synalist-public — Ararat Synapse - Public list

Re: [Synalist] command line synapse based linux based ftps.pas program

[<pas...@gm...>]

Hi,

the libssh2 code compiles and executes but as you can see in the attached sftp.png the display is off on my system
what a great start though i'll make try to make a command line program from it and post it

Thanks


On Mon, 23 Mar 2026 13:48:41 +0100
Rik van Kekem via synalist-public <syn...@li...> wrote:

> On 23-03-2026 00:42, pastebin--- via synalist-public wrote:
> > i just wanted to do a 'raw' synapse code - (instead of using ftpsend or even curl)
> Always fun to mess with stuff on low level ;)
> 
> > i found your link a week or so ago (as i really want a sftp.pas) and got it to compile after
> >
> > in /usr/local/fpc-3.3.1/units/synapse/cryptlib.pas i had to comment
> > //{$F+}  {Force function calls to FAR}
> I never used cryptlib. I found the license a bit restrictive so I've 
> never used it.
> libssh2 would be a much better alternative. And that's what I got working.
> 
> > do you happen to still have the libssh2 converted code?
> Had to look for the correct topic but here I have a complete example to 
> download:
> https://forum.lazarus.freepascal.org/index.php/topic,57690.msg429370.html#msg429370
> 
> I just tried that again but I needed the latest libssh2 and openssl 
> libraries because the test.rebex.net server required that.
> 
> I also notice that in that source I commented out FSFTP.Connect and made 
> the connection with raw commands.
> I'm not sure why I did that. But on Windows it still worked.
> I took the libssh2.dll and openssl files from PHP from this download:
> https://downloads.php.net/~windows/pecl/releases/ssh2/1.4/
> File: 
> https://downloads.php.net/~windows/pecl/releases/ssh2/1.4/php_ssh2-1.4-8.3-ts-vs16-x64.zip
> On Linux you could use the libssh2 package.
> 
> I took the dll's from that and put them in the exe directory and made 
> contact with test.rebex.net demo/password.
> That worked.
> 
> So, in main.pas you see that I commented out FSFTP.Connect and used more 
> raw commands to establish the connection.
> After that... it reads the directory with libssh2_sftp_readdir_ex. 
> That's an API call in libssh2 library.
> 
> But... in SimpleSFTP.pas you'll see that these commands are given at 
> another level, via specially crafted packages (raw SSH2).
> For example it uses SSH_FXP_READDIR to read the directory. That's even 
> more low level.
> 
> With the method of SimpleSFTP.pas you could essentially eliminate 
> libssh2 completely but building the SSH2 connection with just openssl 
> would be a massive undertaking. So it's easier to just use 
> libssh2_session_init and libssh2_sftp_readdir_ex from libssh2.
> 
> Hopes this helps.
> 
> BTW. Attached I gave a small console source where I used libssh2 to just 
> connect to a SSH server (not SFTP but just SSH).
> You'll see the connecting is the same as with SFTP. And test.rebex.net 
> also provides a small SSH shell at the same port.
> test.rebex.net is a combined SSH/SFTP server component so you can issue 
> ls and help commands.
> 
> You see the connecting code is the same as the adjusted code for connect 
> in the main.pas of the other example.
> Except one does libssh2_channel_open_session for SSH and the other does 
> libssh2_sftp_init for SFTP after connecting.
> If you swap out the code from  libssh2_channel_open_session onward with 
> the libssh2_sftp_init and libssh2_sftp_opendir etc from main.pas you're 
> well on your way to create a SFTP CLI program ;)
> 
> Grtz,
> Rik

Re: [Synalist] command line synapse based linux based ftps.pas program

[Rik v. K. <ri...@gr...>]

On 23-03-2026 00:42, pastebin--- via synalist-public wrote:
> i just wanted to do a 'raw' synapse code - (instead of using ftpsend or even curl)
Always fun to mess with stuff on low level ;)

> i found your link a week or so ago (as i really want a sftp.pas) and got it to compile after
>
> in /usr/local/fpc-3.3.1/units/synapse/cryptlib.pas i had to comment
> //{$F+}  {Force function calls to FAR}
I never used cryptlib. I found the license a bit restrictive so I've 
never used it.
libssh2 would be a much better alternative. And that's what I got working.

> do you happen to still have the libssh2 converted code?
Had to look for the correct topic but here I have a complete example to 
download:
https://forum.lazarus.freepascal.org/index.php/topic,57690.msg429370.html#msg429370

I just tried that again but I needed the latest libssh2 and openssl 
libraries because the test.rebex.net server required that.

I also notice that in that source I commented out FSFTP.Connect and made 
the connection with raw commands.
I'm not sure why I did that. But on Windows it still worked.
I took the libssh2.dll and openssl files from PHP from this download:
https://downloads.php.net/~windows/pecl/releases/ssh2/1.4/
File: 
https://downloads.php.net/~windows/pecl/releases/ssh2/1.4/php_ssh2-1.4-8.3-ts-vs16-x64.zip
On Linux you could use the libssh2 package.

I took the dll's from that and put them in the exe directory and made 
contact with test.rebex.net demo/password.
That worked.

So, in main.pas you see that I commented out FSFTP.Connect and used more 
raw commands to establish the connection.
After that... it reads the directory with libssh2_sftp_readdir_ex. 
That's an API call in libssh2 library.

But... in SimpleSFTP.pas you'll see that these commands are given at 
another level, via specially crafted packages (raw SSH2).
For example it uses SSH_FXP_READDIR to read the directory. That's even 
more low level.

With the method of SimpleSFTP.pas you could essentially eliminate 
libssh2 completely but building the SSH2 connection with just openssl 
would be a massive undertaking. So it's easier to just use 
libssh2_session_init and libssh2_sftp_readdir_ex from libssh2.

Hopes this helps.

BTW. Attached I gave a small console source where I used libssh2 to just 
connect to a SSH server (not SFTP but just SSH).
You'll see the connecting is the same as with SFTP. And test.rebex.net 
also provides a small SSH shell at the same port.
test.rebex.net is a combined SSH/SFTP server component so you can issue 
ls and help commands.

You see the connecting code is the same as the adjusted code for connect 
in the main.pas of the other example.
Except one does libssh2_channel_open_session for SSH and the other does 
libssh2_sftp_init for SFTP after connecting.
If you swap out the code from  libssh2_channel_open_session onward with 
the libssh2_sftp_init and libssh2_sftp_opendir etc from main.pas you're 
well on your way to create a SFTP CLI program ;)

Grtz,
Rik

Re: [Synalist] command line synapse based linux based ftps.pas program

[<pas...@gm...>]

hi rvk,

i have really appreciated your help a while back on the fpc/lazarus forum quite a bit so i'm glad it works on your system - i had fun with it

i just wanted to do a 'raw' synapse code - (instead of using ftpsend or even curl)

i found your link a week or so ago (as i really want a sftp.pas) and got it to compile after

in /usr/local/fpc-3.3.1/units/synapse/cryptlib.pas i had to comment
//{$F+}  {Force function calls to FAR}

and since my glibc is compiled with    configure --enable-stackguard-randomization
i needed to make the libcl libs with -lssp or else when i link the TestSFTP.lpr i get
linking TestSFTPl
/usr/local/lib/libcl.so: undefined reference to `__stack_chk_guard'

i got the cryptlib-3.4.9.zip from (i found some earlier versions like cryptlib-3.4.4 only compileable on 32bit systems)
https://github.com/cryptlib/cryptlib/tags

when run but fails and gives me a range check error - i'
the code is pretty daunting to try to find it so i gave up for a bit and did this coding (ftps is easier to understand then sftp)

do you happen to still have the libssh2 converted code?

