OpenSSL 1.1 Support

[Airmech]

Hi Guys,

What is the state of play with Indy supporting OpenSSL version 1.1?
I know Remy was working on it and said it would take time, but can we expect it anytime soon?

Thanks

Trevor

[rlebeau]

What is the state of play with Indy supporting OpenSSL version 1.1?

Work in progress:

https://github.com/IndySockets/Indy/pull/299

I know Remy was working on it

Actually, I'm not. It is being worked on by someone else. I haven't reviewed it yet, but I monitor the discussion on the ticket. I know there are still some issues being ironed out.

[kudzu]

Cool. Whoever is working on it, kudos as its much needed...

[Airmech]

Hi Guys.

Many thanks for that, any idea how long it will be?
I need to do some other stuff with OpenSSL and don't want to do it using 1.0.2 if 1.1 is going to be ready in the near future.

Regards

Trevor

[rlebeau]

any idea how long it will be?

No ETA. It is ready when it is ready.

Nothing is stopping you from downloading the latest code from the Pull Request at any time and trying it out for yourself. People have had successes with it. Eventually, yes, it will get merged into the main Indy code, but I'd rather not do that until the new code is rock solid (which it is not yet), and conforms to Indy's coding standards. Right now, I'm more interested in seeing the thing work correctly on supported platforms, before I jump in and start reviewing/tweaking it.

[Airmech]

Thanks Remy, I'll look at compiling the new code and giving it a go.

Regards

Trevor

[defaultuser]

Any update on support for openSSL 1.1.1x?

[rlebeau]

Any update on support for openSSL 1.1.1x?

Not change in status at this time. It is still a work-in-progress on the earlier Pull Request. Feel free to download and try the code for yourself, if you'd like.

[edwinyzh]

I'm also looking for an updated OpenSSL for Indy, because I have a program which talks to Gmail and it used to work, now stopped working with error messages like:
>>EIdOSSLConnectError: Error connecting with SSL. EOF was observed that violates the protocol

I guess it has to do with OpenSSL.

Since the new Indy OpenSSL is not available yet, I found https://www.yunqa.de/delphi/products/openssl/index, and it says:
>>Indy can be compiled against YuOpenSSL. YuOpenSSL includes modified sources of the new Indy OpenSSL 1.1.1 IOHander. It adds TLS 1.3 as a new feature. YuOpenSSL is enabled by $defining the YuOpenSSL compiler directive. This makes it easy to switch between Indy with OpenSSL DLLs and Indy with YuOpenSSL (and without DLLs).
>>The new Indy OpenSSL 1.1.1 IOHandler is still in development. Testing is recommended.

So I assume the IOHandler is not mature yet. Anyone has experience with using YuOpenSSL's Indy IOHandler?

[rlebeau]

I'm also looking for an updated OpenSSL for Indy, because I have a program which talks to Gmail and it used to work, now stopped working with error messages like:
  >>EIdOSSLConnectError: Error connecting with SSL.  EOF was observed that violates the protocol

I see you already addressed this on Delphi-Praxis:

https://en.delphipraxis.net/topic/5727-e...ment=70353

Since the new Indy OpenSSL is not available yet, I found https://www.yunqa.de/delphi/products/openssl/index

https://github.com/IndySockets/Indy/issues/410