustomURLStreamHandlerFactory.java:455) at com.moneydance.apps.md.controller.olb.ofx.OFXConnection.sendMessage(OFXConnection.java:2702) at com.moneydance.apps.md.controller.olb.ofx.OFXConnection.sendMessage(OFXConnection.java:2560) at com.moneydance.apps.md.controller.olb.ofx.OFXConnection.getTransactions(OFXConnection.java:976) at com.moneydance.apps.md.view.gui.OnlineManager.downloadTransactions(OnlineManager.java:651) at com.moneydance.apps.md.view.gui.OnlineManager.downloadTransactions(OnlineManager.java:632) at com.moneydance.apps.md.view.gui.AccountDetailPanel.lambda$actionForService$10(AccountDetailPanel.java:460) at com.moneydance.apps.md.controller.BackgroundOpsThread.run(BackgroundOpsThread.java:177)
Console Window:
20241226-10:28:47.452 !Cannot send cookie back to source: https://vesnc.vanguard.com/us/OfxDirectConnectServlet; DCID=www21; path=%2F; domain=ofx.discovercard.com -> DCID=www21; path=%2F; domain=ofx.discovercard.com
20241226-10:28:47.452 !Cannot send cookie back to source: https://vesnc.vanguard.com/us/OfxDirectConnectServlet; NSC_pmvj2-NzNfssjmm-wt=9f52352e0000; path=%2F; domain=taxcert.mlol.ml.com -> NSC_pmvj2-NzNfssjmm-wt=9f52352e0000; path=%2F; domain=taxcert.mlol.ml.com
20241226-10:28:47.452 !Cannot send cookie back to source: https://vesnc.vanguard.com/us/OfxDirectConnectServlet; JSESSIONID=C908827D64E0499F05F7F3BEE1A0B0F6; path=%2Fnetbenefits%2Fofx%2F; domain=nbofx.fidelity.com; secure -> JSESSIONID=C908827D64E0499F05F7F3BEE1A0B0F6; path=%2Fnetbenefits%2Fofx%2F; domain=nbofx.fidelity.com; secure
20241226-10:28:47.452 Unrecognized cookie parameter: Tue, 10-May-2022 09:07:43 PDT ->
20241226-10:28:47.452 Unrecognized cookie parameter: Tue, 10-May-2022 09:07:45 PDT ->
java.lang.SecurityException: Server sent redirect from a secure connection to a non-secure connection. Stopping
at com.moneydance.apps.md.controller.olb.CustomURLStreamHandlerFactory$HttpURLConnectionImpl.beginResponse(CustomURLStreamHandlerFactory.java:430) at com.moneydance.apps.md.controller.olb.CustomURLStreamHandlerFactory$HttpURLConnectionImpl.getResponseCode(CustomURLStreamHandlerFactory.java:455) at com.moneydance.apps.md.controller.olb.ofx.OFXConnection.sendMessage(OFXConnection.java:2702) at com.moneydance.apps.md.controller.olb.ofx.OFXConnection.sendMessage(OFXConnection.java:2560) at com.moneydance.apps.md.controller.olb.ofx.OFXConnection.getTransactions(OFXConnection.java:976) at com.moneydance.apps.md.view.gui.OnlineManager.downloadTransactions(OnlineManager.java:651) at com.moneydance.apps.md.view.gui.OnlineManager.downloadTransactions(OnlineManager.java:632) at com.moneydance.apps.md.view.gui.AccountDetailPanel.lambda$actionForService$10(AccountDetailPanel.java:460) at com.moneydance.apps.md.controller.BackgroundOpsThread.run(BackgroundOpsThread.java:177) 20241226-10:29:21.688 Online downloads (account: 'A-Vangd RIRA', service: 'Vanguard') finished...
20241226-10:29:28.626 Log setting 'DEBUG' has been changed to: Enabled
Showing page 2 out of 5. View the first page
Keyboard shortcuts
Generic
| ? | Show this help |
|---|---|
| ESC | Blurs the current field |
Comment Form
| r | Focus the comment reply box |
|---|---|
| ^ + ↩ | Submit the comment |
You can use Command ⌘ instead of Control ^ on Mac
31 Posted by whitedavidp on 30 Dec, 2024 11:08 PM
Having seen david.d's response, I just tried again to download from Vanugard - all 3 accounts. Sad to report that, unlike david.d, I still get the same error.
32 Posted by sth on 30 Dec, 2024 11:11 PM
@dtd, thank hleOFXQuotes for me! I have spent some time talking to account maintenance and have an open ticket for repairing this. They kept asking if I was using Chrome or the standard issue of just call Quicken to get it fixed. I think they are clear on this, but will end up telling me that they don't support MD.
Has someone's certificate expired here?
