Hello,

One of our customers has "Could not load certificate. error:00000000:lib(0):func(0):reason(0)" errors. 
They said that Web Server intermittently reports an exception stating that the certificates cannot be loaded (after stopping and restarting the Web Server on some occasions no exceptions are raised). 

IntraWeb version: 14.1.2

Please see attached exception file
  WebServer_Logs.txt (Size: 117.63 KB / Downloads: 2)

I can not reproduce it on my PC. Has anybody ever encountered such a error?

Today we received 2 different support requests from users informing that their Antivirus software identified IW14.2.8.exe as a virus/trojan. Among the AV software we find Kapersky, Zone Alarm, Windows Defender and Symantec.

Kapersky is famous for its heuristic engine false positives, specially against binaries compiled by any Delphi version. Zone Alarm shares the same engine so whenever Kapersky reports something, Zone Alarm will do the same. (Un)Fortunately, Delphi is one of the few *real* programming languages left and that's why it is used by many virus creators 

We have reported the false positives to Microsoft and Symantec. We already have Symantec response, confirming that the report is a false positive, as follows:

executeAjaxEvent(
        '&xml="'+OBJtoXML(arrayCombo4)+'"',
        null,
        "LOANFORM.addXML",
        false,
        null,
        false
    );
i set up my call back in background as addXML but reason is i getting this 

   

help me

Hi Guys

We are having some bugs in our application after migrating our source code from delphi 7 to XE2. Indy 9 and  was used in delphi 7 and XE2 respectively. 

The application is dll encapsulated windows COM Object and hosted with GUI.  

We use TCPClient that continuously send and receive data from a device (Server) every 2 seconds. Sending of data to the server is done in the Main Thread while reading the response in another Thread. FIdClient.IOHandler.Write(sData + FSendRcvTerminator, TEncoding.ANSI) for sending the data and reading with FClient.IOHandler.ReadBytes(LBuffer, -1, false). The application do work perfectly for days or weeks without any problem but after a while all the processes in the Main Thread hanged and stop responding meanwhile the processes in the other Thread continue working. It has been very difficult for us to locate the course of this problem.  Sending data with FIdClient.IOHandler.Write(sData + FSendRcvTerminator, TEncoding.ANSI)  to the Server from the other Thread gets the hanged processes in Main Thread working again. We are actually not satisfy with this workaround and want to know the course. The same code written in delphi 7 and Indy 9 is working without any problem.

The only difference in our code is that with indy 9 we did not use IOHandler to write or read from the socket.  What are we doing wrong here!       
       
Thanks

Hi
 
I am not able to get my new product out of evaluation mode. I have not installed the version that comes with delphi, I have searched for all iwlicense files, deleted the DCUs and still not working. I have created a new intraweb standalone project and I get the following, no reason for the evaluation mode is given. I also have source in the path, I have traced the call to 'SetLicenseKey' and it is setting the correct key and its only called once, please help.
 
 
 
My IntraWeb Application (Indy - x86)
Evaluation Mode
Reason:
IntraWeb Version: 15.0.6
Build Date: Jun 19, 2018
32-bit Server on 64-bit Windows
HTTP Server is active on port: 62380
--------------------- ---------------------

Hi

i am trying to create/upgrade to the latest intraweb 15.0.6 from version 11.

We have a custom standalone server, now the references i have seen state to use the code:

IWStandAloneServer1.Start(TIWHTTPServerModule);

my problem is that there is no component TIWHTTPServerModule in the source or installation folders, im on ultimate with source.

has anyone setup a custom standalone server with v15?

Also none of the demos help as they are all for v14, otherwise i am going back a version.

I have a couple of large applications developed in C++Buiilder 2007 that use Indy 10.1.15.  They do work fine and I'm not interested in converting them to a newer version of Rad Studio.  One of the owners wants to change from using his current mail host to G-Suite, which puts me in a bit of a pickle.  The old embedded email part of the program was just plain.  No TLS/SSL.  I'm having the problem that many others faced with the program not being able to load SSL libraries.  I did put the appropriate dlls for OpenSSL 1.02 in the programs folder.  The program does seem to try to use these dlls, but something else is getting in the way. 

I've used WhichFailedToLoad() and get a strange response whether the dlls are in my program directory or not.  Here's what WhichFailedToLoad() returns

SSL_CTX_set_info_callback_indy
X509_STORE_CTX_get_app_data_indy
X509_get_notBefore_indy
X509_get_notAfter_indy
SSL_SESSION_get_id_indy
SSL_SESSION_get_id_ctx_indy
SSL_CTX_get_version_indy
SSL_CTX_set_options_indy
des_set_odd_parity
des_set_key
des_ecb_encryp

The IdOpenSSLSetLibPath isn't available in the Indy 10.1.15 to force the program to use the dlls from a specific directory.  It is available in the the version in Seattle, which I have.  But, I need to solve this problem with the code base that I have in BCB2007 ... it's a pretty big program.   I have thought of updating to a later version of Indy, but don't know what the effect would be on the overall program, or even if it is possible given that it's unicode.  The only part of Indy 10 that I'm using is the units related to sending mail. 

Other than that, I do need to solve the inability to load the OpenSSL dlls.    Can now load the dlls, but had to use dlls  from 096.  They worked, but I did have to tag the gmail account I was using as an insecure app.  I don't know how well that will work for G-Suite.  The G-Suite account is ready for use, but the customer is still trying to get a master password to their current webhost that will allow them to transfer their MX records.

Seattle10
Intraweb 14.2.5
FastReports 5.0
TMS Intraweb Components
Raize 6.2.1

After deployment, I can access the dll page once. After closing out the page isnt accesible anymore. There is no error log or exception log.

I have set allowmultipleusersessions to true in the servercontroller.

Thanks in advance.

>>>>Posted: Nov 3, 2017 7:52 AM    in response to: Gerrit Schurer
>>>>Gerrit Schurer wrote:
>>>>Context : Intraweb 14.2.3, Delphi Tokyo 10.2
>>>>My Intraweb application has the RestartExpiredSession set to true.

>>>In my previous Intraweb version this resulted in a restart of a
>>>>session whenever I restarted the standalone server application
>>>>and clicked anything in the old browser session (or waited for
>>>>an asynchronous timer event to happen). In 14.2.3 I get a 404
>>error ? Maybe it is a simple setting I missed ? Maybe I can get
>>>>around it or create a custom 404 page that does the restarting.
>>>>How can I create such a page ?

>>I'm also experiencing this but just on async events when the session
>>expires or is invalid from recycling the service.



This still appears to happen (using 14.2.7) but only on mobile Safari.  


To reproduce: 

• Access the IW page.
  
• Swipe away the browser.
  
• Wait until the session ends.
  
• Access the IW page again (without using a bookmark, Safari appears to cache the last accessed page).
  
• In my case, I click past an initial CGDevTools dialog then get a 404.  Clicking on the IW 404 page fixes it as does accessing through a bookmark.
   

hi , i am facing some kind of ddos attack on my idtcpserver port

my firewall works really fine on my ubuntu machine to block those bad ips and drop there packets

but why tidtcpserver application gets unresponsive while such attack is happened ?

i dont have any none thread safe access in my code

here is the full server code