SSl witout any DLL

[limelect 48]

I am using tothpaul\Delphi-master\Indy.SChannel with great success in testing my software

However, my provider did an update on his server and now I cannot get my text file at

https://limelect.com/UpDate/document-projects.txt

I get a protocol error

My provider answered me this

 

"So the problem is probably in the software settings.
See that TLS is at least 1.2

And in addition, make sure that there is trust for the SSL certificate"

 

I was looking into finding SSL version and could not find a good source for that

I was trying this  answer without any success

https://stackoverflow.com/questions/41127514/how-to-determine-which-tls-ssl-protocol-was-negotiated-when-using-sslvsslv23

 

Any idea what I should do next?

 No DLL plz

 

P.S D10.2.3 Indy 10

 

 

Edited October 21 by limelect

[dummzeuch 1515]

46 minutes ago, limelect said:

No DLL plz

 

P.S D10.2.3 Indy 10 

Are you aware that Indy also uses DLLs for SSL? I don't know of any solution that does not require DLLs.

[limelect 48]

@dummzeuchtothpaul\Delphi-master\Indy.SChannel 

 

does

Using it with great success  until now

Edited October 21 by limelect

[limelect 48]

@dummzeuch By the way his last vers is tls 1,3

Edited October 21 by limelect

[Frickler 11]

On 10/21/2024 at 11:02 AM, dummzeuch said:

Are you aware that Indy also uses DLLs for SSL? I don't know of any solution that does not require DLLs.

There is a commercial add on to Indy called YuOpenSSL, that replaces OpenSSL DLLs with Delphi DCUs.

[dummzeuch 1515]

5 hours ago, Frickler said:

There is a commercial add on to Indy called YuOpenSSL, that replaces OpenSSL DLLs with Delphi DCUs.

Interesting project. You can also buy the sources.

But they use Digital River to sell their licenses ...

[Angus Robertson 577]

I integrated YuOpenSSL into ICS three years ago and alternate using it and OpenSSL for testing. ICS also allows the OpenSSLs to be compiled into applications as resources to ease distribution and DLL hell, all three variants work identically.  But applications are larger with YuOpenSSL or resource files. 

 

Using SChannel may seem simpler, but your cryptography and updates are then locked to the OS, Microsoft only reluctantly support TLS/1,2 With Windows 2008 but did not support EC certificates, and TLS/1.3 took a long time to arrive. In ICS, I've worked with many of the Windows crypto APIs, and they are horrible.  

 

Angus

 

 

Angus

 

[limelect 48]

My test with SChannel 

After my provided did not help much I communicated

with 2 more providers.

One had the same problem that I could not use his server with

SChannel but the other one was OK.

While testing I found that on Windows 7 things did not work but with

Windows 11 was OK.

No one understands what is going on.

In my case, I had to move to a new provider where the SChannel worked.

with Windows 7

 

Edited October 30 by limelect