Re: First version of LC that supports httpS?

[Klaus major-k via use-livecode]

Hi Mark and Sean

> Am 19.10.2020 um 18:55 schrieb Mark Waddingham via use-livecode 
> :
> 
> On 2020-10-19 17:31, Klaus major-k via use-livecode wrote:
>> Hi all,
>> see subject, maybe someone happens to know.
>> Obviously LC 5.02 does not support httpS yet.
> 
> HTTPS has been supported since engine version 2.6 judging by the libURL 
> source - so that would be LiveCode 2.x (for some 'x' - I can't remember the 
> exact version the engine version and the - what was Revolution - version 
> synced up).
> 
> However, it is unlikely that https will work anymore from those engines with 
> any suitably maintained web-server since the SSL protocol version they use 
> will likely be judged insecure by the server and thus not allow connection. 
> (Although that can be very unwisely changed on the webserver side).
> 
> Another facet here will be the 'root certificate bundle' which will almost 
> certainly be well out of date for older engines (at some point we did make 
> collection of SSL certificates from the OS automatic - that was before 6.0 by 
> the look of it).
> 
> Warmest Regards,
> 
> Mark.

thanks a lot for your answers!


Best

Klaus
--
Klaus Major
https://www.major-k.de
kl...@major-k.de


___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

Re: First version of LC that supports httpS?

[Sean Cole (Pi) via use-livecode]

Thanks for the heads up Mark. Appreciated.

TLS 1.3 is coming next year which will likely shake the tree again.

I've been trying it in LC 9 too and get just the same
functionality/responses/traffic as in 5.0.2 using the LC9 revsecurity.dll

HTTPS is working directly in LC9 and 5.0.2. But SQL with the correct
certificate ca, client-cert and client-key pem files still does not seem to
use SSL. But there is no real sure way of seeing if it does. I've tried a
SHOW STATUS request but it's not giving back the status response, just an
integer. It's getting super frustrating going round in circles.

Sean


On Mon, 19 Oct 2020 at 17:55, Mark Waddingham via use-livecode <
use-livecode@lists.runrev.com> wrote:

> On 2020-10-19 17:31, Klaus major-k via use-livecode wrote:
> > Hi all,
> >
> > see subject, maybe someone happens to know.
> > Obviously LC 5.02 does not support httpS yet.
>
> HTTPS has been supported since engine version 2.6 judging by the libURL
> source - so that would be LiveCode 2.x (for some 'x' - I can't remember
> the exact version the engine version and the - what was Revolution -
> version synced up).
>
> However, it is unlikely that https will work anymore from those engines
> with any suitably maintained web-server since the SSL protocol version
> they use will likely be judged insecure by the server and thus not allow
> connection. (Although that can be very unwisely changed on the webserver
> side).
>
> Another facet here will be the 'root certificate bundle' which will
> almost certainly be well out of date for older engines (at some point we
> did make collection of SSL certificates from the OS automatic - that was
> before 6.0 by the look of it).
>
> Warmest Regards,
>
> Mark.
>
> --
> Mark Waddingham ~ m...@livecode.com ~ http://www.livecode.com/
> LiveCode: Everyone can create apps
>
> ___
> use-livecode mailing list
> use-livecode@lists.runrev.com
> Please visit this url to subscribe, unsubscribe and manage your
> subscription preferences:
> http://lists.runrev.com/mailman/listinfo/use-livecode
>
___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

Re: First version of LC that supports httpS?

[Mark Waddingham via use-livecode]

On 2020-10-19 17:31, Klaus major-k via use-livecode wrote:

Hi all,

see subject, maybe someone happens to know.
Obviously LC 5.02 does not support httpS yet.


HTTPS has been supported since engine version 2.6 judging by the libURL 
source - so that would be LiveCode 2.x (for some 'x' - I can't remember 
the exact version the engine version and the - what was Revolution - 
version synced up).


However, it is unlikely that https will work anymore from those engines 
with any suitably maintained web-server since the SSL protocol version 
they use will likely be judged insecure by the server and thus not allow 
connection. (Although that can be very unwisely changed on the webserver 
side).


Another facet here will be the 'root certificate bundle' which will 
almost certainly be well out of date for older engines (at some point we 
did make collection of SSL certificates from the OS automatic - that was 
before 6.0 by the look of it).


Warmest Regards,

Mark.

--
Mark Waddingham ~ m...@livecode.com ~ http://www.livecode.com/
LiveCode: Everyone can create apps

___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

Re: First version of LC that supports httpS?

[Sean Cole (Pi) via use-livecode]

5.0.2 supports https but not TLS1.2

I got around this by using the revSecurity.dll from LC9 which works.

On Mon, 19 Oct 2020 at 17:31, Klaus major-k via use-livecode <
use-livecode@lists.runrev.com> wrote:

> Hi all,
>
> see subject, maybe someone happens to know.
> Obviously LC 5.02 does not support httpS yet.
>
> Thanks a lot in advance!
>
>
> Best
>
> Klaus
> --
> Klaus Major
> https://www.major-k.de
> kl...@major-k.de
>
>
> ___
> use-livecode mailing list
> use-livecode@lists.runrev.com
> Please visit this url to subscribe, unsubscribe and manage your
> subscription preferences:
> http://lists.runrev.com/mailman/listinfo/use-livecode
>
-- 
Sean Cole
*Pi Digital Productions Ltd*
www.pidigital.co.uk
+44(1634)402193
+44(7702)116447
'Don't try to think outside the box. Just remember the truth: There is no
box!'
'For then you realise it is not the box you are trying to look outside of,
but it is yourself!'

eMail Ts & Cs    Pi Digital
Productions Ltd is a UK registered limited company, no. 5255609
___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

First version of LC that supports httpS?

[Klaus major-k via use-livecode]

Hi all,

see subject, maybe someone happens to know.
Obviously LC 5.02 does not support httpS yet.

Thanks a lot in advance!


Best

Klaus
--
Klaus Major
https://www.major-k.de
kl...@major-k.de


___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode