Re: [twsocket] 535 SSL handshake failed. Error #1

2010-09-08 Thread Svemu - Reparto Sviluppo
From: "Arno Garrels" It might be that the application loaded some incompatible OpenSSL libraries unless the full path and filenames are specified. try GSSLEAY_DLL_Name := ; GLIBEAY_DLL_Name := ; MySslContext.InitContext; // loads the libraries and initializes the SslContext except

Re: [twsocket] 535 SSL handshake failed. Error #1

2010-09-08 Thread Arno Garrels
Hello, Svemu - Reparto Sviluppo wrote: >>> 09.42.57.040 00A6D550 212 [32] error:14077447:SSL >>> routines:SSL23_GET_SERVER_HELLO:reason(1095) >> >> Error number 1095 seems to mean const SSL_R_KRB5_C_GET_CRED >> which has been changed from 1095 to 287 in OpenSSL 0.9.8a >> to 0.9.8b. Dunno the me

Re: [twsocket] Multiple NICs question

2010-09-08 Thread Lester
You can only have one default route out of your machine. You CAN make two default routes, but the one with the lowest metric will win. If you have two interfaces with the same metric, the first interface will win. If you want to specifically route the traffic through the second interface, yo

Re: [twsocket] 535 SSL handshake failed. Error #1

2010-09-08 Thread Svemu - Reparto Sviluppo
09.42.57.040 00A6D550 212 [32] error:14077447:SSL routines:SSL23_GET_SERVER_HELLO:reason(1095) Error number 1095 seems to mean const SSL_R_KRB5_C_GET_CRED which has been changed from 1095 to 287 in OpenSSL 0.9.8a to 0.9.8b. Dunno the meaning of this error, may have to do with Kerberos. H

Re: [twsocket] PASV fallback to public IP

2010-09-08 Thread Arno Garrels
Angus Robertson - Magenta Systems Ltd wrote: >>> Or simply: >>> >> echo $_SERVER[REMOTE_ADDR]; > > This still needs be running on a public server somewhere! > I don't have PHP on mine. > >> BTW: The NAT trouble will stop with IPv6. > > And introduce lots of new problems instead. My new Sonicwal

Re: [twsocket] SSL OnSslVerifyPeer vs. OnSslHandshakeDone event

2010-09-08 Thread Arno Garrels
Kurt, > I'm a bit puzzled about what the exact purpose of the HandshakeDone > event is then. > > > > Is it to verify that the SSL connection is now complete with(out) > errors ? > When it triggers without error the certificate chain verification completed successfully. In case of option SslV

Re: [twsocket] HTTPcli: source path question

2010-09-08 Thread Zvone
> Well, then I have a question: maybe you have some ideas of how to organize > recursive download: for example, if user started to download > www.example.com/path/index.html, we should also accept > www.example.com/path/logo.jpg and so on, but not www.example.com/index.php. > If user started ww

[twsocket] Multiple NICs question

2010-09-08 Thread Fastream Technologies
Hello, I have a customer who wishes to use our ICS-based product to cache/proxy between connection in two different NICs with different IPs. The listening part is trivial. He says Winsock cannot automatically route the traffic to the second NIC outbound port when a public IP is destinated. I have

Re: [twsocket] PASV fallback to public IP

2010-09-08 Thread Angus Robertson - Magenta Systems Ltd
>> I have a nagging feeling that NAT address manipulation may only >> happenwith FTP clients, if it fails then people use passive mode. > > This issue happens in passive mode. When FTP client sends PASV > command it gets a response which contains private IP address... Irrelevant, we are talking

[twsocket] SSL OnSslVerifyPeer vs. OnSslHandshakeDone event

2010-09-08 Thread Kurt Andersen
Hi Being a newbie on the SSL front I am a bit confused about the events "OnSslVerifyPeer" and "OnSslHandshakeDone" of the TSslWSocket. Arno helped me out in a previous post and explained the "SslVerifyPeer" event as: "The purpose of SslVerifyPeer is to check for a complete, valid a

Re: [twsocket] PASV fallback to public IP

2010-09-08 Thread Fastream Technologies
If it is all the NAT to blame, how could NAT devices translate the FTPS PASV responses? SZ On Wed, Sep 8, 2010 at 1:03 PM, Kristof Gajsek wrote: > >I have a nagging feeling that NAT address manipulation may only happen > >with FTP clients, if it fails then people use passive mode. > > This issue

Re: [twsocket] PASV fallback to public IP

2010-09-08 Thread Kristof Gajsek
>I have a nagging feeling that NAT address manipulation may only happen >with FTP clients, if it fails then people use passive mode. This issue happens in passive mode. When FTP client sends PASV command it gets a response which contains private IP address... >Adding the same feature as FileZilla

Re: [twsocket] 535 SSL handshake failed. Error #1

2010-09-08 Thread Arno Garrels
Svemu - Reparto Sviluppo wrote: > Hi, > i've a problem with on a customer pc. > > When i try to open a connection over tls layer, i recive the error > "535 SSL handshake failed. Error #1". > > I use the last ICS package and delphi 2010, i use > OverbyteIcsSslFtpTst.exe for this test. Have you tr

[twsocket] UDP...

2010-09-08 Thread zayin
Hi, Using TCP, when I call connect I can supply an IP address or a hostname. For UDP, I call listen without setting up an IP address or hostname. For UDP, I use SendTo and one of the parameters is the TSockAddrIn. I can populate it and all is fine. Now, if the user supplies a hostname and not

[twsocket] 535 SSL handshake failed. Error #1

2010-09-08 Thread Svemu - Reparto Sviluppo
Hi, i've a problem with on a customer pc. When i try to open a connection over tls layer, i recive the error "535 SSL handshake failed. Error #1". I use the last ICS package and delphi 2010, i use OverbyteIcsSslFtpTst.exe for this test. Anyone can help me? Best regards daniele This is Ic

Re: [twsocket] HTTPcli: source path question

2010-09-08 Thread Fastream Technologies
Hello Anton, You must parse the HTML for this. We use a Delphi HTML parser which I downloaded from sourceforge for this but sometimes it raises an exception. Search for that and if you cannot find it I will do my best to search it for you in our projects... Regards, SZ On Wed, Sep 8, 2010 at 10

[twsocket] Experimental built-in throttle and timeout changed again

2010-09-08 Thread Arno Garrels
Hi, Just checked-in rev. #588-590, a rework of the experimental throttle and timeout features. Log: TFtpClient - If conditional BUILTIN_THROTTLE is defined the bandwidth control uses TWSocket's built-in throttle code rather than TFtpClient's. Files: U trunk/Delphi/Vc32/OverbyteIcsFtpCli.pas

Re: [twsocket] HTTPcli: source path question

2010-09-08 Thread Anton S.
Francois wrote: >In HTTP world, there is no real directory concept. There are only documents. >It happens that some webservers, if configured so could display a directory >content if the default document is missing. That directory content is a HTML >page built automatically by the webserver. Yes