asked on

idtcpserver and idtcpclient encryption using ssl

Note i don't have certificate in hand right now

after i search on google on how to use SSL with idtcpserver i found a few details , that i have to drop TIdServerIOHandlerSSLOpenSSL on the server form and assign its property as needed as example

IdServerIOHandlerSSLOpenSSL.SSLOptions.KeyFile:= ....;
IdServerIOHandlerSSLOpenSSL.SSLOptions.CertFile:= ....;
IdServerIOHandlerSSLOpenSSL.SSLOptions.RootCertFile:= ....;

Open in new window

sense i have no certificate in hands right now i have to use it without certificate until i get one . currently i only care about encryption .

also i don't feel that is right to drop IdServerIOHandlerSSLOpenSSL and use it for all connected clients . should i create ssl to each client connected on connect event ?

i really dont understand how to assign ssl properly to each connected client .

Sinisa Vuk

Look at this examples (of how to use ssl in Indy) ...
There are sample certificates included too... So you can test properly ...
Server side requires only one instance of a key (ssl component) - because server have own certificate - but clients might have own (different)....

madam mar

ASKER

i see this example but i dont have ssl certificate in hand can i use it without certificate can you show me how ?

Sinisa Vuk

Simply, don't set ssl property .... If you look closely - in example folder is sample certificate (3 files)....
Run example ....

madam mar

ASKER

i did that but the client unable to connect to the server

Sinisa Vuk

With a reason? (error code)

madam mar

ASKER

---------------------------
Debugger Exception Notification
---------------------------
Project sslClient10.exe raised exception class EIdOSSLUnderlyingCryptoError with message 'Error connecting with SSL.
error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure'.
---------------------------
Break Continue Help
---------------------------

Sinisa Vuk

please check in IE under Security if you have enabled SSLx.x, TLSx.x - which you use ...

examples use: SSLOptions.Method = sslvTLSv1

madam mar

ASKER

its already set to sslvTLSv1 i checked the security tab over ie there is no SSL property at all

Sinisa Vuk

There is .... under Internet options/Advanced tab - at bottom - there are Use SSL 2.0, ...
Put all checks for a start...

madam mar

ASKER

i checked them all still cannot read from the client

Sinisa Vuk

... same error? do you run client on same machine as server is?

madam mar

ASKER

yes both on same machine on windows 8.1

Sinisa Vuk

Set properties for both server and client:

IdSSLIOHandlerSocketOpenSSL1.SSLOptions.Method := sslvTLSv1_2;
IdSSLIOHandlerSocketOpenSSL1.SSLOptions.SSLVersions := [sslvTLSv1_2];

madam mar

ASKER

same doesn't read without certificate

Sinisa Vuk

?? do you run example or your app?
Example works for me on win 7 + appropriate libeay32.dll, ssleay32.dll in app folder....

madam mar

ASKER

i dont know maybe the way i set up the onconnect event ?

procedure Tform1.TcpServerConnect(AContext: TIdContext);
var
  Connection: Tclient;
begin
  Connection := AContext as Tclient;
.... what to do here?
end;

Open in new window

ASKER CERTIFIED SOLUTION

Sinisa Vuk

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial