Re: [twsocket] MagFtp and SslContext
> My application is a LAN backup application and users want to use FTP to additionally secure their data. SSL certificates are used to make sure the client connect to the server it thinks it connect and that the server is sure about who is the client. Encryption of data take place even if there is no certificate involved. -- francois.pie...@overbyte.be Embarcadero MVP http://www.overbyte.be http://francois-piette.blogspot.com -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] MagFtp and SslContext
That is a huge relief. Thank You. On Wed, Apr 17, 2013 at 12:10 PM, Angus Robertson - Magenta Systems Ltd < an...@magsys.co.uk> wrote: > > I do not have much knowledge about SSL but I presume SSL > > certificates are required if my client decides to use a FTPS site. > > No, it is not necessary for client software to check SSL certificates to > use SSL connections, the data is still encrypted. Checking the > certificate is an extra level of security to ensure the data is coming > from the correct server. > > Certificate checking can be done, most of the code is there in TMagFtp, > but there is an extra overhead for each connection, and more errors to > handle if the certificate fails checks. > > Server software always needs a SSL certificate. > > Angus > > > -- > To unsubscribe or change your settings for TWSocket mailing list > please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket > Visit our website at http://www.overbyte.be > -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] MagFtp and SslContext
> I do not have much knowledge about SSL but I presume SSL > certificates are required if my client decides to use a FTPS site. No, it is not necessary for client software to check SSL certificates to use SSL connections, the data is still encrypted. Checking the certificate is an extra level of security to ensure the data is coming from the correct server. Certificate checking can be done, most of the code is there in TMagFtp, but there is an extra overhead for each connection, and more errors to handle if the certificate fails checks. Server software always needs a SSL certificate. Angus -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] MagFtp and SslContext
Hi Angus, My application is a LAN backup application and users want to use FTP to additionally secure their data. I do not have much knowledge about SSL but I presume SSL certificates are required if my client decides to use a FTPS site. Can you guide me, I did not fully understand you above email ? On Tue, Apr 16, 2013 at 2:20 PM, Angus Robertson - Magenta Systems Ltd < an...@magsys.co.uk> wrote: > > How do I specify Ssl Certificates in MagFtp component ? > > Sorry, certificate chain and host checking was never fully implementing > in TMagFtp. There is a lot of commented out code, probably taken from > the ICS FTP client SSL demo, that could be restored, but it's untested, > and includes a modal dialog box that is not ideal for a component. > > Angus > > -- > To unsubscribe or change your settings for TWSocket mailing list > please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket > Visit our website at http://www.overbyte.be > -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] MagFtp and SslContext
> How do I specify Ssl Certificates in MagFtp component ? Sorry, certificate chain and host checking was never fully implementing in TMagFtp. There is a lot of commented out code, probably taken from the ICS FTP client SSL demo, that could be restored, but it's untested, and includes a modal dialog box that is not ideal for a component. Angus -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
