Re: [twsocket] Error with SSLWSocketClient
I have received an error from my client on test, the error is, _Revocation information for the security certificate for this site is not available, do you want to proceed?_ I am using the demo/test certificates delicered with ICS component package because I am still doing a test period. Don't use demo certificates, generate your own test SSL certificates for the servers and maybe the clients. When you go live, you'll need to buy commercial SSL/TLS certificates, which may be expensive. And read the SSL/TLS book as suggested several weeks ago. Angus -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] Error with SSLWSocketClient
Angus, I remember all you said. As mentioned, I am still running tests. What I need is a some kind of explanation about the error since I am not using IE or Mozilla. Do you know the reason for the error? -Original Message- From: Angus Robertson - Magenta Systems Ltd Sent: Thursday, February 03, 2011 10:07 AM To: twsocket@elists.org Subject: Re: [twsocket] Error with SSLWSocketClient I have received an error from my client on test, the error is, _Revocation information for the security certificate for this site is not available, do you want to proceed?_ I am using the demo/test certificates delicered with ICS component package because I am still doing a test period. Don't use demo certificates, generate your own test SSL certificates for the servers and maybe the clients. When you go live, you'll need to buy commercial SSL/TLS certificates, which may be expensive. And read the SSL/TLS book as suggested several weeks ago. Angus -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] Error with SSLWSocketClient
SSL certificates expire after a period of time--usually 1 year. Regards, SZ On Thu, Feb 3, 2011 at 10:49 AM, daniel cc dan...@signedsource.com wrote: Angus, I remember all you said. As mentioned, I am still running tests. What I need is a some kind of explanation about the error since I am not using IE or Mozilla. Do you know the reason for the error? -Original Message- From: Angus Robertson - Magenta Systems Ltd Sent: Thursday, February 03, 2011 10:07 AM To: twsocket@elists.org Subject: Re: [twsocket] Error with SSLWSocketClient I have received an error from my client on test, the error is, _Revocation information for the security certificate for this site is not available, do you want to proceed?_ I am using the demo/test certificates delicered with ICS component package because I am still doing a test period. Don't use demo certificates, generate your own test SSL certificates for the servers and maybe the clients. When you go live, you'll need to buy commercial SSL/TLS certificates, which may be expensive. And read the SSL/TLS book as suggested several weeks ago. Angus -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] Error with SSLWSocketClient
daniel cc wrote: Hello, I have received an error from my client on test, the error is, “Revocation information for the security certificate for this site is not available, do you want to proceed?” This is not an error from your application, isn't it? A certificate usually contains a link to a certificate revocation list CRL. When Windows or Firefox verify a certificate they try to lookup the presented certificate in that list. Applications may show that warning if there's no link to a CRL included etc.. Please notice, I am using the demo/test certificates delicered with ICS component package because I am still doing a test period. I just would like to know if someone else has the problem and what is the solution? With OpenSSL it's easy to generate a CRL and to include its weblink in self created certificates. If you will use commercial SSL server certificates you do not have to worry about CRLs. -- Arno Garrels -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] Error with SSLWSocketClient
Guys, The certificate is not expired because I have checked it. -Original Message- From: Fastream Technologies Sent: Thursday, February 03, 2011 10:49 AM To: ICS support mailing Subject: Re: [twsocket] Error with SSLWSocketClient SSL certificates expire after a period of time--usually 1 year. Regards, SZ On Thu, Feb 3, 2011 at 10:49 AM, daniel cc dan...@signedsource.com wrote: Angus, I remember all you said. As mentioned, I am still running tests. What I need is a some kind of explanation about the error since I am not using IE or Mozilla. Do you know the reason for the error? -Original Message- From: Angus Robertson - Magenta Systems Ltd Sent: Thursday, February 03, 2011 10:07 AM To: twsocket@elists.org Subject: Re: [twsocket] Error with SSLWSocketClient I have received an error from my client on test, the error is, _Revocation information for the security certificate for this site is not available, do you want to proceed?_ I am using the demo/test certificates delicered with ICS component package because I am still doing a test period. Don't use demo certificates, generate your own test SSL certificates for the servers and maybe the clients. When you go live, you'll need to buy commercial SSL/TLS certificates, which may be expensive. And read the SSL/TLS book as suggested several weeks ago. Angus -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] Error with SSLWSocketClient
