Re: [fpc-devel] certificate verify issue of tfphttpclient with openssl

2020-08-22 Thread Michael Van Canneyt via fpc-devel
On Sun, 23 Aug 2020, baldzhang via fpc-devel wrote: At 2020-08-22 06:28:55, "Michael Van Canneyt via fpc-devel" wrote: On Sat, 22 Aug 2020, baldzhang via fpc-devel wrote: Patch checked and applied in rev. 46540 谢谢您,这个很有用! Michael. Thanks for the hard work of pascal team :) Is this pos

Re: [fpc-devel] certificate verify issue of tfphttpclient with openssl

2020-08-22 Thread baldzhang via fpc-devel
At 2020-08-22 06:28:55, "Michael Van Canneyt via fpc-devel" wrote: > >On Sat, 22 Aug 2020, baldzhang via fpc-devel wrote: > >Patch checked and applied in rev. 46540 > >谢谢您,这个很有用! > >Michael. Thanks for the hard work of pascal team :) Is this possible to merge back to 3.2 ? BTW: Very surprised w

Re: [fpc-devel] certificate verify issue of tfphttpclient with openssl

2020-08-21 Thread Michael Van Canneyt via fpc-devel
On Sat, 22 Aug 2020, baldzhang via fpc-devel wrote: certificate verify issue of tfphttpclient with openssl patch file attached, some explain: a) sslsockets.pp the TVerifyCertificateEvent shall allow to modify the "Allow" param, for compatibility reason, function DoVerifyCert: Boolean may

[fpc-devel] certificate verify issue of tfphttpclient with openssl

2020-08-21 Thread baldzhang via fpc-devel
certificate verify issue of tfphttpclient with openssl from wiki page, https client as easy as: tfphttpclient.simpleget('https://192.168.0.1') in TOpenSSLSocketHandler, the VerifyPeerCert is False by default when check the TSSL.VerifyResult, will got one of following: 1) X509_V_ERR_DEPTH_ZERO_