On Sun, 22 Mar 2026 21:05:46 +0100
Rik van Kekem via synalist-public <syn...@li...> wrote:

> On 22-03-2026 18:24, pastebin--- via synalist-public wrote:
> > please give me feedback as it is work in progress
> So this is a bare bone example of ftps? ;)
> 
> Wouldn't it be easier to use ftpsend.pas?
> Or are you trying to improve on it and implement reuse ssl socket?
> 
> (The code does connect for me... but it would be a lot of work coding in 
> all unexpected responses, like already done in ftpsend for example)
> 
> > if you have any synapse based sftp.pas command line code i'd appreciate seeing it
> There is a source sftp.zip from synapse. SimpleSFTP.pas
>  From http://synapse.ararat.cz/files/contrib/sftp.zip
> 
> This uses cryptlib as default... but I can confirm it is easilly 
> converted to using libssh2.pas. I did once, a while ago.
> https://forum.lazarus.freepascal.org/index.php?topic=28053.msg178389#msg178389
> If you can't find it I need to dive into my sippets-folders.
> 
> Grtz,
> Rik
> 

Re: [Synalist] command line synapse based linux based ftps.pas program

[Rik v. K. <ri...@gr...>]

On 22-03-2026 18:24, pastebin--- via synalist-public wrote:
> please give me feedback as it is work in progress
So this is a bare bone example of ftps? ;)

Wouldn't it be easier to use ftpsend.pas?
Or are you trying to improve on it and implement reuse ssl socket?

(The code does connect for me... but it would be a lot of work coding in 
all unexpected responses, like already done in ftpsend for example)

> if you have any synapse based sftp.pas command line code i'd appreciate seeing it
There is a source sftp.zip from synapse. SimpleSFTP.pas
 From http://synapse.ararat.cz/files/contrib/sftp.zip

This uses cryptlib as default... but I can confirm it is easilly 
converted to using libssh2.pas. I did once, a while ago.
https://forum.lazarus.freepascal.org/index.php?topic=28053.msg178389#msg178389
If you can't find it I need to dive into my sippets-folders.

Grtz,
Rik

[Synalist] command line synapse based linux based ftps.pas program

[<pas...@gm...>]

./ftps/1.txt

command line synapse based linux based ftps.pas program

i've attached a tar.gz file containing 5 files
1.txt   this file
st.sh   the setup script and compile line
sc.sh   clean up script
ftps.pas
sock.prd

to use you need a ftp server (i'm using proftpd with ssl required     TLSRequired on)
make a user uu with 00uu00 -> /home/uu

the st.sh script will create ./curl.txt local directory and /home/uu/tmp/kompozer-0.8b3.en-us.win32.zip in remote directory /home/uu 

running st will then comoile ftps.pas -> ftps and run it   the files moved and created etc are 
echo "ls -la l/home/uu/tmp"
ls -ls /home/uu/tmp
#-rw-r--r-- 1 uu   uu     10 Mar 21 2026 16:31:56 curl.txt
#-rw-r--r-- 1 root root    5 Mar 21 2026 16:31:39 kompozer-0.8b3.en-us.win32.zip
#-rw-r--r-- 1 uu   uu      5 Mar 21 2026 16:31:56 ompozer-0.8b3.en-us.win32.zip
#drwxr-xr-x 2 uu   uu   4096 Mar 21 2026 16:31:56 xxx

echo "ls -la /home/uu/tmp/xxx"
ls -la /home/uu/tmp/xxx
# -rw-r--r-- 1 uu uu 5 Mar 21 2026 16:31:56 curl.txt

echo "ls -la curl.txt *.zip"
ls -la curl.txt *.zip
#-rw-r--r-- 1 root root       5 Mar 21 2026 16:31:39 curl.txt
#-rw-r--r-- 1 root root       5 Mar 21 2026 16:31:56 kompozer-0.8b3.en-us.win32.zip
#-rw-r--r-- 1 root root       5 Mar 21 2026 16:31:56 ompozer-0.8b3.en-us.win32.zip

put your server name in sock.prd line 154 and 155  and ftps.pas line 44, 46 and 56
---

please give me feedback as it is work in progress

if you have any synapse based sftp.pas command line code i'd appreciate seeing it 

---

Re: [Synalist] FTP over TLS freezes when retrieving directory list

[Rik v. K. <ri...@gr...>]

On 11-03-2026 00:44, pastebin--- via synalist-public wrote:
> so you problem is with the ftp server you wrote using synapse?
>
> i don't see a ftp server source code attached?
>
> On Mon, 9 Mar 2026 11:34:43 -0300
> mk-rp via synalist-public<syn...@li...> wrote:
>> About the FTP server that I provided with the source code, it is working
>> very well when I use Filezilla, so I only have problems when I try to
>> use Synapse to access it.
No, I think what was meant here is that in the source code of the 
client-code there where credentials provided for a ftp server for which 
this problem occurs (I think it was a vsftpd server). See 
https://github.com/geby/synapse/issues/31

First of all Synapse doesn't support reusing current SSL sessions.
Luckily vsftpd has an option require_ssl_reuse=NO for that. But maybe 
reusing SSL socket can be implemented later.

Second... when using AutoTLS, just after AUTH TLS, vsftpd sends 
something (?) on the unencrypted data socket before switching over. 
Synapse sees that there is still data but there is not yet data on the 
SSL socket. Because of this login fails consistently for me because 
Synapse hangs on login (sees data on unencrypted socket but tries to 
read from new SSL socket). I could get around that by switching to 
FullSSL but for AutoTLS Synapse should not hang on login when this happens.

And last... when using FullSSL (login works now), the List() command 
hangs. This is due to the fact that Synapse doesn't handle 
SSL_ERROR_ZERO_RETURN correctly (failing to pass it back up to 
TBlockSocket). In TSSLOpenSSL3.RecvBuffer when SSL_ERROR_ZERO_RETURN it 
returns 0. But in TBlockSocket.RecvStreamRaw it fails to implement that 
that 0 means that there is no more data on the socket. So return is 0 
(no error), so it keeps waiting for more data (which will never come).

I made an issue for that here https://github.com/geby/synapse/issues/32

Grtz,
Rik

Re: [Synalist] FTP over TLS freezes when retrieving directory list

[<pas...@gm...>]

so you problem is with the ftp server you wrote using synapse?

i don't see a ftp server source code attached?

On Mon, 9 Mar 2026 11:34:43 -0300
mk-rp via synalist-public <syn...@li...> wrote:

