SSL

Last Updated: 9/22/2008

Sections above here:
Home » Deployment » Using SSL

Sections below here:

Topics in this section:
SSL
Converting Certificates

ISAPI / DSO

Introduction

If your application is deployed as an ISAPI DLL or an Apache DSO, you need to use the hosting web server's SSL capabilities since it handles the HTTP protocol. If you have a Verisign certificate, then please see Verisign's instructions how to update your web servers pre-installed Intermediate CA Certificate which may have expired.

Standalone

In Standalone mode, SSL is supported also. The first step is that you must obtain SSL certificates.

Enabling SSL

IntraWeb requires that your certificates are .pem format. To enable SSL support, follow these steps:

Download and install the SSL DLLs. Information on how to obtain the DLLs is available at www.indyproject.org. The DLLs are free.
Set the SSLPort in the ServerController to a value other than 0. The default for SSL support is 443. If you are running a standard web server on the same machine and it supports SSL, it will already be using 443 and you will need to use another port.
Set the SSLCertificatePassword in the ServerController if you assigned a password to your certificates.
Place your certificates in the same directory as the application. The certificates must be named:
- Cert.pem
- Root.pem
- Key.pem

Important: Follow the instructions of your certificate provider how to generate the proper roor and key files. For Verisign please be sure to download their updated root.pem file from here: http://www.verisign.com/support/install2/intermediate.html. The file provided on that page is already in the correct format and does not require further conversion.

If your certificates are not in .pem format, please see the section on converting to PEM format.

Example

An IntraWeb for Delphi example with a test certificate is included and can be seen by examining the StandAloneSSL demo.