Recent

Author Topic: IndySecOpenSSL is now available on OPM  (Read 3032 times)

tonyw

  • Sr. Member
  • ****
  • Posts: 366
    • MWA Software
Re: IndySecOpenSSL is now available on OPM
« Reply #30 on: Today at 05:39:38 pm »
I tried with OpenSSL 4.0.1, and 3.5.7 with TaurusTLS and IndySec (all updated).

All work good.

Only issue (not blocking) is that with IndySec tha SSLTEST reports this issse (while TaurusTLS is good), see images. The orange text ('Chain issues    Contains anchor') indicate the issue.

The code is exactly the same, except for use of "Context" derived for proper SSLContext and other assigned path.

P.S.: in the code there is (in the SSLOptions)

Code: Pascal  [Select][+][-]
  1. UseSystemRootCertificateStore := false;
Not sure what is going on here. Your images appear to be displaying two different certificate files. The first contains 2 certs and the second contains 3 certs. So you are not comparing like with like.

However, your post did make me look at the code in this area and I noticed a regression from IndySecOpenSSL version 1.0 in the current version. That is UseSystemRootCertificateStore is bring ignored and it will hence always load the System Root Cert Store. That I will fix.

Thaddy

  • Hero Member
  • *****
  • Posts: 19268
  • Glad to be alive.
Re: IndySecOpenSSL is now available on OPM
« Reply #31 on: Today at 06:24:37 pm »
The anchor is probably a #13. It should not be there.
objects are fine constructs. You can even initialize them with constructors.

 

TinyPortal © 2005-2018