Hi Arno, Thanks for the response. I am running the test with plain -- OverbyteIcsSimpleSslServer project demo which I have modified a bit (such as keepalive, error handling etc.). I do use firefox in the client machine but that is not part of my application it is just the firefox for web use (downloading drivers etc.). -Original Message- From: Arno Garrels Sent: Thursday, February 03, 2011 10:57 AM To: ICS support mailing Subject: Re: [twsocket] Error with SSLWSocketClient daniel cc wrote: Hello, I have received an error from my client on test, the error is, “Revocation information for the security certificate for this site is not available, do you want to proceed?” This is not an error from your application, isn't it? A certificate usually contains a link to a certificate revocation list CRL. When Windows or Firefox verify a certificate they try to lookup the presented certificate in that list. Applications may show that warning if there's no link to a CRL included etc.. Please notice, I am using the demo/test certificates delicered with ICS component package because I am still doing a test period. I just would like to know if someone else has the problem and what is the solution? With OpenSSL it's easy to generate a CRL and to include its weblink in self created certificates. If you will use commercial SSL server certificates you do not have to worry about CRLs. -- Arno Garrels -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] Error with SSLWSocketClient
What I need is a some kind of explanation about the error since I am not using IE or Mozilla. Do you know the reason for the error? Read Appendix B in the SSL and TLS Essentials book and pages 70 to 73 in the Network Security with OpenSSL book. This mailing list is not for basic teaching, it is for support of the TWSocket components. Angus -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] Error with SSLWSocketClient
Angus, I wouldn't type here and bother anyone if I could have found the answer from the book. So far I couldn't find the answer from the book, chapters 70-73 tells many things but nothing about this particular error. I have googled much and the answer everywhere seems to be managing the browser settings and I am wondering... What this error got to do with the browser which isn't used. one more thing, Please don't answer to my questions, if you don't have the answer. I have some brain which may not be as big as yours but I do know how to use it for looking in the book or the internet. There are always things which aren't in the books and I believe you also know that. -Original Message- From: Angus Robertson - Magenta Systems Ltd Sent: Thursday, February 03, 2011 11:41 AM To: twsocket@elists.org Subject: Re: [twsocket] Error with SSLWSocketClient What I need is a some kind of explanation about the error since I am not using IE or Mozilla. Do you know the reason for the error? Read Appendix B in the SSL and TLS Essentials book and pages 70 to 73 in the Network Security with OpenSSL book. This mailing list is not for basic teaching, it is for support of the TWSocket components. Angus -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] Error with SSLWSocketClient
Please don't answer to my questions No problem, added to kill list. Also stop sending me private emails with other questions. Angus -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] FTPCli problem.
Hello Arno,
No, it was reported that the software with FTPCLI_BUFFER_OLD also
hangs :(
Monday, January 24, 2011, 10:30:29 AM, you wrote:
AG const
AG // BLOCK_SIZE = 1460; { 1514 - TCP header size }
AG {$IFDEF FTPCLI_BUFFER_OLD}
AG FTP_SND_BUF_SIZE = 1460; { arno V7.18 }
AG FTP_RCV_BUF_SIZE = 4096; { arno V7.18 }
AG {$ELSE}
AG {$IFDEF FTPCLI_BUFFER_SMALL}
AG FTP_SND_BUF_SIZE = 8192; { arno V7.18 }
AG FTP_RCV_BUF_SIZE = 8192; { arno V7.18 }
AG {$ELSE}
AG {$IFDEF FTPCLI_BUFFER_MEDIUM}
AG FTP_SND_BUF_SIZE = 16384; { arno V7.18 }
AG FTP_RCV_BUF_SIZE = 16384; { arno V7.18 }
AG {$ELSE}
AG FTP_SND_BUF_SIZE = 32768; { angus V7.00 increased from 1460 }
AG FTP_RCV_BUF_SIZE = 32768; { angus V7.00 increased from 4096 }
AG {$ENDIF}
AG {$ENDIF}
AG {$ENDIF}
--
Best regards,
Antolmailto:spama...@mail.ru
--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be
Re: [twsocket] FTPCli problem.
Antol wrote:
Hello Arno,
No, it was reported that the software with FTPCLI_BUFFER_OLD also
hangs :(
That's sad news :(
I'm running out of ideas, anybody else?
