Re: [twsocket] Fw: ICS SSL Questions

2008-09-28 Thread jlist
Thanks Arno, for the example. I'll give it a try. > Private Key and certificate may exist in the same file. > It's not a method in TX509Base, however you can derive your > own class and add this functionality. Something like below > should do the trick: -- To unsubscribe or change your settin

Re: [twsocket] Fw: ICS SSL Questions

2008-09-27 Thread jlist
Hello Arno, > Usually you do not need a certificate to connect to a SSL server. > Your client might however communicate with multiple servers requesting > a client certificate. If that is case leave both properties unassigned > and handle event OnSslCliCertRequest instead, this is demonstrated in

Re: [twsocket] ICS SSL Questions

2008-09-27 Thread jlist
Hello Arno, Thanks for the reply. >> 3. After I generated the cert files, HttpsTst demo worked fine. My >> question here is, is there an easy way to use an embedded cert and key >> string, as opposed to external files? I notice that the SslContext >> class takes file names. > No way, however bot

[twsocket] ICS SSL Questions

2008-09-27 Thread jlist
Although I was a contributor ICS SSL, I haven't really got to play with it. I gave it a try last night with V6 and had a few questions. 1. I see two sets of .bdsproj files in Vc32 folder, one with Ssl in the file names and have USE_SSL;USE_ZLIB_OBJ defined, one without. Should I install both to us

Re: [twsocket] Poor man's SSL/TLS?

2008-09-11 Thread jlist
you realy believe that any home-grown >> solution, written by non-experts in cryptography could be >> more secure than an open source library that is standard in >> unix world, with contributers like IBM etc.? >> >> -- >> Arno Garrels [TeamICS] >> http://www.

[twsocket] Poor man's SSL/TLS?

2008-09-10 Thread jlist
I was reading TLS's wikipedia page the other day. I find that although it's a lot of work, it is probably not too bad to write the SSL handshake and encryption from scratch, say, with ICS. I must be seriously overlooking the details and complexities. I wonder what are the potential issues of taking

Re: [twsocket] SessionClosed and close/shutdown

2008-08-16 Thread JLIST
Hello Francois and Arno for the replies. I read online that on Unix, close() reduce a ref count for a socket. The last close() will call shutdown() automatically. I'm not sure if the same is true on Windows but I would think so because it makes sense and the whole TCP/IP thing starts on Unix platf

[twsocket] SessionClosed and close/shutdown

2008-08-10 Thread JLIST
Hello all, ICS TWSocket only has a SessionClosed event for close of connection. I suppose a socket.close() from the remote side (or local) will trigger this event. I wonder if shutdown(0/1/2) will also trigger the event? For example, a browser using HTTP/1.0 often sends a request then does a shutd

Re: [twsocket] ICS won't work anymore...

2008-02-27 Thread JLIST
It looks like HttpTst User-Agent header is triggering the firewall on the web server. Use another User-Agent string, it will go through. > Hey, > I got a strange problem, I am downloading (XML) news from > different website, and it all was working for a long time. But now > it won't download anym

Re: [twsocket] UDP Hole Punching

2008-02-23 Thread JLIST
My understanding is that it works on certain types of NAT firewalls. On these NATs, an external port is mapped to an internal IP:Port. If this is the case, all packets going to that external port will go to the internet IP:Port. Making it work is not that simple though, with the difficult part bei

[twsocket] Some components not included in ICS v5

2008-01-25 Thread JLIST
It seems that some components are not included in ICS v5 project file. For example, DnsQuery. Was this intentional? Thanks, Jack -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://w

Re: [twsocket] UDP IP Spoofing Possible with ICS?

2008-01-07 Thread JLIST
Hello Arno, >> Is it possible to UDP IP spoofing with twsocket component? > The only possibility is to use raw sockets with any component > built around winsock API. > You may want to use WinPCap instead > which allows sending raw packets as well. I see. In that case I suppose I can still use I

[twsocket] UDP IP Spoofing Possible with ICS?

2008-01-07 Thread JLIST
Hello all, Is it possible to UDP IP spoofing with twsocket component? Not that I'm trying to create a security threat - it's used in UDP firewall traversal, commonly used in VOIP apps. I think I should be able to do it with raw socket but it doesn't really work very reliably (and it doesn't work