For the rest of you with Vanguard accounts, call, select "Account Maintenance" from the phone tree and tell them this is a problem. If one person calls, they just think he is crazy, if three people call, can you imagine, they may think it is an organization and if 50 people call, well they may think its a movement! (Apologies to Arlo Guthrie)
Hopefully after the first of the year the phone wait will be less.
33 Posted by sth on 30 Dec, 2024 11:12 PM
Nope mine errors out as well. BUT it may be an updated certificate propagating through the servers?
34 Posted by dtd on 31 Dec, 2024 01:08 AM
No changes for me at this time.
35 Posted by david.d on 31 Dec, 2024 01:13 AM
Confirming that problem is back. But it would appear that they are aware of the issue and are working on it.
36 Posted by whitedavidp on 31 Dec, 2024 04:14 PM
Confirming that the same issue remains on 12/31/24 @8am (pacific)
37 Posted by Rick on 31 Dec, 2024 06:42 PM
Quicken downloads transactions without error as mentioned in earlier post, but getting error message from Vanguard using MD 2020.2 (1929).
38 Posted by dtd on 01 Jan, 2025 01:54 AM
Rick - I explained your result earlier - Quicken does not use direct connect to get Vanguard, it uses its aggregator (which happens to be Intuit, who does NOT own Quicken anymore).
Similarly, Moneydance using Moneydance+ (I don't know if 2020.2 can use MD+) is using MD's aggregator Plaid, which can also get Vanguard downloads.
Basically, there's no difference between what Quicken can do and what Moneydance can do. It's just that many here have preferred direct connect for Vanguard, which currently appears to be problematic. Quicken abandoned direct connect some time ago.
Hope that helps clarify.
39 Posted by dtd on 01 Jan, 2025 01:56 AM
So, basically, I can have MD download Vanguard transactions without error as well using Moneydance+ ... (which many people prefer not to use, but then they wouldn't want to use Quicken to download that way either)
40 Posted by dwg on 01 Jan, 2025 02:10 AM
Moneydance+ was introduced in Moneydance 2022.
41 Posted by whitedavidp on 01 Jan, 2025 06:17 PM
Confirming that the same issue remains on 1/1/25 @10:15am (pacific)
Happy new year!
42 Posted by Neo on 01 Jan, 2025 07:16 PM
I found a solution to get around this, although not direct download, still better than nothing: Go to Activity, then Download Center, download Quicken files, follow step 1, 2 and 3 to download. You can download all funds to a single account, which is what the website recommends. The file can then be imported into MD. It works for me.
43 Posted by whitedavidp on 01 Jan, 2025 07:21 PM
Yes, that does work... My hypothesis is that this is an error at Vanguard and that, given the holidays, there is either no one around to fix it or they need more time to do so. Happy new year!
44 Posted by dtd on 01 Jan, 2025 08:22 PM
@Neo - glad you found one of the two solutions that I've been suggesting all along - manual downloads from Vanguard. Good for you.
45 Posted by dtd on 01 Jan, 2025 08:27 PM
@whitedavidp - I sure hope you are correct - I'm getting more pessimistic day to day given my research into this, and fear that Vanguard is headed the same way as USAA, Chase, recently Amex, and others - i.e. simply dropping direct connect services.
One more reason I'm pessimistic is that Quicken has dropped direct connect for Vanguard in favor of the aggregator (Intuit/Plaid for MD) "already", whereas in the past Quicken had to catch up on moving to an aggregator, this time it seems they knew it might be coming for Vanguard.
I hope I'm wrong, and you are correct.
46 Posted by jonh on 01 Jan, 2025 09:07 PM
FWIW, Fidelity still is using Direct Connect
47 Posted by dtd on 01 Jan, 2025 10:29 PM
Yes thank goodness, but don't jinx it! ;)
If Fidelity does drop DC like many are doing, there is no MD+ alternative, AND there is nothing but CSV manual downloads (totally useless for investment account uploading)
The reason there is no "open" aggregator solution is that Fidelity only works with ONE aggregator, Akoya, which they primarily own (but did spin off into a separate company).
That opens up lots of new "pay for this" potential, but they don't currently work with Plaid (MD+) or Intuit (Quicken), which MAY be why DC still works for now.
48 Posted by jonh on 01 Jan, 2025 11:03 PM
@dtd wrote > The reason there is no aggregator solution is that Fidelity only works with ONE aggregator, Akoya,
Personally, and I’m no expert, I think (hope) this whole problem is one aggregator that didn’t renew their SSL cert.
Fingers crossed that during the next full week it will get fixed.
I haven’t paid attention to MD+ features but I presume Plaid is a reasonable alternative if one tires of fiddling with Q-downloads & imports.
Today I did the Q download of all accounts (I track 6 accts @ Van) with custom time frame of 1 week and was pleasantly surprised to find that it sorted itself out nicely.
49 Posted by dkbarnes01 on 02 Jan, 2025 12:16 AM
Manual downloads are an option, but they are not a solution.
