Hi,
> I just checked in a change that removes these lines, so THttpServer...
I commented out the lines, here, and it works.
Thanks.
Ciao,
Mark
--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our
zayin wrote:
> Hi,
>
> I was finally able to get back to the password failing when it is
> empty. (which is OK)
>
> The lines in the source code that prevent the '' password appear to
> be:
>
> unit OverbyteIcsHttpSrv;
>
> function THttpConnection.AuthDigestCheckPassword(const Password:
> Stri
Empty password should be usable indeed.
--
francois.pie...@overbyte.be
http://www.overbyte.be
- Original Message -
From: "Arno Garrels"
To: "ICS support mailing"
Sent: Wednesday, June 15, 2011 6:56 PM
Subject: Re: [twsocket] HttpServer and password...
Francois PIETTE wrote:
A 401
Francois PIETTE wrote:
>> A 401 is returned.
>>
>> What am I missing?
>
> As I told you in my previous message, you missed that password
> (passed as var to the event handler) is initialized to #0 which is
> NOT an empty string.
I also do not understand why that has something to do with the fac
Francois, what do you think?
I think I will not have more than 2 peoples creating something. Not worth
the effort.
--
francois.pie...@overbyte.be
The author of the freeware multi-tier middleware MidWare
The author of the freeware Internet Component Suite (ICS)
http://www.overbyte.be
--
To un
Francois, what do you think?
Regards,
SZ
On Wed, Jun 15, 2011 at 11:11, daniel cc wrote:
> This would be a good idea..
>
> -Original Message- From: Fastream Technologies Sent: Wednesday,
> June 15, 2011 10:46 AM To: ICS support mailing Subject: [twsocket] Wiki
> article writing incentive
Hello,
>As I told you in my previous message, you missed that password (passed as
> var to the event handler) is initialized to #0 which is NOT an empty
string.
No, I am using what I said:
Password:='';
And you said "This is the proper way."
Mark
--
To unsubscribe or change your settings
I was finally able to get back to the password failing when it is empty.
(which is OK)
The lines in the source code that prevent the '' password appear to be:
unit OverbyteIcsHttpSrv;
function THttpConnection.AuthDigestCheckPassword(const Password: String):
Boolean;
...
if Password = '' the
zayin wrote:
> Hi,
>
> I was finally able to get back to the password failing when it is
> empty. (which is OK)
>
> The lines in the source code that prevent the '' password appear to
> be:
>
> unit OverbyteIcsHttpSrv;
>
> function THttpConnection.AuthDigestCheckPassword(const Password:
> Stri
Thanks Arno :)
-daniel
-Original Message-
From: Arno Garrels
Sent: Wednesday, June 15, 2011 3:40 PM
To: ICS support mailing
Subject: Re: [twsocket] SSL server and CLient cert.
Arno Garrels wrote:
daniel cc wrote:
Hi Arno,
Thanks for the response.
Yes I do understand but,
looks l
Hi,
I was finally able to get back to the password failing when it is empty.
(which is OK)
The lines in the source code that prevent the '' password appear to be:
unit OverbyteIcsHttpSrv;
function THttpConnection.AuthDigestCheckPassword(const Password: String):
Boolean;
...
if Password = '
Arno Garrels wrote:
> daniel cc wrote:
>> Hi Arno,
>> Thanks for the response.
>> Yes I do understand but,
>> looks like, I can't explain correctly.
>>
>> My point is,
>> If I buy a certificate for the server,
>> I need to connect more than 5 clients to the same server.
>> Does this mean, I need t
daniel cc wrote:
> Hi Arno,
> Thanks for the response.
> Yes I do understand but,
> looks like, I can't explain correctly.
>
> My point is,
> If I buy a certificate for the server,
> I need to connect more than 5 clients to the same server.
> Does this mean, I need to have 5 certificate or can I u
Thank you very much :)
Now I got the whole picture.
Best regards
-Original Message-
From: Arno Garrels
Sent: Wednesday, June 15, 2011 2:43 PM
To: ICS support mailing
Subject: Re: [twsocket] SSL server and CLient cert.
Arno Garrels wrote:
If clients may connect from dynamic IP add
Arno Garrels wrote:
> If clients may connect from dynamic IP addresses a certificate
> can neither be issued to an IP nor to a DNS name, hence rather
> useless. In such case a good password is as secure as a client
> certificate that i.e. has some ID in it's common name field.
