Re: [twsocket] TWSocket Digest, Vol 443, Issue 6
Hello To which file is explanation of each methods (put, dir, dele, etc.) of TFtpCli written? They directly matches the FTP specifications: http://www.ietf.org/rfc/rfc959.txt You may also have a look at http://wiki.overbyte.be/wiki/index.php/TFtpClient Thank you for the professor. There 1. Check the existence of the arbitrary files on a host. 2. And if There is a File, it Will Delete. I would like to write the above-mentioned program. If there is anything like sample sauce, please let me know. I would appreciate your favor although I feel sorry very much Thank you for your consideration 荒二井 勇 ara...@n-kishou.co.jp -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] HTTP SSL Server vs p7b certificate's format
If that doesn't help, use a TIcsLogger to get a full debug log and send that to me if you don't find the error yourself. So I tried a few things with ICS logger ON, but no answers. First Delphi code to intialize TSSLContext : with MySslContext do begin SslCertFile:= APath + 'MyCertificate.pem'; SslPassPhrase := ''; SslPrivKeyFile := APath + 'MyCertificate.pem'; SslCAFile := APath + 'MyCertificate.pem'; SslCAPath := APath; SslVerifyPeer := False; end; And ICS logger says : 15:57:49:896 InitCtx OpenSSL version: OpenSSL 0.9.8h 28 May 2008 15:57:49:897 error:0906D06C:PEM routines:PEM_read_bio:no start line error:140B0009:SSL routines:SSL_CTX_use_PrivateKey_file:PEM lib So I checked MyCertificate.pem and I've got 3 blocks : subject=/C=FR/OU=Domain Control Validated/CN=*.mydomain.fr issuer=/C=BE/O=GlobalSign nv-sa/CN=GlobalSign Domain Validation CA - G2 -BEGIN CERTIFICATE- [...] -END CERTIFICATE- subject=/C=BE/O=GlobalSign nv-sa/CN=GlobalSign Domain Validation CA - G2 issuer=/C=BE/O=GlobalSign nv-sa/OU=Root CA/CN=GlobalSign Root CA -BEGIN CERTIFICATE- [...] -END CERTIFICATE- subject=/C=BE/O=GlobalSign nv-sa/OU=Root CA/CN=GlobalSign Root CA issuer=/C=BE/O=GlobalSign nv-sa/OU=Root CA/CN=GlobalSign Root CA -BEGIN CERTIFICATE- [...] -END CERTIFICATE- Then I changed my Delphi code to : with TWSslContext do begin SslCertFile:= APath + 'CanyonCA.pem'; SslPassPhrase := ''; //SslPrivKeyFile := APath + 'CanyonCA.pem'; SslCAFile := APath + 'CanyonCA.pem'; SslCAPath := APath; SslVerifyPeer := False; end; And ICS logger says : 15:59:00:703 InitCtx OpenSSL version: OpenSSL 0.9.8h 28 May 2008 In my self generated certificate, I'd got a RSA Priv key included, but none here. Did I configure my SSLcontext in the right way ? Gratefully, Guillaume ROQUES http://www.canyon.fr/ Le 20:59, Arno Garrels a écrit : ROQUES Guillaume wrote: What client is connecting when that error happens? IE 7 to 9 or Firefox But none ask to add certificate, both say that the site is unreachablesounds weird I know T_T Have you tried newer OpenSSL libraries? http://wiki.overbyte.be/wiki/index.php/ICS_Download If that doesn't help, use a TIcsLogger to get a full debug log and send that to me if you don't find the error yourself. -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] HTTP SSL Server vs p7b certificate's format
I tried mycertificate with the OverbyteIcsSslWebServ demo : * httpserver responding * sslhttpserver not responding * sslhandshake failed _ Configuration :_ * Write to log file : ON * Display header : ON * Display SSL info : ON * ICS logger.logoptions := [loSslErr,loSslInfo,loSslDump]; If anything help to understand.. Gratefully, Guillaume ROQUES http://www.canyon.fr/ Le 20:59, Arno Garrels a écrit : ROQUES Guillaume wrote: What client is connecting when that error happens? IE 7 to 9 or Firefox But none ask to add certificate, both say that the site is unreachablesounds weird I know T_T Have you tried newer OpenSSL libraries? http://wiki.overbyte.be/wiki/index.php/ICS_Download If that doesn't help, use a TIcsLogger to get a full debug log and send that to me if you don't find the error yourself. -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] HTTP SSL Server vs p7b certificate's format
