Re: [twsocket] SSL: error reading key file

2010-08-26 Thread Arno Garrels
Graham Stratford wrote: > Astonishingly (well, to me anyway) I was able to sort out the > problems with my client and server apps. I had copied code from the > OverbyteIcsWebserv demo, and in one place I left in the cast to > TMyHttpClient (or something like that). If I can give any tips to the > g

Re: [twsocket] SSL OnHandshakeDone ceritificate contains emptymembers

2010-08-26 Thread Arno Garrels
Kurt, > Though the certificate seems to have expired I gather that it is being > validated just fine otherwise, and the OnHandShakeDone event returns > ErrCode = 0. Yes, they are both sent by the server and both are expired. The root is not trusted because you obviously did not add it to one of y

Re: [twsocket] SSL: error reading key file

2010-08-26 Thread Graham Stratford
Astonishingly (well, to me anyway) I was able to sort out the problems with my client and server apps. I had copied code from the OverbyteIcsWebserv demo, and in one place I left in the cast to TMyHttpClient (or something like that). If I can give any tips to the group, it's to use TICSLogger an

Re: [twsocket] OpenSSL 1.0

2010-08-26 Thread Svemu - Reparto Sviluppo
I had some problems related to ciphers/TLS when using OpenSSL 1.0 - at least with the build provided by Shining Light Productions. With OpenSSL 0.9.8 build provided by ICS team I had no problems. But it might be related to what is actually built into both builds, because when everything was set

Re: [twsocket] SSL OnHandshakeDone ceritificate contains empty members

2010-08-26 Thread Kurt Andersen
Hi Arno Thank you for the input, this seems to work. Using the ICS ditro supplied certificates, I am getting the following debug print when applying your sample code in the Clients OnSslVerifyPeer event: Checking certificate Subject: /CN=Example CA/ST=Liege/C=BE/emailaddress...@overbyte.be/O=