Could not load SSL library error

[bob9999]

I just upgraded to IW15 ultimate in delphi 10.2.  Now when I am loading the local standalone gui, there is the message "Could not load SSL library" but my application loads in the assigned port 65100 and I seem to be able to run this locally OK.  When I install this with no GUI as a windows service on a server, it does not seem to listen to the port at all or something else is wrong since there is the message :TIWServiceThread.Execute: Could not load root certificate" is the log when I start the service.  On the server I cannot load the application at all.

I tried installing OpenSSL 64 bit since I kept seeing that all over the place on threads but the SSL messages persist.  On the Atozed SSL download page the package links there are crossed out and the links broken.

In the previous bundled IW14 version the port would be randomly assigned so I upgraded and locally the port is what I assign but on the server that same port seems to have an issue.

The key issue I am trying to solve on this thread is the SSL messages and the port information is just added for clarity on all that is going on at the server.

Cheers.
bob

[Alexandre Machado]

I assume you are enabling HTTPS on your IW application, right?

Please download your OpenSSL DLLS from Indy Fulgan page which keeps compatible Open SSL binaries. Please notice that you must use 32-bit DLLs in a IW 32-bit application and 64-bit DLLs in a 64-bit IW application:

https://indy.fulgan.com/SSL/

You must copy libeay32.dll and ssleay32.dll to the same folder where your IW EXE is.

You must also copy cert.pem, key.pem and root.pem (The root certificate) to the same folder.

Then it will work.

How did you get the certificate?

There is a complete Https demo here on github: https://github.com/Atozed/IntraWeb/tree/...yHttpsDemo

It explains step by step how to get a FREE certificate from Let's Encrypt using ZeroSSL.com service and installing it in your IW application, including a link to the root certificate. It won't take more than 10 minutes to set it up.

[bob9999]

Hi there. That is the issue and confusion since there is no SSL yet. I just migrated from IW14 to 15 and then recompiled and then all a sudden there are these SSL errors.

Thank you for the DLL files. Now I am getting the same error as on the server "Error: Could not load root certificate. error:0B084002:x509 certificate routines:X509_load_cert_crl_fileystem lib" so progress.

Sounds like the key issue is that the application thinks it is SSL when it is not yet. I will eventually have in SSL so this is good to know. I am not using Indy but I will have a look at that project you highlighted here. While we are on this subject where would I find cert.pem, key.pem and root.pem? The certificate I have now is from https://letsencrypt.org and were just installed into IIS. I have certificates installed in IIS and all I see there is crt. Would I just follow the instructions in https://www.digicert.com/ssl-support/pem...eation.htm?

Back to the issue at hand is why does IW 15 think I am trying to be in SSL? It is probably some loose setting from the bundle IW14 that I had before where SSL was non-functional.

Cheers.

[bob9999]

Hi there. I just wanted to update this thread that since I reconfigured the standalone server to be Http.sys, the SSL messages magically disappeared. I educated myself on the pem files so I am OK on this front. If I have an issue when I flip on SSL I will look through the material here or start another thread. Thanks again for highlighting the new features in IW15 and your assistance. Many blessings of peace. b