> The unit "System.SysUtils" is the full name for SysUtils in Delphi 10.4, 
> so it's an error only for older Delphi versions.
> 
> About the FTP server that I provided with the source code, it is working 
> very well when I use Filezilla, so I only have problems when I try to 
> use Synapse to access it.
> 
> 
> 
> 
> Em 06/03/2026 20:57, pastebin--- via synalist-public escreveu:
> > Hi
> >
> > i need to turn up the volume on my 'you got mail' audio  almost missed your email
> >
> >
> > your program doesn't compile with
> > //  System.SysUtils,  <- no such unit   and usihg system as a unit also causes error
> > 31.pas(11,15) Error: Duplicate identifier "SYSTEM"
> > 31.pas(11,15) Hint: Identifier already defined in unit FTPTEST: 31.pas at line 7
> >
> > so just use
> > uses   SysUtils,  ftpsend,  ssl_openssl;
> >
> > the program now compuiles fine and using my proftpd server with hundreds of files in the users dir /home/uu/files
> > ftp.ChangeWorkingDir('/files');    the dir list has no delays or problems and the single file download is good
> >
> > check what is running on your system ? maybe swap? or some cache purging? check what else is ruunning
> > ps -efww  or top ?
> >
> > On Wed, 4 Mar 2026 10:52:35 -0300
> > mk-rp via synalist-public <syn...@li...> wrote:
> >
> >> Hello,
> >>
> >> I don't know if this mailing list is still active, but if someone can
> >> help with the issue that I posted on GitHub, I would be very grateful
> >> (FTP over TLS freezes when retrieving directory list #31 -->
> >> https://github.com/geby/synapse/issues/31 ).
> >>
> >> I've made a complete description there, including the source code.
> >>
> >>
> >> Thanks in advance.
> >>
> >>
> >>
> >> _______________________________________________
> >> synalist-public mailing list
> >> syn...@li...
> >> https://lists.sourceforge.net/lists/listinfo/synalist-public
> >
> > _______________________________________________
> > synalist-public mailing list
> > syn...@li...
> > https://lists.sourceforge.net/lists/listinfo/synalist-public
> 
> 
> 
> 
> _______________________________________________
> synalist-public mailing list
> syn...@li...
> https://lists.sourceforge.net/lists/listinfo/synalist-public

Re: [Synalist] FTP over TLS freezes when retrieving directory list

[mk-rp <ti...@rp...>]

The unit "System.SysUtils" is the full name for SysUtils in Delphi 10.4, 
so it's an error only for older Delphi versions.

About the FTP server that I provided with the source code, it is working 
very well when I use Filezilla, so I only have problems when I try to 
use Synapse to access it.




Em 06/03/2026 20:57, pastebin--- via synalist-public escreveu:
> Hi
>
> i need to turn up the volume on my 'you got mail' audio  almost missed your email
>
>
> your program doesn't compile with
> //  System.SysUtils,  <- no such unit   and usihg system as a unit also causes error
> 31.pas(11,15) Error: Duplicate identifier "SYSTEM"
> 31.pas(11,15) Hint: Identifier already defined in unit FTPTEST: 31.pas at line 7
>
> so just use
> uses   SysUtils,  ftpsend,  ssl_openssl;
>
> the program now compuiles fine and using my proftpd server with hundreds of files in the users dir /home/uu/files
> ftp.ChangeWorkingDir('/files');    the dir list has no delays or problems and the single file download is good
>
> check what is running on your system ? maybe swap? or some cache purging? check what else is ruunning
> ps -efww  or top ?
>
> On Wed, 4 Mar 2026 10:52:35 -0300
> mk-rp via synalist-public <syn...@li...> wrote:
>
>> Hello,
>>
>> I don't know if this mailing list is still active, but if someone can
>> help with the issue that I posted on GitHub, I would be very grateful
>> (FTP over TLS freezes when retrieving directory list #31 -->
>> https://github.com/geby/synapse/issues/31 ).
>>
>> I've made a complete description there, including the source code.
>>
>>
>> Thanks in advance.
>>
>>
>>
>> _______________________________________________
>> synalist-public mailing list
>> syn...@li...
>> https://lists.sourceforge.net/lists/listinfo/synalist-public
>
> _______________________________________________
> synalist-public mailing list
> syn...@li...
> https://lists.sourceforge.net/lists/listinfo/synalist-public

Re: [Synalist] FTP over TLS freezes when retrieving directory list

[<pas...@gm...>]

Hi

i need to turn up the volume on my 'you got mail' audio  almost missed your email


your program doesn't compile with 
//  System.SysUtils,  <- no such unit   and usihg system as a unit also causes error 
31.pas(11,15) Error: Duplicate identifier "SYSTEM"
31.pas(11,15) Hint: Identifier already defined in unit FTPTEST: 31.pas at line 7

so just use 
uses   SysUtils,  ftpsend,  ssl_openssl;

the program now compuiles fine and using my proftpd server with hundreds of files in the users dir /home/uu/files
ftp.ChangeWorkingDir('/files');    the dir list has no delays or problems and the single file download is good

check what is running on your system ? maybe swap? or some cache purging? check what else is ruunning 
ps -efww  or top ? 

On Wed, 4 Mar 2026 10:52:35 -0300
mk-rp via synalist-public <syn...@li...> wrote:

> Hello,
> 
> I don't know if this mailing list is still active, but if someone can 
> help with the issue that I posted on GitHub, I would be very grateful 
> (FTP over TLS freezes when retrieving directory list #31 --> 
> https://github.com/geby/synapse/issues/31 ).
> 
> I've made a complete description there, including the source code.
> 
> 
> Thanks in advance.
> 
> 
> 
> _______________________________________________
> synalist-public mailing list
> syn...@li...
> https://lists.sourceforge.net/lists/listinfo/synalist-public

[Synalist] FTP over TLS freezes when retrieving directory list

[mk-rp <ti...@rp...>]

Hello,

I don't know if this mailing list is still active, but if someone can 
help with the issue that I posted on GitHub, I would be very grateful 
(FTP over TLS freezes when retrieving directory list #31 --> 
https://github.com/geby/synapse/issues/31 ).

I've made a complete description there, including the source code.


Thanks in advance.

Re: [Synalist] OAuth2

[Rik v. K. <ri...@gr...>]

I have some OAuth2 code in Delphi with Synapse but online I've only got the FPC version (although not that different).
<https://github.com/rvk01/google-oauth2>

Do note that you can still use simple username/password combination with GMail. You just can't use the Google password. You need to create an App password (via account). But in that case your code doesn't have to change at all.

Grtz,
Rik



Roy Lambert <ro...@ly...> schreef op 5 januari 2025 10:15:39 CET:
>I've been asked to resurect an old project (Delphi 2007) an important part of which is email. This was written and last used in the days before OAuth2 and I haven't done anything with email since OAuth2 came into fashion.
>
>I can find some examples using Indy but that will mean a lot of re-writing and testing of code. Has anyone used Synapse for OAuth2 and has some code they don't mind sharing?
>
>
>
>Roy Lambert
>
>
>_______________________________________________
>synalist-public mailing list
>syn...@li...
>https://lists.sourceforge.net/lists/listinfo/synalist-public

-- 
Verstuurd vanaf mijn Android apparaat met K-9 Mail. Excuseer mijn beknoptheid.

[Synalist] OAuth2

[Roy L. <ro...@ly...>]

I've been asked to resurect an old project (Delphi 2007) an important part of which is email. This was written and last used in the days before OAuth2 and I haven't done anything with email since OAuth2 came into fashion.

I can find some examples using Indy but that will mean a lot of re-writing and testing of code. Has anyone used Synapse for OAuth2 and has some code they don't mind sharing?



Roy Lambert

Re: [Synalist] posting files to OpenAI

[Uffe H. <uff...@gm...>]

Thanks i already got a fix from another member of this mailinglist, and it
is working now.
I can confirm that the octet-string/stream and missing filename where the
problems.