ROQUES Guillaume wrote: And ICS logger says : 15:57:49:896 InitCtx OpenSSL version: OpenSSL 0.9.8h 28 May 2008 15:57:49:897 error:0906D06C:PEM routines:PEM_read_bio:no start line error:140B0009:SSL routines:SSL_CTX_use_PrivateKey_file:PEM lib So I checked MyCertificate.pem and I've got 3 blocks : Without a private key it doesn't work. InitContext raises an exeption in such case. The private key has to be converted to PEM format as well, preferably to a separate PEM file in your case and property SslPrivKeyFile should point to it. BTW: If you would not eat exceptions you would have got that error message sooner and easier. -- Arno Garrels -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
[twsocket] TWSocket Digest, Vol 444, Issue 6
Hello, thanks for the answers, it works now!! I was using the wrong version of ICS for Delphi XE2. I must have missed all the previous answers, so sorry for spamming the mailing list. Thanks a lot -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] HTTP SSL Server vs p7b certificate's format
Hi Arno, We also have problems with the new certificates. Converted to .pem format, it contains only a private key and a single certificate section. It only works using an ISA server processing the SSL... Paul - Original Message - From: Arno Garrels arno.garr...@gmx.de To: ICS support mailing twsocket@elists.org Sent: Thursday, October 06, 2011 4:53 PM Subject: Re: [twsocket] HTTP SSL Server vs p7b certificate's format ROQUES Guillaume wrote: And ICS logger says : 15:57:49:896 InitCtx OpenSSL version: OpenSSL 0.9.8h 28 May 2008 15:57:49:897 error:0906D06C:PEM routines:PEM_read_bio:no start line error:140B0009:SSL routines:SSL_CTX_use_PrivateKey_file:PEM lib So I checked MyCertificate.pem and I've got 3 blocks : Without a private key it doesn't work. InitContext raises an exeption in such case. The private key has to be converted to PEM format as well, preferably to a separate PEM file in your case and property SslPrivKeyFile should point to it. BTW: If you would not eat exceptions you would have got that error message sooner and easier. -- Arno Garrels -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
[twsocket] Sponsorship inquiry for TSslHttpCli
Hello, We use the TSslHttpCli for our secure web reverse proxy. When SSL is also enabled on web server, in order for it to work with DNS pointing the www.domain.com to reverse proxy and the web server running on the same certificate, end users define their web servers with numeric IPs. However when they do so, this time the SSL verification between the proxy and web server fails as TSslHttpCli sends no SSL domain name since the web server IP is numeric! To overcome this, we have told customers to use hosts file setting on proxy machine (as a workaround) which is perceived as a low quality solution... ;-( We want to sponsor for a property in this component as SslDomainName. Actually I think the SNI code should have included a similar feature but I am unable to find anything similar in demos. We can pay for time or for deliverables. Best Regards, SZ -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] Fix for content encoding bug
Http Cli not decode the gzip data from this url (specific header, does not work FContentCodingHnd.Complete). Try example - http://vkmusic.citynov.ru/overbyte/HttpCliBug.dpr Thanks for the fix, this is now tested and SVN updated, the nightly zip will be available tomorrow. Content decompression was not triggered if the Content-Length header was missing, so is now also triggered from SocketSessionClosed. Angus -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
