Re: [twsocket] remote SSL certificate verification

2011-09-02 Thread Arno Garrels
Arno Garrels wrote: > If there is one or more errors OnSSLVerifyPeer triggers for each > error of the certificate with OK = 0. Provided that you set OK := 1, otherwise verification stops immediately. -- Arno Garrels -- To unsubscribe or change your settings for TWSocket mailing list please goto

Re: [twsocket] remote SSL certificate verification

2011-09-01 Thread Arno Garrels
Dimitris Botsis wrote: > OK, everything is fine now. > But may I ask something strange (at least for me) I noticed ? > When I use following code to retrieve remote cert : > > form1.SslHttpCli1.URL := 'https://'; > form1.SslHttpCli1.Get; > form1.SslHttpCli1.SslContext.InitContext; Calling SslConte

Re: [twsocket] remote SSL certificate verification

2011-09-01 Thread Dimitris Botsis
OK, everything is fine now. But may I ask something strange (at least for me) I noticed ? When I use following code to retrieve remote cert : form1.SslHttpCli1.URL := 'https://'; form1.SslHttpCli1.Get; form1.SslHttpCli1.SslContext.InitContext; I have noticed that the event "OnSSLVerifyPeer", aft

Re: [twsocket] remote SSL certificate verification

2011-09-01 Thread Dimitris Botsis
On 1/9/2011 9:48 μμ, Arno Garrels wrote: Dimitris Botsis wrote: Hi again, I can read the certificate's Serial Number right, by parsing "cert.GetRawText" at OnSSLVerifyPeer, but is it possible to read the fingerprint too ? The fingerprint isn't a value stored in the certificate but a calculated

Re: [twsocket] remote SSL certificate verification

2011-09-01 Thread Arno Garrels
Dimitris Botsis wrote: > Hi again, > I can read the certificate's Serial Number right, by parsing > "cert.GetRawText" at OnSSLVerifyPeer, but is it possible to read the > fingerprint too ? The fingerprint isn't a value stored in the certificate but a calculated one. Methods Sha1Digest and Sha1Hex

Re: [twsocket] remote SSL certificate verification

2011-09-01 Thread Dimitris Botsis
Hi again, I can read the certificate's Serial Number right, by parsing "cert.GetRawText" at OnSSLVerifyPeer, but is it possible to read the fingerprint too ? I cannot find it in the rawtext I have, may I find it somewhere else ? Thank you. On 28/8/2011 8:42 πμ, Arno Garrels wrote: Dimitris Bo

Re: [twsocket] remote SSL certificate verification

2011-08-27 Thread Arno Garrels
Dimitris Botsis wrote: > Hi again, > from what I understand from you e-mails and tests I tried to do, the > certificate file has to exist locally, where my application that > checks it runs ? > Also in the sample "HttpsTst" cert file has to be provided locally, > isn't it ? Can it use a certificate

Re: [twsocket] remote SSL certificate verification

2011-08-27 Thread Dimitris Botsis
I found the solution, setting "SSLVerifyPeer" to True for SSLHTTPCli's SSLContect and then reading the cert. Thank you. On 27/8/2011 11:18 μμ, Dimitris Botsis wrote: Hi again, from what I understand from you e-mails and tests I tried to do, the certificate file has to exist locally, where my ap

Re: [twsocket] remote SSL certificate verification

2011-08-27 Thread Dimitris Botsis
Hi again, from what I understand from you e-mails and tests I tried to do, the certificate file has to exist locally, where my application that checks it runs ? Also in the sample "HttpsTst" cert file has to be provided locally, isn't it ? Can it use a certificate from an https site being conne

Re: [twsocket] remote SSL certificate verification

2011-08-27 Thread Arno Garrels
Arno Garrels wrote: > use method PostConnection .. Sorry typo, the method name is "PostConnectionCheck". -- Arno Garrels -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.ove

Re: [twsocket] remote SSL certificate verification

2011-08-27 Thread Dimitris Botsis
Thank you very much for all help and information. On 27/8/2011 7:29 μμ, Arno Garrels wrote: Dimitris Botsis wrote: OK, let me explain what I want. I want my client that connects over https to a server, before start exchanging data with server, first to check if the certificate provided by the s

Re: [twsocket] remote SSL certificate verification

2011-08-27 Thread Arno Garrels
Dimitris Botsis wrote: > OK, let me explain what I want. > I want my client that connects over https to a server, before start > exchanging data with server, first to check if the certificate > provided by the server is the right one. I think there is a signature > in certificate which client will

Re: [twsocket] remote SSL certificate verification

2011-08-26 Thread Dimitris Botsis
On 26/8/2011 2:29 μμ, Arno Garrels wrote: Dimitris Botsis wrote: "remotely" I mean that client must contact server in order to find certificate and then verify it to see if it contains signature that client expects in order to establish trusted connection. Thank you for replying I still do not

Re: [twsocket] remote SSL certificate verification

2011-08-26 Thread Arno Garrels
Dimitris Botsis wrote: > "remotely" I mean that client must contact server in order to find > certificate and then verify it to see if it contains signature that > client expects in order to establish trusted connection. Thank you > for replying I still do not understand. A client must always conn

Re: [twsocket] remote SSL certificate verification

2011-08-26 Thread Dimitris Botsis
"remotely" I mean that client must contact server in order to find certificate and then verify it to see if it contains signature that client expects in order to establish trusted connection. Thank you for replying 26 Αυγ 2011, 11:00 π.μ., ο/η "Arno Garrels" έγραψε: > Dimitris Botsis wrote: >>

Re: [twsocket] remote SSL certificate verification

2011-08-26 Thread Arno Garrels
Dimitris Botsis wrote: > How can a client that connects with https verify the server's SSL > certificate remotely ? What do you mean by "remotely"? Take a look at two samples in the SslInternet folder: OverbyteIcsHttpsTst and OverbyteIcsMsVerify. -- Arno Garrels -- To unsubscribe or change you