Cheers
Uffe

<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail>
Virusfri.www.avast.com
<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail>
<#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>

Den tirs. 22. okt. 2024 kl. 17.44 skrev Rik van Kekem <ri...@gr...>:

> Op 21-10-2024 om 23:37 schreef Uffe Hammer:
>
> The basice code to send the file and the commands are working as expected
> and can be seen below.
>
>         WriteStrToStream(HTTP.Document,
>             CRLF +
>             '--' + Bound + CRLF +
>             'Content-Disposition: form-data; name=' +
> AnsiQuotedStr('file', '"') + ';' + CRLF +
>             'Content-Type: application/octet-string' + CRLF +
>             CRLF);
>
> Does it really say application/octet-string?
> Shouldn't it be application/octet-*stream*?
> (not sure if that makes any difference)
>
> --
> Grtz,
> Rik
>
> _______________________________________________
> synalist-public mailing list
> syn...@li...
> https://lists.sourceforge.net/lists/listinfo/synalist-public
>

Re: [Synalist] posting files to OpenAI

[Rik v. K. <ri...@gr...>]

Op 21-10-2024 om 23:37 schreef Uffe Hammer:
> The basice code to send the file and the commands are working as 
> expected and can be seen below.
>
>         WriteStrToStream(HTTP.Document,
>             CRLF +
>             '--' + Bound + CRLF +
>             'Content-Disposition: form-data; name=' + 
> AnsiQuotedStr('file', '"') + ';' + CRLF +
>             'Content-Type: application/octet-string' + CRLF +
>             CRLF);
Does it really say application/octet-string?
Shouldn't it be application/octet-*stream*?
(not sure if that makes any difference)

-- 
Grtz,
Rik

[Synalist] posting files to OpenAI

[Uffe H. <uff...@gm...>]

Hello I'm trying to post files to OpenAI using Synapse and delphi.

The basice code to send the file and the commands are working as expected
and can be seen below.
However it seems that OpenAI expects the data to be encoded using the RFC
2388 <https://www.ietf.org/rfc/rfc2388.txt> standard which is what Curl is
also using and when i use Curl to upload the file it works fine.
But when i try using the code below the answer i get back is that the data
is invalid and according to the Curl documentation the content is encoded:
-F, --form <name=content>
(HTTP SMTP IMAP) For the HTTP protocol family, emulate a filled-in form in
which a user has pressed the submit button. This makes curl POST data using
the Content-Type multipart/form-data according to RFC 2388
<https://www.ietf.org/rfc/rfc2388.txt>.

So how do i encode the my data according to RFC-2388 standard before
posting it?

This is my synapse code:

    HTTP := THTTPSend.Create;
    try
        HTTP.Headers.Add('Authorization: Bearer ' + OPENAI_API_KEY);
        WriteStrToStream(HTTP.Document,
            '--' + Bound + CRLF +
            'Content-Disposition: form-data; name=' +
AnsiQuotedStr('model', '"') + CRLF +
            'Content-Type: text/plain' + CRLF +
            CRLF);
        WriteStrToStream(HTTP.Document, 'whisper-1');
        WriteStrToStream(HTTP.Document,
              CRLF +
              '--' + Bound + CRLF +
              'Content-Disposition: form-data; name=' +
AnsiQuotedStr('response_format', '"') + CRLF +
              'Content-Type: text/plain' + CRLF +
              CRLF);
            WriteStrToStream(HTTP.Document, 'srt');
        WriteStrToStream(HTTP.Document,
            CRLF +
            '--' + Bound + CRLF +
            'Content-Disposition: form-data; name=' + AnsiQuotedStr('file',
'"') + ';' + CRLF +
            'Content-Type: application/octet-string' + CRLF +
            CRLF);
        HTTP.Document.CopyFrom(fileStream, 0);
        WriteStrToStream(HTTP.Document,
            CRLF +
            '--' + Bound + '--' + CRLF);
        HTTP.MimeType := 'multipart/form-data; boundary=' + Bound;
        Result := HTTP.HTTPMethod('POST', '
https://api.openai.com/v1/audio/transcriptions');

Regards
Uffe Hammer




<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail>
Virusfri.www.avast.com
<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail>
<#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>

[Synalist] Anyone has sample codes of using Synapse + OpenSSL to write a client/server project?

[Dennis <de...@av...>]

I have done it myself but somehow it is not stable. Sometimes, it fails 
to establish SSL connection.
I wonder whether I have been using it wrong.

Thanks in advance.

Dennis Poon

Re: [Synalist] Synapse+OpenSSL3: ssl took 5 seconds to establish tls 1.3 over LAN

[Dennis <de...@av...>]

pastebin--- via synalist-public wrote:
> Hi
>
> any possibility you have 2 computers with the same ip on the lan?
No.  They have different IP addresses as they are assigned by the DHCP 
server of the router of the LAN.
I also print out the 
ParseSocket.GetLocalSinIP+':'+ParseSocket.GetLocalSinPort.ToString+'=>'+ParseSocket.GetRemoteSinIP+':'+ParseSocket.GetRemoteSinPort.ToString
     in the server where a connection is made like:
     24-07-18 14:22:39.476 (@192.168.10.143:7443=>192.168.10.130:65486)
  I can see that the local and remote IP are different. In the above 
example, the 192.168.10.143 is the server IP while 192.168.10.130 is the 
Client's IP address.

