Angus Robertson

I think that says the client can not access their Websocket API, only the server is allowed to do so. A common security measure. Maybe you need an account with whoever offers that Websocket API? Angus

Before I comment any further here, I need you to actually explain what your application is trying to do, you have not done so despite me asking. I was the first to mention NTLM. So two stages here, exactly what proxy configuration, all the actual settings and authentication, xxx where necessary, then what request and authentication. Please bear in mind that NTLM is messy and very hard to test, it's generally only used by private Windows servers that are rarely available for testing. Microsoft probably also messes with it in new server versions. So we only look at if we test it, or rely on contributors to test and fix it. Angus

Why would I roll that back, it's nothing to do the proxy support. And you said you are not using NTLM. Angus

ProxyURL is not designed to work with httpAuthNtlm, don't use it and there is no problem. httpAuthNtlm uses Windows credentials, that is the whole point of it. Mind another ICS user made changes that might be the cause of your problems: Apr 09, 2019 V8.61 OAS : Improved NTLM authentication by adding Single Sign On with NTLM Session on Windows Domain to get credentials without needing them specified here. Angus

Yes, those two DLLs are all you need, ICS uses them it it find them, then falls back to the older versions. Up to you whether you delete the old ones, doing so will relieve long term support problems if the new ones are missing, better to have an error that use something unsupported. Angus

Can not really comment without knowing how are attempting to implement the protocol and undertstanding the protocol itself, and I don't have time now. Angus

Sorry, not interested how ICS V6 behaved, it has changed a little since then. Angus

I'm not really sure how authentication works with proxies, there are separate authentication properties for server and proxy, both default to off. Not sure which causes Authorization: NTLMto be added or if it;'s different for a proxy. You must set ProxyAuth to httpAuthBasic, to use Basic and supply a proxy login. Angus

What version of ICS is this? libeay32.dll is long obsolete and support is discontinuied later this year. You should be using OpenSSL 1.1.1 which has been supported for about a year. Angus

Ideally you want to compare the logs to see any differences between 8.59 and 8.62 on the same PC. Less ideal, between working and non-working PC s on V8.62. What authentication are you trying to use? The server seems to accept basic which is simple, you are using NTLM which is complicated and rarely tested. Certainly never tested NTLM through a proxy. Angus

ICS comes with lots of samples, there is also a wiki to read, I can not write your application here,. The REST example I explained on 19 August could not make it any plainer, the screen says Sync Request or Async Request. Sometimes I suspect you ignore my advice. Angus

SSLMode is used internally by ICS components, it's not something applications normally need to worry about. It determines whether the application makes or receives SSL connections, so a client must be sslModeClient or nothing will work. Disconnection on idle connection is normal, unless you specify keep-alive, but don't know if that is part of the websockets specification. Angus

That is what we call async and sync methods. Angus

No, any v2 is OK for the language files and things, although the new EXE will probably work stand alone. Busy this week, but will create an installer next week. But it might update older settings stopping the older older version working, that was the bug I fixed, corrupted settings, so you may need to delete them to go back to the old version. Angus

I've zipped my new version of UltraExplorer 2.5.1, just files to copy over an existing 2.0 installation, I have the set-up project but not all the files needed in the right places. https://www.magsys.co.uk/download/software/UltraExplorer25beta.zip It's not using MM4 due to crashing destroying the application, not had time to fix that yet. Angus

None of you logging shows the Json parameters you are actually sending to the server, but then we don't know what parameters or authorisation the server requires, and that is outside the scope of ICS support here. I would suggest you try making REST requests to another simpler server first to prove you are using ICS correctly, the REST sample has several simple demos, then worry about your specific application. The error you got {"error":"too few items for 'names', 'names' is required"} suggests you are sending the wrong parameters. Angus

Good news, build UltraExplorer 2.5 OK and it runs. Immediately found the bug that has stopped me running 2.0.3.1 on my main development PC for a year, if UltraOptions.cfg is blank you get a silly start-up error without that filename being mentioned. Now just need to go back and try and put back code I commented out, party it seems because defines in project options and include files are sometimes ignored so certain code never gets built. Then I'll make it all more widely available, somehow. Angus