--
Arno Garrels
Monday, January 24, 2011, 10:30:29 AM, you wrote:
const
// BLOCK_SIZE = 1460; { 1514 - TCP header size }
{$IFDEF FTPCLI_BUFFER_OLD}
FTP_SND_BUF_SIZE = 1460; { arno V7.18 }
FTP_RCV_BUF_SIZE = 4096; { arno V7.18 }
{$ELSE}
{$IFDEF FTPCLI_BUFFER_SMALL}
FTP_SND_BUF_SIZE = 8192; { arno V7.18 }
FTP_RCV_BUF_SIZE = 8192; { arno V7.18 }
{$ELSE}
{$IFDEF FTPCLI_BUFFER_MEDIUM}
FTP_SND_BUF_SIZE = 16384; { arno V7.18 }
FTP_RCV_BUF_SIZE = 16384; { arno V7.18 }
{$ELSE}
FTP_SND_BUF_SIZE = 32768; { angus V7.00 increased from 1460 }
FTP_RCV_BUF_SIZE = 32768; { angus V7.00 increased from 4096 }
{$ENDIF}
{$ENDIF}
{$ENDIF}
--
Best regards,
Antolmailto:spama...@mail.ru
--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be
Re: [twsocket] FTPCli problem.
I'm running out of ideas, anybody else? Is it confirmed that the server actually send the 226 answer and this is lost because the client doesn't see it ? -- francois.pie...@overbyte.be The author of the freeware multi-tier middleware MidWare The author of the freeware Internet Component Suite (ICS) http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] FTPCli problem.
Hello Francois, By the moment the software was tested with 2 servers, and the behavior is the same. We could think that the router is the problem, but the only unexplained thing remained is why ICS5 works... Thursday, February 3, 2011, 9:19:16 PM, you wrote: I'm running out of ideas, anybody else? FP Is it confirmed that the server actually send the 226 answer and this is FP lost because the client doesn't see it ? FP -- FP francois.pie...@overbyte.be FP The author of the freeware multi-tier middleware MidWare FP The author of the freeware Internet Component Suite (ICS) FP http://www.overbyte.be FP -- FP To unsubscribe or change your settings for TWSocket mailing list FP please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket FP Visit our website at http://www.overbyte.be -- Best regards, Antolmailto:spama...@mail.ru -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] FTPCli problem.
FP Is it confirmed that the server actually send the 226 answer and this is FP lost because the client doesn't see it ? By the moment the software was tested with 2 servers, and the behavior is the same. We could think that the router is the problem, but the only unexplained thing remained is why ICS5 works... I understood that, but nevertheless, I would like to confirm the server send the 226 answer when the download is done. It is possible that something is wrong at the closing of the data connection and so the server never send his 226 status, or the server send it but ICS doesn't get it. So before continuing with guessing, I would like to know the answer to my question, because this is the next thing I would check myself if I had that problem. You said you reproduced the issue with your own server being interrogated, so it should be easy for you to spy on the network at your own server and see if the 226 answer is properly sent with his ending CR/LF. Regards, -- francois.pie...@overbyte.be The author of the freeware multi-tier middleware MidWare The author of the freeware Internet Component Suite (ICS) http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] Install ICS SSL Delphi 2007 Problem NO SSL
I tried that. Still did not show the ssl installing but when I compiled the
sample project it died on every project that had the
{$IFNDEF NOFORMS}
Bomb('Please add NOFORMS to your project defines to reduce exe size');
{$ENDIF}
I checked the defines in each one and it has NOFORMS;DEBUG
Its almost like it is not seeing any of the defines in the project
I restored my pc back to before in installed any application and just
installed Delphi 2007 did the 2007 updates and only installed ICS and still
same thing
-Original Message-
From: twsocket-boun...@elists.org [mailto:twsocket-boun...@elists.org] On
Behalf Of Francois PIETTE
Sent: Thursday, February 03, 2011 2:27 AM
To: ICS support mailing
Subject: Re: [twsocket] Install ICS SSL Delphi 2007 Problem NO SSL
Any other suggestions. I tried everything I can think of
Restart everuthing from scratch.
First remove all files related to ICS from your harddisk, everywhere on your
hard disk, including pas, dpr, dfm, dsk, cfg, res, dcu, dcp, and bpl files.
Remove ICS packages from the IDE (components / install component / packages
and REMOVE all ICS packages you can find).
Then use Tortoise or any other subversion client to download the latest
ICS-V7 from the version control system repository at
svn://svn.overbyte.be/ics/trunk or http://svn.overbyte.be:8443/svn/ics/trunk
(usercode and paswword are both ics).
Then start Delphi, and open
installdir/ics/trunk/install/D2007Install.grouproj. Rebuild the runtime
package, rebuild the design time package, install the design time package.
Add installdir/ics/trunk/delphi/vc32 directory to Delphi search path (in
the IDE options).
Then open the sample projectgroup:
installdir/ics/trunk/delphi/internet/OverbyteIcsD2007Sam.grouproj and
rebuild all samples.
This has to work ! If not, reinstall Delphi 2007 and start again.
