Using Indy 10 IdHTTP with TLS 1.2

17,376

Just in case some one comes by a similar error, in my case it was the SSL Library (libeay32, ssleay32) that was being used, it was outdated (year 2010). When updated the SSL it worked out correctly without any error.

Thank you @RemyLebeau for pointing that it was an update issue =)

Share:
17,376
vexen
Author by

vexen

Currently working as Delphi Programmer, but dont have too much experience in delphi, so please bare me if i ask really dumb questions.

Updated on June 11, 2022

Comments

  • vexen
    vexen almost 2 years

    Im using Delphi XE2 with Indy 10.5.8.0

    Currently i need to change a connection to one of our server to use only TLS 1.2, at the moment we are using TLS 1.0

    As handler for IdHTTP , IdSSLIOHandlerSocketOpenSSL is being used.

    I tried changing the Method to sslvTLSv1_2 and it does not work as the connection gives the next error: "Error connecting with SSL. error:1409442E:SSL routine:SSL3_READ_BYTES:tlsv 1 alert protocol version"

    Im using the Default Cipher list, not sure if i need any specific Cipher (Currently asking to Server provider to know what cipher they use)

    this is the configuration of Handler:

    SSLIOHandler Config

    Im not used to SSL connections as before this it was working with default setting and all was OK.

    I tried to check WireShark and in both cases (when method is sslvTLSv1_2 or sslvTLSv1) i get the same error pointing to tls version 1.0.

    Method sslvTLSv1:

    Method sslvTLSv1

    Method sslvTLSv1_2:

    enter image description here

    Please point me in the right direction if im missing something.

    Thank you in advance for all the help provided.

    P.S : Just got a response from the server provider and they are using AES_128_GCM as their Cipher, is it in the default Cipher list?

    WireShark>Client Hello package:

    enter image description here enter image description here