OpenSSL 3.0 vs Indy's 1.0.2 + Generating .CSR + HTTPS

[Remy Lebeau]

Now the only suitable Units I found are:
IdOpenSSLIOHandlerClientBase
IdOpenSSLIOHandlerClient
IdOpenSSLIOHandlerClientServer
IdOpenSSLIOHandlerServer

And tried to look for the SSLIOHandler that I can use from them, that can set the TLSv1.3 but couldn't find that. Am I using the correct Units here?

Yes, you are.

Both TIdOpenSSLIOHandlerClient and TIdOpenSSLIOHandlerServer have Options.TLSVersion(Minimum|Maximum) properties, which can be set as low as SSLv3 and as high as TLSv1_3.

[JZS]

Both TIdOpenSSLIOHandlerClient and TIdOpenSSLIOHandlerServer have Options.TLSVersion(Minimum|Maximum) properties, which can be set as low as SSLv3 and as high as TLSv1_3.

Many thanks Remy. It worked.
Really appreciate your support and all what you have been contributing over the years.
As PizzaProgram mentioned, you are a hero to me too. You somehow remind me of BigChimp (Reinier). Always available and always giving to the community, and I know it is not easy.

Thank you.

[JZS]

I just wanted to share my "final experience" after 1 year:

• I had to drop Lazarus, and switch back to Delphi7, because Lazarus could not create a special (non-standard) version of JWS signature the Goverment demanded.
• I've used ICS for the whole project including JSON generation + SSL3 + JWS + some special HTTPS stream-readout, (when the there was some different response code then 200=OK).

So ICS was a great choice, I can recommend it, but sadly it does not run on Lazarus 

What a bummer. I have had this thought several times, when things seem to stop complying on Lazarus, very quickly, Delphi 7 comes in mind.
But never had to abandon Lazarus, with little persistence (oh am very stubborn) things start to come around.

But am glad things worked out for you as you hoped. That all that matters here. We gotta make living. Keep it up.