On Wed, Jan 1, 2025 at 5:29 PM dtd <[email blocked]> wrote:
50 Posted by dwg on 02 Jan, 2025 12:21 AM
I believe some aggregators have refused to pay the fees Akoya demanded. At the end of the day the customers of course ends up paying those.
Seems Fidelity had the opportunity to get another fee stream and took it.
51 Posted by dwg on 02 Jan, 2025 12:24 AM
The finance houses do not give a toss about a solution, they simply do not care, it is not their problem it is yours. Unless they have a financial interest in an aggregator they are not all that interested in helping them get the data on your behalf either.
52 Posted by dtd on 02 Jan, 2025 12:27 AM
@jonh - with Vanguard direct connect, no aggregator is involved - it is a DIRECT connect, so if you are correct, it can only be Vanguard who didn't renew whatever they would need to renew. (And I also hope it is -something- like that.) - but for now, yes, manual downloads do still work, with MD+ as a possible successor if Vanguard does end direct connect.
@dkbarnes01 - If Vanguard stops direct connection - period (which they might have already done) the only potential options (since you declare this cannot be a solution) would be either manual downloads or Moneydance+. i.e. in your mind, there would be no solution, only options. [ You can't force Vanguard to continue direct connect if they disconnect it ]
I was mentioning that if FIDELITY ever stops direct connection (which currently still works - crosses self, even if I'm not Catholic) - neither of those "options" that Vanguard has would exist for Fidelity.
Support Staff 53 Posted by Jenny on 02 Jan, 2025 12:40 PM
Hi all,
I am sorry to hear the Vanguard problems persist.
I'm afraid that at this time, it is a waiting game to see if/when Vanguard fix these problems at their end.
Currently, there are no changes to the connection information so we cannot update the Vanguard connection in Moneydance. I will continue to keep an eye on this and update immediately if Vanguard does make a change.
We are hoping that Vanguard is not removing OFX Direct Connect services completely. I can't find any information online that suggests this service is being removed. But as we have seen in the past, it is not unheard of that a bank would remove this service without notifying their customers.
In Quicken, I can see that Direct Connect is still listed as an available connection method for Vanguard. Usually, Quicken will be one of the first programs to be notified when a connection is discontinued, and the option will be removed promptly. As this connection method remains available in Quicken, we can hold onto some hope that this is a temporary problem.
I will update you all if I receive any further information about the connection status, or if a change is made to the connection details.
In the meantime, you can update your accounts manually by downloading an OFX or a QFX file from the banks website. The steps for importing these files into Moneydance are outlined in this article.
Alternatively, you can subscribe to use Moneydance+. This is the (optional) subscription service that allows you to download transactions from your banks using the Plaid aggregator. You can read more about Moneydance+ in this blog post. The steps for setting up this service are outlined in this section of the knowledge base.
--
Jenny, Infinite Kind Support
54 Posted by Dan P on 02 Jan, 2025 02:13 PM
FYI Jenny.
Moneydance+ also reports an error.
55 Posted by cdr on 02 Jan, 2025 02:18 PM
Same here, MD+ also reports the error
56 Posted by Bill Waldron on 02 Jan, 2025 02:39 PM
No error here with MD+. I used the Toolbox extension to delete the OFX connection.
57 Posted by cdr on 02 Jan, 2025 03:05 PM
Thanks Bill.
Toolbox extension deleted the OFX connection and MD+ now works.
I did not realize the OFX connection was still active.
58 Posted by dtd on 02 Jan, 2025 07:31 PM
If you have both OFX and MD+(Vanguard) active, OFX will always be the default if you "update all"
The way you can tell if you have both is to open the account transaction list, click the Download button at the top left, it will either "just download" (with whatever is active), or show OFX and MD+ as download options. Note that OFX is first.
I deliberately have both, but if I want MD+, I pick MD+ from the "two list" I just mentioned.(I have both because I test these things)
59 Posted by dtd on 02 Jan, 2025 07:33 PM
@jenny, did you see my messages 26 and 27 in this thread directed toward you?
https://infinitekind.tenderapp.com/discussions/online-banking/1250212-vanguard-download-error-securityexception-server-sent-redirect-from-a-secure-connection-to-a-non-secure-connection/page/1#comment_63111592
https://infinitekind.tenderapp.com/discussions/online-banking/1250212-vanguard-download-error-securityexception-server-sent-redirect-from-a-secure-connection-to-a-non-secure-connection/page/1#comment_63111612
60 Posted by lkeppeljunk on 02 Jan, 2025 07:37 PM
I switched from OFX to MD+ for Vanguard a few days ago and Disabled the OFX using Setup Online Banking. But now, when I try to Setup Online Banking again to re-enable the OFX, I am unable to because it takes me directly to the Setup MD+ page. How can I re-enable OFX so I can use either/or (if VNA fixes their system)?