Dennis
>
>
> On Tue, 16 Jul 2024 16:42:35 +0800
> Dennis <de...@av...> wrote:
>
>> I am using Free Pascal 3.2.2 on Win64 with Synapse downloaded on June
>> 22, 2024.
>>
>> Synapse TTCPBlockSocket are used for both the server and client.
>> On the server, after a tcp connection is connected, it will call
>> TTCPBlockSocket.SSLAcceptConnection repeatedly to try to accept a
>> TLSv1.3 connection.  The server is not assigned any certificate, so an
>> ad-hoc certificate will be used.
>>
>> On the client, after a tcp connection is connected, it will call
>> TTCPBlockSocket.SSLDoConnect to establish TLSv1.3 connection.
>>
>> The Server PC is running windows 10 64-bit while the client is running
>> windows 11 64bit.
>>
>> I encountered a very weird situation:
>> When Server PC and Client PC are on the same LAN, the TLSv1.3 connection
>> will take around 5 seconds to establish.
>> However, when the Server PC and Client PC are separated by the internet,
>> it will take ONLY 0.05 second to establish
>>
>> I check the SSL settings reported by synapse and they seem normal as
>> follows:
>>
>> 24-07-16 16:13:33.442 24-07-16 16:13:33.442 TTCPBlockSocket.LastError:#0
>> 24-07-16 16:13:33.690 24-07-16 16:13:33.690 SSL Establishment took
>> ,Duration=0.04 Seconds
>> 24-07-16 16:13:33.690 24-07-16 16:13:33.690
>> TTCPBlockSocket.SSL.GetSSLVersion:TLSv1.3
>> 24-07-16 16:13:33.690 24-07-16 16:13:33.690
>> TTCPBlockSocket.SSL.SSLType:LT_all
>> 24-07-16 16:13:33.690 24-07-16 16:13:33.690 TTCPBlockSocket.SSL.CertCA:''
>> 24-07-16 16:13:33.690 24-07-16 16:13:33.690 TTCPBlockSocket.SSL.GetCertInfo:
>>       Data:
>>           Version: 3 (0x2)
>>           Serial Number: 271214215 (0x102a6687)
>>           Signature Algorithm: sha256WithRSAEncryption
>>           Issuer: C=CZ, CN=203176212158.ctinets.com
>>           Validity
>>               Not Before: Jul 15 08:13:33 2024 GMT
>>               Not After : Sep 14 08:13:33 2024 GMT
>>           Subject: C=CZ, CN=203176212158.ctinets.com
>>           Subject Public Key Info:
>>               Public Key Algorithm: rsaEncryption
>>                   Public-Key: (2048 bit)
>>                   Modulus:
>> 00:d2:31:1e:1b:5f:88:d5:d9:4a:eb:8a:a4:7d:62:
>> 56:7d:2f:fd:4a:14:53:46:67:cb:8e:3f:6f:7d:10:
>> d1:34:57:1f:1e:10:fd:08:0e:47:0b:46:36:68:ae:
>> ee:b1:33:84:21:68:02:4e:ed:22:4f:19:a1:34:b6:
>> 74:1e:4f:1a:65:83:20:fb:fb:4f:8f:50:3b:58:76:
>> 88:5a:c2:97:71:28:c8:91:fb:5f:cd:d5:a8:cd:db:
>> b4:4a:15:87:ce:d3:96:9d:9e:9f:98:54:9f:3c:22:
>> 0e:8b:3b:04:9f:da:b2:00:e0:c6:fc:9d:25:5a:83:
>> 69:f3:fe:a6:22:d1:14:da:98:d2:f3:b2:cb:2b:1b:
>> 10:98:79:34:6d:44:8a:fc:1c:8b:9a:e8:2e:56:f9:
>> 25:c4:f6:b4:ab:4d:b9:d5:64:e4:41:8e:89:b5:2f:
>> b8:e0:86:68:ba:ad:8e:0f:a1:cf:b4:72:e0:5f:ad:
>> e4:d9:22:0b:65:17:a5:26:06:82:99:67:0d:73:d4:
>> 98:5e:32:01:4d:57:58:dd:ad:fa:cc:a0:27:e3:d1:
>> 91:c2:86:d2:90:c2:b4:92:30:6f:02:d8:5f:e9:ed:
>> 78:5b:e4:00:c7:c0:4b:79:a7:29:40:2d:b9:c9:e6:
>> 3e:70:c7:b5:7a:0a:be:e1:c1:68:f9:7e:38:77:13:
>>                       0a:cb
>>                   Exponent: 65537 (0x10001)
>>       Signature Algorithm: sha256WithRSAEncryption
>>       Signature Value:
>>           67:a7:c0:00:b3:28:aa:6a:8c:cf:4e:7f:16:34:ac:ee:26:52:
>>           1a:e3:89:c0:a2:67:55:fe:e7:e8:84:6f:7d:3a:9d:2e:67:a8:
>>           2f:03:cf:86:a5:a3:d4:f2:bb:06:1c:fc:b7:11:1f:9b:cd:8d:
>>           2e:37:47:28:a7:13:4e:66:20:48:ee:d7:f0:d7:e9:4a:e7:6a:
>>           46:d0:5d:8d:7e:93:e6:6e:8c:69:57:2e:ab:15:c1:83:67:30:
>>           6c:af:17:10:28:e6:6f:80:67:ff:4f:eb:af:e1:f7:07:3c:7b:
>>           e6:84:6b:48:18:e1:55:94:7a:91:f2:80:cc:8a:4e:ce:fc:36:
>>           74:8c:3f:df:ce:d4:64:50:ab:2c:e4:29:53:4d:be:0b:02:1c:
>>           7d:4b:17:45:76:91:3a:0b:5b:f6:af:b8:be:20:c3:68:86:ee:
>>           fb:45:f7:1f:df:87:df:4a:6e:65:e8:69:d2:dc:76:7e:7b:f0:
>>           45:e4:65:cb:f1:a5:a6:33:d2:d0:8f:20:b5:38:09:0b:5c:ff:
>>           ab:10:be:33:0d:7e:2b:ed:40:53:fa:78:fe:e8:58:4e:98:b2:
>>           d4:39:e5:17:db:e2:e4:48:d1:a7:bc:4e:29:38:8d:ba:6e:e5:
>>           aa:f7:ee:1c:95:3c:73:91:98:37:d3:43:34:24:72:8a:0f:76:
>>           ca:04:60:73
>>
>> 24-07-16 16:13:33.690 24-07-16 16:13:33.690
>> TTCPBlockSocket.SSL.LibName:ssl_openssl3
>> 24-07-16 16:13:33.690 24-07-16 16:13:33.690
>> TTCPBlockSocket.SSL.Ciphers:DEFAULT
>> 24-07-16 16:13:33.690 24-07-16 16:13:33.690
>> TTCPBlockSocket.SSL.GetCipherName:TLS_AES_256_GCM_SHA384
>> 24-07-16 16:13:33.690 24-07-16 16:13:33.690
>> TTCPBlockSocket.SSL.Certificate:''
>>
>> Can sometime tell me why?
>> Thanks in advance.
>>
>> Dennis Poon
>>
>>
>
> _______________________________________________
> synalist-public mailing list
> syn...@li...
> https://lists.sourceforge.net/lists/listinfo/synalist-public
>

Re: [Synalist] Synapse+OpenSSL3: ssl took 5 seconds to establish tls 1.3 over LAN

[Rik v. K. <ri...@gr...>]

Dennis <de...@av...> schreef op 16 juli 2024 10:42:35 CEST:
> The server is not assigned any certificate, so an ad-hoc certificate will be used.
> [snip]
>However, when the Server PC and Client PC are separated by the internet, it will take ONLY 0.05 second to establish

Are you sure the second time an ad-hoc certificate is used. 0.05 seconds seems way too fast to generate a new one. So my guess is either no certificate is used or one was used that was already generated (the for internal use).

Did you restart the software?
You only showed one run but we can't see the other.
Can you show both newly created ad-hoc certificates? (Both the one from 5 seconds and 0.05 seconds)

Grtz,
Rik

-- 
Verstuurd vanaf mijn Android apparaat met K-9 Mail. Excuseer mijn beknoptheid.

Re: [Synalist] Synapse+OpenSSL3: ssl took 5 seconds to establish tls 1.3 over LAN

[Dennis <de...@av...>]