--
francois.pie...@overbyte.be
The author of the freeware multi-tier middleware MidWare The author of the
freeware Internet Component Suite (ICS) http://www.overbyte.be
--
To unsubscribe or change your settings for TWSocket mailing list please goto
http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be
--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be
Re: [twsocket] Install ICS SSL Delphi 2007 Problem NO SSL
I found this online I was wondering if someone could please confirm something for me. Recently I found out that Delphi 2007 has problems with Conditional Defines, something due to the use of MSBuild. While it's been a recent find for me, apparently this problem has been around since the release of Delphi 2007, and I was wondering if anyone knew the status of this problem? ie, the work-around is to disable MSBuild through the registry, but is this a Codegear problem, or a Microsoft problem? Can we expect this bug to be fixed, or are we eventually going to lose the ability to define conditional compiles/builds within our applications with the migration to Microsoft Build technology? Trying to figure out how to disable it now -Original Message- From: twsocket-boun...@elists.org [mailto:twsocket-boun...@elists.org] On Behalf Of Francois PIETTE Sent: Thursday, February 03, 2011 2:27 AM To: ICS support mailing Subject: Re: [twsocket] Install ICS SSL Delphi 2007 Problem NO SSL Any other suggestions. I tried everything I can think of Restart everuthing from scratch. First remove all files related to ICS from your harddisk, everywhere on your hard disk, including pas, dpr, dfm, dsk, cfg, res, dcu, dcp, and bpl files. Remove ICS packages from the IDE (components / install component / packages and REMOVE all ICS packages you can find). Then use Tortoise or any other subversion client to download the latest ICS-V7 from the version control system repository at svn://svn.overbyte.be/ics/trunk or http://svn.overbyte.be:8443/svn/ics/trunk (usercode and paswword are both ics). Then start Delphi, and open installdir/ics/trunk/install/D2007Install.grouproj. Rebuild the runtime package, rebuild the design time package, install the design time package. Add installdir/ics/trunk/delphi/vc32 directory to Delphi search path (in the IDE options). Then open the sample projectgroup: installdir/ics/trunk/delphi/internet/OverbyteIcsD2007Sam.grouproj and rebuild all samples. This has to work ! If not, reinstall Delphi 2007 and start again. -- francois.pie...@overbyte.be The author of the freeware multi-tier middleware MidWare The author of the freeware Internet Component Suite (ICS) http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] Install ICS SSL Delphi 2007 Problem NO SSL
GOT IT WOKRING. In the environment variables there was a setting platformbuild = BCB or HCB I removed that and now the defines work all compiled fine. -Original Message- From: twsocket-boun...@elists.org [mailto:twsocket-boun...@elists.org] On Behalf Of Francois PIETTE Sent: Thursday, February 03, 2011 2:27 AM To: ICS support mailing Subject: Re: [twsocket] Install ICS SSL Delphi 2007 Problem NO SSL Any other suggestions. I tried everything I can think of Restart everuthing from scratch. First remove all files related to ICS from your harddisk, everywhere on your hard disk, including pas, dpr, dfm, dsk, cfg, res, dcu, dcp, and bpl files. Remove ICS packages from the IDE (components / install component / packages and REMOVE all ICS packages you can find). Then use Tortoise or any other subversion client to download the latest ICS-V7 from the version control system repository at svn://svn.overbyte.be/ics/trunk or http://svn.overbyte.be:8443/svn/ics/trunk (usercode and paswword are both ics). Then start Delphi, and open installdir/ics/trunk/install/D2007Install.grouproj. Rebuild the runtime package, rebuild the design time package, install the design time package. Add installdir/ics/trunk/delphi/vc32 directory to Delphi search path (in the IDE options). Then open the sample projectgroup: installdir/ics/trunk/delphi/internet/OverbyteIcsD2007Sam.grouproj and rebuild all samples. This has to work ! If not, reinstall Delphi 2007 and start again. -- francois.pie...@overbyte.be The author of the freeware multi-tier middleware MidWare The author of the freeware Internet Component Suite (ICS) http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] FTPCli problem.
Hello Francois, Thursday, February 3, 2011, 11:03:36 PM, you wrote: FP You said you reproduced the issue with your own server being interrogated, FP so it should be easy for you to spy on the network at your own server and FP see if the 226 answer is properly sent with his ending CR/LF. No, nobody was able to reproduce the problem! By now I know only one machine that has this problem. I only gave that user login and password to my FTP server so he could try to find out whether it was a server problem or client problem. I've sent another FTP client to that user so he could test FTP passive transfer with alternative software. -- Best regards, Antolmailto:spama...@mail.ru -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