Not quite correct si
Hi Arno,
Thanks for the response.
Yes I do understand but,
looks like, I can't explain correctly.
My point is,
If I buy a certificate for the server,
I need to connect more than 5 clients to the same server.
Does this mean, I need to have 5 certificate or can I use 1 certificate
which has 5 keys
daniel cc wrote:
> Thanks again,
> can you please clear a bit up,
> I understand the server certification but,
Do you realy?
> where do I get the client key which is that PEM file?
Do you need/want client certificates? If so, the server
will have to verify client certificates during the SSL hand
If I can chip in - I've used Comodo for a while and I'm sorry but their way
of dealing with certifications are very complicated and ridden with delays.
Godaddy works for me these days, not perfect of course, but it's all
automated and no delays. Price is good, too.
-Original Message-
From
Thanks again,
can you please clear a bit up,
I understand the server certification but,
where do I get the client key which is that PEM file?
Is it delivered with the certificate or should I buy that separately?
thanks again.
-Original Message-
From: Fastream Technologies
Sent: Wednesd
If I can chip in - I've used Comodo for a while and I'm sorry but their way
of dealing with certifications are very complicated and ridden with delays.
Godaddy works for me these days, not perfect of course, but it's all
automated and no delays. Price is good, too.
-Original Message-
From
Hello,
If you want SSL, a server certificate is a must. It enables the client to
validate the server's authenticity. If you additionally need the server to
validate the client, then optionally you need a client SSL certificate. Some
of our reverse proxy clients use it since some Microsoft web serv
Thanks mate, very much appreciated :)
Just one more question,
If I am using ICS SSLServer and ICS SSLClients,
I do need the certificate for the server but do I need to buy the PEM file
for the clients as well or how it goes?
What I know is,
Server needs CERT and client needs the PEM file as in
AFAIK Comodo is the cheapest one.
Regards,
SubZero
On Wed, Jun 15, 2011 at 11:11, daniel cc wrote:
> Okay,
> Thanks a lot :)
> I know the different between self made and not self made now.
> How about recommendations?
> can you guys recommend any commercial certs?
> I plan to buy..
>
> Thanks
>
This would be a good idea..
-Original Message-
From: Fastream Technologies
Sent: Wednesday, June 15, 2011 10:46 AM
To: ICS support mailing
Subject: [twsocket] Wiki article writing incentive idea
Hello Francois,
After observing your wiki with not much content for so long time, I ha
Okay,
Thanks a lot :)
I know the different between self made and not self made now.
How about recommendations?
can you guys recommend any commercial certs?
I plan to buy..
Thanks
-Original Message-
From: Francois PIETTE
Sent: Wednesday, June 15, 2011 10:43 AM
To: ICS support mailing
Su
Hello Francois,
After observing your wiki with not much content for so long time, I have
come up with an idea. Why don't you open a "use cases" category where
developers can explain how they use ICS within their projects technically
and more fundemantally why they choose it. In return we should be
Anything that works for Apache would work since they use OpenSSL as well.
Thanks for the response :)
I am so sorry :(, forgot to tell...
I am not using SSL for web communication, I am using the SSLServer and
SSLClient for client to host connection.
I believe this has got nothing to do with Apa
Hello again,
ICS and Apache uses the same open source component called OpenSSL as base
for their SSL features. So any certificate works for Apache works for ICS,
that's what I meant.
Self-signed certificates are open man-in-the-middle attacks.
Regards,
SZ
On Wed, Jun 15, 2011 at 10:43, daniel
Hi,
Thanks for the response :)
I am so sorry :(, forgot to tell...
I am not using SSL for web communication, I am using the SSLServer and
SSLClient for client to host connection.
I believe this has got nothing to do with Apache because there is no apache
used.
I have been using demo server+cli
Anything that works for Apache would work since they use OpenSSL as well.
Regards,
SZ
On Wed, Jun 15, 2011 at 09:36, daniel cc wrote:
> Hi,
> I am using SSL server and SSL client in my application,
> can someone please inform,
> what are the commercial certificates for the component?
>
> This m
30 matches
Mail list logo