pastebin--- via synalist-public wrote:
> Hi
>
> any possibility you have 2 computers with the same ip on the lan?
>
NO.  They have different ip.
>
> On Tue, 16 Jul 2024 16:42:35 +0800
> Dennis <de...@av...> wrote:
>
>> I am using Free Pascal 3.2.2 on Win64 with Synapse downloaded on June
>> 22, 2024.
>>
>> Synapse TTCPBlockSocket are used for both the server and client.
>> On the server, after a tcp connection is connected, it will call
>> TTCPBlockSocket.SSLAcceptConnection repeatedly to try to accept a
>> TLSv1.3 connection.  The server is not assigned any certificate, so an
>> ad-hoc certificate will be used.
>>
>> On the client, after a tcp connection is connected, it will call
>> TTCPBlockSocket.SSLDoConnect to establish TLSv1.3 connection.
>>
>> The Server PC is running windows 10 64-bit while the client is running
>> windows 11 64bit.
>>
>> I encountered a very weird situation:
>> When Server PC and Client PC are on the same LAN, the TLSv1.3 connection
>> will take around 5 seconds to establish.
>> However, when the Server PC and Client PC are separated by the internet,
>> it will take ONLY 0.05 second to establish
>>
>> I check the SSL settings reported by synapse and they seem normal as
>> follows:
>>
>> 24-07-16 16:13:33.442 24-07-16 16:13:33.442 TTCPBlockSocket.LastError:#0
>> 24-07-16 16:13:33.690 24-07-16 16:13:33.690 SSL Establishment took
>> ,Duration=0.04 Seconds
>> 24-07-16 16:13:33.690 24-07-16 16:13:33.690
>> TTCPBlockSocket.SSL.GetSSLVersion:TLSv1.3
>> 24-07-16 16:13:33.690 24-07-16 16:13:33.690
>> TTCPBlockSocket.SSL.SSLType:LT_all
>> 24-07-16 16:13:33.690 24-07-16 16:13:33.690 TTCPBlockSocket.SSL.CertCA:''
>> 24-07-16 16:13:33.690 24-07-16 16:13:33.690 TTCPBlockSocket.SSL.GetCertInfo:
>>       Data:
>>           Version: 3 (0x2)
>>           Serial Number: 271214215 (0x102a6687)
>>           Signature Algorithm: sha256WithRSAEncryption
>>           Issuer: C=CZ, CN=203176212158.ctinets.com
>>           Validity
>>               Not Before: Jul 15 08:13:33 2024 GMT
>>               Not After : Sep 14 08:13:33 2024 GMT
>>           Subject: C=CZ, CN=203176212158.ctinets.com
>>           Subject Public Key Info:
>>               Public Key Algorithm: rsaEncryption
>>                   Public-Key: (2048 bit)
>>                   Modulus:
>> 00:d2:31:1e:1b:5f:88:d5:d9:4a:eb:8a:a4:7d:62:
>> 56:7d:2f:fd:4a:14:53:46:67:cb:8e:3f:6f:7d:10:
>> d1:34:57:1f:1e:10:fd:08:0e:47:0b:46:36:68:ae:
>> ee:b1:33:84:21:68:02:4e:ed:22:4f:19:a1:34:b6:
>> 74:1e:4f:1a:65:83:20:fb:fb:4f:8f:50:3b:58:76:
>> 88:5a:c2:97:71:28:c8:91:fb:5f:cd:d5:a8:cd:db:
>> b4:4a:15:87:ce:d3:96:9d:9e:9f:98:54:9f:3c:22:
>> 0e:8b:3b:04:9f:da:b2:00:e0:c6:fc:9d:25:5a:83:
>> 69:f3:fe:a6:22:d1:14:da:98:d2:f3:b2:cb:2b:1b:
>> 10:98:79:34:6d:44:8a:fc:1c:8b:9a:e8:2e:56:f9:
>> 25:c4:f6:b4:ab:4d:b9:d5:64:e4:41:8e:89:b5:2f:
>> b8:e0:86:68:ba:ad:8e:0f:a1:cf:b4:72:e0:5f:ad:
>> e4:d9:22:0b:65:17:a5:26:06:82:99:67:0d:73:d4:
>> 98:5e:32:01:4d:57:58:dd:ad:fa:cc:a0:27:e3:d1:
>> 91:c2:86:d2:90:c2:b4:92:30:6f:02:d8:5f:e9:ed:
>> 78:5b:e4:00:c7:c0:4b:79:a7:29:40:2d:b9:c9:e6:
>> 3e:70:c7:b5:7a:0a:be:e1:c1:68:f9:7e:38:77:13:
>>                       0a:cb
>>                   Exponent: 65537 (0x10001)
>>       Signature Algorithm: sha256WithRSAEncryption
>>       Signature Value:
>>           67:a7:c0:00:b3:28:aa:6a:8c:cf:4e:7f:16:34:ac:ee:26:52:
>>           1a:e3:89:c0:a2:67:55:fe:e7:e8:84:6f:7d:3a:9d:2e:67:a8:
>>           2f:03:cf:86:a5:a3:d4:f2:bb:06:1c:fc:b7:11:1f:9b:cd:8d:
>>           2e:37:47:28:a7:13:4e:66:20:48:ee:d7:f0:d7:e9:4a:e7:6a:
>>           46:d0:5d:8d:7e:93:e6:6e:8c:69:57:2e:ab:15:c1:83:67:30:
>>           6c:af:17:10:28:e6:6f:80:67:ff:4f:eb:af:e1:f7:07:3c:7b:
>>           e6:84:6b:48:18:e1:55:94:7a:91:f2:80:cc:8a:4e:ce:fc:36:
>>           74:8c:3f:df:ce:d4:64:50:ab:2c:e4:29:53:4d:be:0b:02:1c:
>>           7d:4b:17:45:76:91:3a:0b:5b:f6:af:b8:be:20:c3:68:86:ee:
>>           fb:45:f7:1f:df:87:df:4a:6e:65:e8:69:d2:dc:76:7e:7b:f0:
>>           45:e4:65:cb:f1:a5:a6:33:d2:d0:8f:20:b5:38:09:0b:5c:ff:
>>           ab:10:be:33:0d:7e:2b:ed:40:53:fa:78:fe:e8:58:4e:98:b2:
>>           d4:39:e5:17:db:e2:e4:48:d1:a7:bc:4e:29:38:8d:ba:6e:e5:
>>           aa:f7:ee:1c:95:3c:73:91:98:37:d3:43:34:24:72:8a:0f:76:
>>           ca:04:60:73
>>
>> 24-07-16 16:13:33.690 24-07-16 16:13:33.690
>> TTCPBlockSocket.SSL.LibName:ssl_openssl3
>> 24-07-16 16:13:33.690 24-07-16 16:13:33.690
>> TTCPBlockSocket.SSL.Ciphers:DEFAULT
>> 24-07-16 16:13:33.690 24-07-16 16:13:33.690
>> TTCPBlockSocket.SSL.GetCipherName:TLS_AES_256_GCM_SHA384
>> 24-07-16 16:13:33.690 24-07-16 16:13:33.690
>> TTCPBlockSocket.SSL.Certificate:''
>>
>> Can sometime tell me why?
>> Thanks in advance.
>>
>> Dennis Poon
>>
>>
>
> _______________________________________________
> synalist-public mailing list
> syn...@li...
> https://lists.sourceforge.net/lists/listinfo/synalist-public
>

Re: [Synalist] Synapse+OpenSSL3: ssl took 5 seconds to establish tls 1.3 over LAN

[<pas...@gm...>]

Hi

any possibility you have 2 computers with the same ip on the lan?



On Tue, 16 Jul 2024 16:42:35 +0800
Dennis <de...@av...> wrote:

> I am using Free Pascal 3.2.2 on Win64 with Synapse downloaded on June 
> 22, 2024.
> 
> Synapse TTCPBlockSocket are used for both the server and client.
> On the server, after a tcp connection is connected, it will call 
> TTCPBlockSocket.SSLAcceptConnection repeatedly to try to accept a 
> TLSv1.3 connection.  The server is not assigned any certificate, so an 
> ad-hoc certificate will be used.
> 
> On the client, after a tcp connection is connected, it will call 
> TTCPBlockSocket.SSLDoConnect to establish TLSv1.3 connection.
> 
> The Server PC is running windows 10 64-bit while the client is running 
> windows 11 64bit.
> 
> I encountered a very weird situation:
> When Server PC and Client PC are on the same LAN, the TLSv1.3 connection 
> will take around 5 seconds to establish.
> However, when the Server PC and Client PC are separated by the internet, 
> it will take ONLY 0.05 second to establish
> 
> I check the SSL settings reported by synapse and they seem normal as 
> follows:
> 
> 24-07-16 16:13:33.442 24-07-16 16:13:33.442 TTCPBlockSocket.LastError:#0
> 24-07-16 16:13:33.690 24-07-16 16:13:33.690 SSL Establishment took 
> ,Duration=0.04 Seconds
> 24-07-16 16:13:33.690 24-07-16 16:13:33.690 
> TTCPBlockSocket.SSL.GetSSLVersion:TLSv1.3
> 24-07-16 16:13:33.690 24-07-16 16:13:33.690 
> TTCPBlockSocket.SSL.SSLType:LT_all
> 24-07-16 16:13:33.690 24-07-16 16:13:33.690 TTCPBlockSocket.SSL.CertCA:''
> 24-07-16 16:13:33.690 24-07-16 16:13:33.690 TTCPBlockSocket.SSL.GetCertInfo:
>      Data:
>          Version: 3 (0x2)
>          Serial Number: 271214215 (0x102a6687)
>          Signature Algorithm: sha256WithRSAEncryption
>          Issuer: C=CZ, CN=203176212158.ctinets.com
>          Validity
>              Not Before: Jul 15 08:13:33 2024 GMT
>              Not After : Sep 14 08:13:33 2024 GMT
>          Subject: C=CZ, CN=203176212158.ctinets.com
>          Subject Public Key Info:
>              Public Key Algorithm: rsaEncryption
>                  Public-Key: (2048 bit)
>                  Modulus:
> 00:d2:31:1e:1b:5f:88:d5:d9:4a:eb:8a:a4:7d:62:
> 56:7d:2f:fd:4a:14:53:46:67:cb:8e:3f:6f:7d:10:
> d1:34:57:1f:1e:10:fd:08:0e:47:0b:46:36:68:ae:
> ee:b1:33:84:21:68:02:4e:ed:22:4f:19:a1:34:b6:
> 74:1e:4f:1a:65:83:20:fb:fb:4f:8f:50:3b:58:76:
> 88:5a:c2:97:71:28:c8:91:fb:5f:cd:d5:a8:cd:db:
> b4:4a:15:87:ce:d3:96:9d:9e:9f:98:54:9f:3c:22:
> 0e:8b:3b:04:9f:da:b2:00:e0:c6:fc:9d:25:5a:83:
> 69:f3:fe:a6:22:d1:14:da:98:d2:f3:b2:cb:2b:1b:
> 10:98:79:34:6d:44:8a:fc:1c:8b:9a:e8:2e:56:f9:
> 25:c4:f6:b4:ab:4d:b9:d5:64:e4:41:8e:89:b5:2f:
> b8:e0:86:68:ba:ad:8e:0f:a1:cf:b4:72:e0:5f:ad:
> e4:d9:22:0b:65:17:a5:26:06:82:99:67:0d:73:d4:
> 98:5e:32:01:4d:57:58:dd:ad:fa:cc:a0:27:e3:d1:
> 91:c2:86:d2:90:c2:b4:92:30:6f:02:d8:5f:e9:ed:
> 78:5b:e4:00:c7:c0:4b:79:a7:29:40:2d:b9:c9:e6:
> 3e:70:c7:b5:7a:0a:be:e1:c1:68:f9:7e:38:77:13:
>                      0a:cb
>                  Exponent: 65537 (0x10001)
>      Signature Algorithm: sha256WithRSAEncryption
>      Signature Value:
>          67:a7:c0:00:b3:28:aa:6a:8c:cf:4e:7f:16:34:ac:ee:26:52:
>          1a:e3:89:c0:a2:67:55:fe:e7:e8:84:6f:7d:3a:9d:2e:67:a8:
>          2f:03:cf:86:a5:a3:d4:f2:bb:06:1c:fc:b7:11:1f:9b:cd:8d:
>          2e:37:47:28:a7:13:4e:66:20:48:ee:d7:f0:d7:e9:4a:e7:6a:
>          46:d0:5d:8d:7e:93:e6:6e:8c:69:57:2e:ab:15:c1:83:67:30:
>          6c:af:17:10:28:e6:6f:80:67:ff:4f:eb:af:e1:f7:07:3c:7b:
>          e6:84:6b:48:18:e1:55:94:7a:91:f2:80:cc:8a:4e:ce:fc:36:
>          74:8c:3f:df:ce:d4:64:50:ab:2c:e4:29:53:4d:be:0b:02:1c:
>          7d:4b:17:45:76:91:3a:0b:5b:f6:af:b8:be:20:c3:68:86:ee:
>          fb:45:f7:1f:df:87:df:4a:6e:65:e8:69:d2:dc:76:7e:7b:f0:
>          45:e4:65:cb:f1:a5:a6:33:d2:d0:8f:20:b5:38:09:0b:5c:ff:
>          ab:10:be:33:0d:7e:2b:ed:40:53:fa:78:fe:e8:58:4e:98:b2:
>          d4:39:e5:17:db:e2:e4:48:d1:a7:bc:4e:29:38:8d:ba:6e:e5:
>          aa:f7:ee:1c:95:3c:73:91:98:37:d3:43:34:24:72:8a:0f:76:
>          ca:04:60:73
> 
> 24-07-16 16:13:33.690 24-07-16 16:13:33.690 
> TTCPBlockSocket.SSL.LibName:ssl_openssl3
> 24-07-16 16:13:33.690 24-07-16 16:13:33.690 
> TTCPBlockSocket.SSL.Ciphers:DEFAULT
> 24-07-16 16:13:33.690 24-07-16 16:13:33.690 
> TTCPBlockSocket.SSL.GetCipherName:TLS_AES_256_GCM_SHA384
> 24-07-16 16:13:33.690 24-07-16 16:13:33.690 
> TTCPBlockSocket.SSL.Certificate:''
> 
> Can sometime tell me why?
> Thanks in advance.
> 
> Dennis Poon
> 
> 

[Synalist] Synapse+OpenSSL3: ssl took 5 seconds to establish tls 1.3 over LAN

[Dennis <de...@av...>]

I am using Free Pascal 3.2.2 on Win64 with Synapse downloaded on June 
22, 2024.

Synapse TTCPBlockSocket are used for both the server and client.
On the server, after a tcp connection is connected, it will call 
TTCPBlockSocket.SSLAcceptConnection repeatedly to try to accept a 
TLSv1.3 connection.  The server is not assigned any certificate, so an 
ad-hoc certificate will be used.

On the client, after a tcp connection is connected, it will call 
TTCPBlockSocket.SSLDoConnect to establish TLSv1.3 connection.

The Server PC is running windows 10 64-bit while the client is running 
windows 11 64bit.

I encountered a very weird situation:
When Server PC and Client PC are on the same LAN, the TLSv1.3 connection 
will take around 5 seconds to establish.
However, when the Server PC and Client PC are separated by the internet, 
it will take ONLY 0.05 second to establish

I check the SSL settings reported by synapse and they seem normal as 
follows:

24-07-16 16:13:33.442 24-07-16 16:13:33.442 TTCPBlockSocket.LastError:#0
24-07-16 16:13:33.690 24-07-16 16:13:33.690 SSL Establishment took 
,Duration=0.04 Seconds
24-07-16 16:13:33.690 24-07-16 16:13:33.690 
TTCPBlockSocket.SSL.GetSSLVersion:TLSv1.3
24-07-16 16:13:33.690 24-07-16 16:13:33.690 
TTCPBlockSocket.SSL.SSLType:LT_all
24-07-16 16:13:33.690 24-07-16 16:13:33.690 TTCPBlockSocket.SSL.CertCA:''
24-07-16 16:13:33.690 24-07-16 16:13:33.690 TTCPBlockSocket.SSL.GetCertInfo:
     Data:
         Version: 3 (0x2)
         Serial Number: 271214215 (0x102a6687)
         Signature Algorithm: sha256WithRSAEncryption
         Issuer: C=CZ, CN=203176212158.ctinets.com
         Validity
             Not Before: Jul 15 08:13:33 2024 GMT
             Not After : Sep 14 08:13:33 2024 GMT
         Subject: C=CZ, CN=203176212158.ctinets.com
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
00:d2:31:1e:1b:5f:88:d5:d9:4a:eb:8a:a4:7d:62:
56:7d:2f:fd:4a:14:53:46:67:cb:8e:3f:6f:7d:10:
d1:34:57:1f:1e:10:fd:08:0e:47:0b:46:36:68:ae:
ee:b1:33:84:21:68:02:4e:ed:22:4f:19:a1:34:b6:
74:1e:4f:1a:65:83:20:fb:fb:4f:8f:50:3b:58:76:
88:5a:c2:97:71:28:c8:91:fb:5f:cd:d5:a8:cd:db:
b4:4a:15:87:ce:d3:96:9d:9e:9f:98:54:9f:3c:22:
0e:8b:3b:04:9f:da:b2:00:e0:c6:fc:9d:25:5a:83:
69:f3:fe:a6:22:d1:14:da:98:d2:f3:b2:cb:2b:1b:
10:98:79:34:6d:44:8a:fc:1c:8b:9a:e8:2e:56:f9:
25:c4:f6:b4:ab:4d:b9:d5:64:e4:41:8e:89:b5:2f:
b8:e0:86:68:ba:ad:8e:0f:a1:cf:b4:72:e0:5f:ad:
e4:d9:22:0b:65:17:a5:26:06:82:99:67:0d:73:d4:
98:5e:32:01:4d:57:58:dd:ad:fa:cc:a0:27:e3:d1:
91:c2:86:d2:90:c2:b4:92:30:6f:02:d8:5f:e9:ed:
78:5b:e4:00:c7:c0:4b:79:a7:29:40:2d:b9:c9:e6:
3e:70:c7:b5:7a:0a:be:e1:c1:68:f9:7e:38:77:13:
                     0a:cb
                 Exponent: 65537 (0x10001)
     Signature Algorithm: sha256WithRSAEncryption
     Signature Value:
         67:a7:c0:00:b3:28:aa:6a:8c:cf:4e:7f:16:34:ac:ee:26:52:
         1a:e3:89:c0:a2:67:55:fe:e7:e8:84:6f:7d:3a:9d:2e:67:a8:
         2f:03:cf:86:a5:a3:d4:f2:bb:06:1c:fc:b7:11:1f:9b:cd:8d:
         2e:37:47:28:a7:13:4e:66:20:48:ee:d7:f0:d7:e9:4a:e7:6a:
         46:d0:5d:8d:7e:93:e6:6e:8c:69:57:2e:ab:15:c1:83:67:30:
         6c:af:17:10:28:e6:6f:80:67:ff:4f:eb:af:e1:f7:07:3c:7b:
         e6:84:6b:48:18:e1:55:94:7a:91:f2:80:cc:8a:4e:ce:fc:36:
         74:8c:3f:df:ce:d4:64:50:ab:2c:e4:29:53:4d:be:0b:02:1c:
         7d:4b:17:45:76:91:3a:0b:5b:f6:af:b8:be:20:c3:68:86:ee:
         fb:45:f7:1f:df:87:df:4a:6e:65:e8:69:d2:dc:76:7e:7b:f0:
         45:e4:65:cb:f1:a5:a6:33:d2:d0:8f:20:b5:38:09:0b:5c:ff:
         ab:10:be:33:0d:7e:2b:ed:40:53:fa:78:fe:e8:58:4e:98:b2:
         d4:39:e5:17:db:e2:e4:48:d1:a7:bc:4e:29:38:8d:ba:6e:e5:
         aa:f7:ee:1c:95:3c:73:91:98:37:d3:43:34:24:72:8a:0f:76:
         ca:04:60:73

24-07-16 16:13:33.690 24-07-16 16:13:33.690 
TTCPBlockSocket.SSL.LibName:ssl_openssl3
24-07-16 16:13:33.690 24-07-16 16:13:33.690 
TTCPBlockSocket.SSL.Ciphers:DEFAULT
24-07-16 16:13:33.690 24-07-16 16:13:33.690 
TTCPBlockSocket.SSL.GetCipherName:TLS_AES_256_GCM_SHA384
24-07-16 16:13:33.690 24-07-16 16:13:33.690 
TTCPBlockSocket.SSL.Certificate:''

Can sometime tell me why?
Thanks in advance.

Dennis Poon

Re: [Synalist] can synapse get pop3 emails

[Ralf Q. <itw...@gm...>]

On 6/6/2024 3:17 PM, pastebin--- via synalist-public wrote:
> Hi
>
> Can synapse get emails from a server other then from the 'inbox' ?  specifically from the 'Spam' folder on the server?
>
That isn't how POP3 works...

[Synalist] can synapse get pop3 emails

[<pas...@gm...>]

Hi

Can synapse get emails from a server other then from the 'inbox' ?  specifically from the 'Spam' folder on the server?

Re: [Synalist] using sendstring vs sendstreamraw for text files

[Lukas G. <geb...@ml...>]

Sendstream(raw) is just loop (symbolic code):

repeat
	read buffer from the stream
	sendstring(buffer)
until not eof

BTW: opposite function to sendstream is not recvpacket in case of 
TCP. RecvPacket just read what is in the systrm buffers now. It can 
be something different then what is sended by one SendString call. 
(It is very common error.)

Lukas

> 
> 
> background:
> 
> i made a simple tcp/ssl send/receive client/server using fpc/synapse
> 
> i started off using sendstring/recvpacket for sending stuff but while it works okay for simple typing text and text files and fpc runcommand results it gave bad 'binary' files (tgz png pdf etc)
> 
> so since going through
> http://synapse.ararat.cz/doc/help/blcksock.TBlockSocket.html
> was a bit overkill for information to use to figure out what to use
> 
> so looking around for a solution and finding
> https://forum.lazarus.freepascal.org/index.php?topic=31488.0
> https://stackoverflow.com/questions/30778703/lazarus-freepascal-synapse-send-file-to-tcpblocksocket
> 
> so now i use sendstreamraw(fs); // tstreamemory  for sending 'binary' files
> and everything is fine
> 
> ---
> 
> my question:
> 
> since the most common use of the program will be sending text files and using the sendstreamraw method with tfilestream works just as well as sendstring (from working vs not working viewpoint only) and thinking on simplifying the code to just use sendstreamraw for sending text files (treating all files as a single class of files rather then as text vs binary)
> 
> is creating the tfilestream then using sendstreamraw
> fs := tfilestream.create(s, fmOpenRead);
> a more or less efficient method then just reading the file into a variable and then using sendstring
> 
> any information on limitations/benefits/synapse internals/fpc compiler internals/timing  etc of using the sendstreamraw vs sendstring methods would be appreciated
> 
> ---
> 
> 
> _______________________________________________
> synalist-public mailing list
> syn...@li...
> https://lists.sourceforge.net/lists/listinfo/synalist-public



-- 
Lukas Gebauer.

http://synapse.ararat.cz/ - Ararat Synapse - TCP/IP Lib.
https://www.geoget.cz/ - Geocaching solution

[Synalist] using sendstring vs sendstreamraw for text files

[<pas...@gm...>]

background:

i made a simple tcp/ssl send/receive client/server using fpc/synapse

i started off using sendstring/recvpacket for sending stuff but while it works okay for simple typing text and text files and fpc runcommand results it gave bad 'binary' files (tgz png pdf etc)

so since going through
http://synapse.ararat.cz/doc/help/blcksock.TBlockSocket.html
was a bit overkill for information to use to figure out what to use

so looking around for a solution and finding
https://forum.lazarus.freepascal.org/index.php?topic=31488.0
https://stackoverflow.com/questions/30778703/lazarus-freepascal-synapse-send-file-to-tcpblocksocket

so now i use sendstreamraw(fs); // tstreamemory  for sending 'binary' files
and everything is fine

---

my question:

since the most common use of the program will be sending text files and using the sendstreamraw method with tfilestream works just as well as sendstring (from working vs not working viewpoint only) and thinking on simplifying the code to just use sendstreamraw for sending text files (treating all files as a single class of files rather then as text vs binary)

is creating the tfilestream then using sendstreamraw
fs := tfilestream.create(s, fmOpenRead);
a more or less efficient method then just reading the file into a variable and then using sendstring

any information on limitations/benefits/synapse internals/fpc compiler internals/timing  etc of using the sendstreamraw vs sendstring methods would be appreciated

---