REST Datasnap Server Accepting ECDH Ciphers

[MikeMon 12]

Hi

 

I'm using Delphi 12.2 Patch 2.

 

I've set up a REST Datasnap server that uses HTTPS. Using Indy (installed during Delphi installation), it works fine for RSA certificates. 

 

Any guide on how I can set it up to accept ECDH instead of (or in parallel to) RSA ciphers?

 

Moreover, are there any alternatives to Indy that use TLS1.3? BTW, I updated Indy to the latest version following the update instructions, but it messed up my Datasnap server. I had to uninstall and reinstall Delphi. 😞 

 

[esegece 47]

Hello,

 

The sgcWebSockets library, which I'm the developer, has a component to replace the Indy Datasnap Server and add support for other protocols like websocket and use the latest TLS 1.3 version. You can download the trial for Delphi 12 from:

 

https://www.esegece.com/download/sgcWebSockets_D12.zip

 

In the trial, there is a demo in the folder "..sgcWebSockets\Demos\40.DataSnap\Server_Indy_HTTP" that shows how works. The Datasnap server is replaced by TsgcWSHTTPWebBrokerBridgeServer and all the methods and functions are the same.

If you prefer, you can download the compiled sample from:

 

https://www.esegece.com/download/samples/sgcDatasnap.zip

 

When running the sample check the ssl, select openssl 3.0 and TLS1.3. It uses a self-signed certificate, so when clicking the "Open Datasnap" button, the browser will show a warning that the certificate can not be verified, just accept it.

More info:

 

https://www.esegece.com/websockets

 

Kind Regards,

Sergio

[Remy Lebeau 1475]

On 2/5/2025 at 2:12 AM, MikeMon said:

Moreover, are there any alternatives to Indy that use TLS1.3?

There are a few 3rd party GitHub repos that add OpenSSL 3.x/TLS 1.3 to Indy, including:

 

https://github.com/MWASoftware/Indy.proposedUpdate

https://github.com/JPeterMugaas/TaurusTLS

Edited 9 minutes ago by Remy Lebeau

[MikeMon 12]

7 hours ago, esegece said:

Hello,

 

The sgcWebSockets library, which I'm the developer, has a component to replace the Indy Datasnap Server and add support for other protocols like websocket and use the latest TLS 1.3 version. You can download the trial for Delphi 12 from:

 

https://www.esegece.com/download/sgcWebSockets_D12.zip

 

In the trial, there is a demo in the folder "..sgcWebSockets\Demos\40.DataSnap\Server_Indy_HTTP" that shows how works. The Datasnap server is replaced by TsgcWSHTTPWebBrokerBridgeServer and all the methods and functions are the same.

If you prefer, you can download the compiled sample from:

 

https://www.esegece.com/download/samples/sgcDatasnap.zip

 

When running the sample check the ssl, select openssl 3.0 and TLS1.3. It uses a self-signed certificate, so when clicking the "Open Datasnap" button, the browser will show a warning that the certificate can not be verified, just accept it.

More info:

 

https://www.esegece.com/websockets

 

Kind Regards,

Sergio

Tx. I'll check it out.

 

1 hour ago, Remy Lebeau said:

There are a few 3rd party GitHub repos that add OpenSSL 3.x/TLS 1.3 to Indy (sorry, I don't have the links on-hand at the moment, I'll add them here in a bit). 

 

 

Tx!!