Think I've found it, ATxClipboard has replaced ClipboardProc. Now looking for the actual version of ATViewer that UltraExplorer uses, to avoid commenting out more lines. Angus

Don't know yet, still finding and installing components needed by various units. Angus

The site still responds, but with a one line response in Chinese, I'm looking for ClipboardProc.pas: http://en.pudn.com/downloads770/sourcecode/delphi_control/detail3055532_en.html Angus

ICS V8.62 has been released at: http://wiki.overbyte.eu/wiki/index.php/ICS_Download ICS is a free internet component library for Delphi 7, 2006 to 2010, XE to XE8, 10 Seattle, 10.1 Berlin, 10.2 Tokyo and 10.3 Rio, and C++Builder 2006 to XE3, 10.2 Tokyo and 10.3 Rio. ICS supports VCL and FMX, Win32, Win64 and MacOS targets. The distribution zip includes the latest OpenSSL 1.1.1c win32, with other versions of OpenSSL being available from the download page. Major Changes in ICS V8.62 include: 1 - The HTTP client has new properties. There is a new THttpAuthType of httpAuthJWT which uses the AuthBearerToken property for Json Web Token authentication. A new ProxyURL property combines four proxy properties as a URL for simplicity, ie http://[user[:password]@]host:port. The new AlpnProtocols property is a request list sent when an SSL connection starts, once connected GetAlpnProtocol returns which protocol the server wants to uses. 2 - Various improvements for automatic X509 SSL certificate ordering to support final ACME RFC8555. AcmeV2 now supports POST-as-GET, GET alone being removed later in 2019. Added Proxy URL support, might be needed for servers behind NAT firewalls for public access. Added support tls-alpn-01 challenge for local web server on 443, but not working yet. 3 - SocketServer now uses a separate local web server for servers not using ports 80 or 443 such as FTP, SMTP, proxies, etc, When ordering X509 SSL certificate using ChallFileSrv challenge. 4 - TWsocket now raises a background exception for user exceptions in the OnDataAvailable event rather than silently ignoring them. If IcsLogger is being used, HandleBackGroundException now logs exceptions and their source to make them easier to find. 5 - In the TSslHttpRest component, TRestParams can add Json parameters as PContJson which means arrays and nested Json can be added. Added a new SslAllowSelfSign property to connect OK to sites with self signed SSL certificates which would normally fail validation. 6 - TSimpleWebSrv now supports SSL, with certificate bundle and host name, and supports the SSL ALPN extension for automatic X509 SSL certificate ordering. 7 - The new TIcsSms component adds support for SMS Works bureau at https://thesmsworks.co.uk/ to send SMS messages, cheaper than Kapow, and allows sender ID to be freely changed. 8 - Updated all .dproj files for all samples to add the ICS source folder to the search path of each project. 9 - Added Time Zone support for date string conversions, to UTC time with a time zone, and back to local time using a time zone, primarily for SMTP email headers which otherwise show UTC time. 10 - TIcsIpStrmLog using TCP server now uses the root bundle correctly and reports the certificate chain and bindings. Ensure all listeners started for TCP Server, if more than one.

ICS V8.62 is now installable from GetIt on recent versions of Delphi. Angus

Having put this off for several years, I'm now attempting to build UltraExplorer 2.5, don't know if the source ever actually built, no exectutable in SVN. Think I've installed all the necessary visual components (not all are listed in About), not necessarily the same versions MustangPeak used for Delphi 7, and I'm using Delphi 2007. The main form loads OK, but I can not find ClipboardProc.pas except on a Chinese site that appears to be dead, anyone got it? Still correcting errors and mismatches between components and forms, not sure the TNT defines are set everywhere. But getting close to building it. Angus

Remy, I can probably help whoever does the Indy upgrade to OpenSSL 1.1.1, I kept good notes of the changes required, functions changed, etc. Angus

Sorry, had a busy summer, will do it in the next few days. Angus