Watch, Follow, &
Connect with Us

For forums, blogs and more please visit our
Developer Tools Community.


Welcome, Guest
Guest Settings
Help

Thread: DataSnap standalone server (EXE) using SSL- TLS 1.2 not supported?


This question is not answered. Helpful answers available: 2. Correct answers available: 1.


Permlink Replies: 2 - Last Post: Nov 7, 2016 6:22 AM Last Post By: Jonathan Wareham
Jonathan Wareham

Posts: 5
Registered: 1/7/12
DataSnap standalone server (EXE) using SSL- TLS 1.2 not supported?  
Click to report abuse...   Click to reply to this thread Reply
  Posted: Oct 14, 2016 8:12 AM
Hi,

I've just created a basic standalone DataSnap server by using the project wizard and choosing the HTTPS protocol, along with a suitable SSL certificate. Everything works fine, except for the fact that it is only supporting TLS 1.0. It's essential for my project that the server supports TLS 1.2. Is there anything I need to do to get it to use TLS 1.2? I've made sure I'm using the latest version of the OpenSSL DLLs.

I'm using Delphi 10 Seattle Update 1. I've looked at the bug fix list for Delphi 10.1 Berlin, and it mentions this one :

RSP-12760; IPPeerAPI lacks TLS 1.2 Support; RTL, RTL\Delphi

Looking at the Jira case RSP-12760 it looks like this might be related, but I kinda think this is a fix for the HTTPS client rather than server.

Can anybody confirm if DataSnap servers built with 10.1 Berlin support TLS 1.2? Or should it work in 10 Seattle?

Many thanks,
Jonathan
Robb Moskow

Posts: 8
Registered: 3/22/07
Re: DataSnap standalone server (EXE) using SSL- TLS 1.2 not supported?  
Click to report abuse...   Click to reply to this thread Reply
  Posted: Nov 3, 2016 12:59 PM   in response to: Jonathan Wareham in response to: Jonathan Wareham
Hello,
Not sure if this will help but I recently worked on an issue where I was attempting to communicate with a Webservice that required TLS 1.2. Some workstations were success where others were not. Finally I figured out the the workstations not working had not updated their browsers to support TLS 1.2. Once I updated the workstations to a browser compatible with IE 11 they worked. Here is a link to determine if your ws protocols are up to date with the TLS v1.2 protocol.

https://www.ssllabs.com/ssltest/viewMyClient.html

Hope this helps.

Robb

Jonathan Wareham wrote:
Hi,

I've just created a basic standalone DataSnap server by using the project wizard and choosing the HTTPS protocol, along with a suitable SSL certificate. Everything works fine, except for the fact that it is only supporting TLS 1.0. It's essential for my project that the server supports TLS 1.2. Is there anything I need to do to get it to use TLS 1.2? I've made sure I'm using the latest version of the OpenSSL DLLs.

I'm using Delphi 10 Seattle Update 1. I've looked at the bug fix list for Delphi 10.1 Berlin, and it mentions this one :

RSP-12760; IPPeerAPI lacks TLS 1.2 Support; RTL, RTL\Delphi

Looking at the Jira case RSP-12760 it looks like this might be related, but I kinda think this is a fix for the HTTPS client rather than server.

Can anybody confirm if DataSnap servers built with 10.1 Berlin support TLS 1.2? Or should it work in 10 Seattle?

Many thanks,
Jonathan
Jonathan Wareham

Posts: 5
Registered: 1/7/12
Re: DataSnap standalone server (EXE) using SSL- TLS 1.2 not supported?  
Click to report abuse...   Click to reply to this thread Reply
  Posted: Nov 7, 2016 6:22 AM   in response to: Robb Moskow in response to: Robb Moskow
Thanks Robb, but my client/browser is fine and does support TLS 1.2. It's the DataSnap server itself that doesn't support TLS 1.2. Embarcadero's only suggestion was to compile the server to an ISAPI DLL for use in IIS, which I find surprising since they make a big deal about DataSnap's ability to have standalone servers without the need for IIS. I'm also surprised I've not seen more reports of the problem, given the importance of TLS 1.2, especially from January 2017 when all iOS apps will be forced to use it.

Jonathan

Robb Moskow wrote:
Hello,
Not sure if this will help but I recently worked on an issue where I was attempting to communicate with a Webservice that required TLS 1.2. Some workstations were success where others were not. Finally I figured out the the workstations not working had not updated their browsers to support TLS 1.2. Once I updated the workstations to a browser compatible with IE 11 they worked. Here is a link to determine if your ws protocols are up to date with the TLS v1.2 protocol.

https://www.ssllabs.com/ssltest/viewMyClient.html

Hope this helps.

Robb

Jonathan Wareham wrote:
Hi,

I've just created a basic standalone DataSnap server by using the project wizard and choosing the HTTPS protocol, along with a suitable SSL certificate. Everything works fine, except for the fact that it is only supporting TLS 1.0. It's essential for my project that the server supports TLS 1.2. Is there anything I need to do to get it to use TLS 1.2? I've made sure I'm using the latest version of the OpenSSL DLLs.

I'm using Delphi 10 Seattle Update 1. I've looked at the bug fix list for Delphi 10.1 Berlin, and it mentions this one :

RSP-12760; IPPeerAPI lacks TLS 1.2 Support; RTL, RTL\Delphi

Looking at the Jira case RSP-12760 it looks like this might be related, but I kinda think this is a fix for the HTTPS client rather than server.

Can anybody confirm if DataSnap servers built with 10.1 Berlin support TLS 1.2? Or should it work in 10 Seattle?

Many thanks,
Jonathan
Legend
Helpful Answer (5 pts)
Correct Answer (10 pts)

Server Response from: ETNAJIVE02