Missing declaration of _SslSet1Host
Fix bug #77
New BSD SysLog sender with RFC-5424 support
New Rfc3339DateTime function
OK, ttyACM* added
ACM serial devices under LInux
GetSerialPortNames returns ttyACM* too
[Patch available] Synapse/OpenSSL accepts wrong-host certificates (security risk)
Thank you, fixed now!
Enable hostname verification in OpenSSL (bug #75 by dokkie8844)
synaser.pas does not pass FPC_Range Check
Thanks, fixed.
synaser.pas - fix rangecheck error
ssl_openssl3.pas not included in laz_synapse.lpk
Thanks, fixed.
Updated Lazarus package definition to use OpenSSL 3.x
syslog - use FDQN (instead of first IP) as message sender identification
Of course, OpenSSL 1.1.1 does not have function SSLeayversion at all. You must use plugin ssl_openssl11.pas instead. However all these OpenSSL versions are outdated and deprecated, best is OpenSSL 3 with ssl_openssl3.pas plugin.
Synapse 40
Not a bug. As error message says: "youtr application not have compiled support for SSL/TLS." You must add one of SSL plugins into your project first. Take a look for unit with "ssl_" on begin of their names. It depending on available crypto libraries on your platform.
IPV6 PingSend shows overly long RTT values (2000000 and more), though the ping returns within some msec
Fixed in SVN commit #270 now. Thank you, I really don't know why I shifted buffer before, maybe some other bug in prehistoric implemetation...
Bugfix #71, ICMPv6 on Windows (thanks to Armin)
Trying to load an SSL implementation on macOS results in "loading libcrypto in an unsafe way" error
Fixed, thank you!
Fix bug #70 - OpenSSL3 on Mac
Error in flush method for android with FPC
Thnaks, fixed as SVN #268
Request #28 - fix for Flush on FPC-Android
Access Violation in tPingSend on Win64 platform
It is wrong datatype for IpHlp handle on Win64 platform. Fixed in r267 now. Thank you!
Fixed pingsend.pas on Win64 platform
Thank you, fixed in SVN r266 now.
function d2iX509bio(): Wrong order of arguments in implementation
Fix bug #66
Different versions of OpenSSL on a Linux system
ssl_openssl3 is for version 3+ only. It using latest API and cannot be used with old deprecated versions. However old ssl_openssl is still here for all openssl versions, but not all features are working fine in all versions. I am focusing to new ssl_openssl3 only.
ssl_openssl.pas and ssl_openssl11.pas are deprecated now. Use ssl_openssl3.pas instead.
New SSL plugin for OpenSSL 3+ as preferred plugin for future.
Set Cert + Key from string failing
fixed string result of GetPeerFingerprint (other SSL plugins)
SSL.GetPeerFingerprint - bugfix - result must be ansistring for compatibility with Unicode Delphi. (Result is binary nonprintable string) Need to change it in some SSL plugins too!
ssl_openssl11 is not adapted for 3.0 yet. I must do it soon. However your problem is very simple! Look at comments on the begin of ssl_openssl.pas where are written acceptable certificate formats: for files are accepted "text based PEM" or "binary based DER" formats. for reading from the memory is accepted "binary based DER" only. ... and you are trying to read PEM. So, try to convert your PEM certificate to DER format first (how to read here: https://www.entrust.com/knowledgebase/ssl/how-do-i-convert-my-pem-certificate-to-a-der-certificate-format)...
Well, but what plugin you have compiled with Synapse? ssl_openssl or ssl_openssl11, or some else?
What SSL plugin class are you using?
ssl_openssl11 - Read all certificates from the PFX file (Radek Cervinka)
Yes, working... but not full time, sorry.
many small POSIX and NEXTGEN fixes (ACBr)
synacode.pas - POSIX fixes (ACBr)
ssl_openssl_capi.pas small fix
ssl_cryptlib.pas Support for TLS1.2 and 1.3 (by ACBr)
blcksock.pas - improvements by ACBr
synamisc.pas POSIX fixes
new function GetLocalIPsFamily
synaser.pas - POSIX and Android support by ACBr
Charset handling fixes by ACBr
Typo errors and little improvements inspired by ACBr
synamisc.pas - new function GetProxyForURL (Windows only)
New implementation of GetIEProxy for IE 5.0+
synafpc.pas - required ansistring functions are avaiable in XE4+
ssposix.inc - improvements inspired by ACBr
Mode switch "DELPHI" not allowed here
It is not posible, becuse jedi.inc is mandatory for all conditionals. I just forgot remove this directove, because it is part of jedi.inc. Not need "mode delphi" here again. Fixed in r245. Thanks.
synafpc.pas - fix: $MODE DELPHI directive is a part of jedi.inc
synafpc.pas - extended version by ACBr
sslinux.inc improved by ACBr
ssfpc.inc fixes by ACBr
synsock.pas - better handling of ssPosix
Delphi Posix (Android) fixes by Radek Červinka
It is part of original jedi.inc I do not know why they set this for all platforms on FPC. So, I disable this line again. Thanks!
jedi ASMMODE Intel
jedi.inc - bug - do not set "ASMMODE intel" on FPC. It break non-intel platforms.
This plugin is designed for obsolette OpenSSL versions. Please, migrate to ssl_openssl11 plugin.
TSSLOpenSSL.Init/Prepare(aserver: Boolean) functions have been removed
jedi.inc - Delphi 11 support
Thanks!
bugtracker milestones
Please, try latest SVN version. Maybe it is fixed by bug #53.
synsock.Recv under MacOS
We are supporting much more platforms... fixed in ssfpc.inc instead. Thanks.
ssfpc.inc - do not use MAG_NOSIGNAL on MacOS, it is disabled by SO_NOSIGPIPE instead (bug #53)
After revision 233 not compile with FPC 3.3.1
FPC DELPHI mode is enabled inside jedi.inc, cannot enable it again.
ftpsend.pas - MLSD support and directory parsing improvements (Jan Fiala)
new SSL plugin for OpenSSL with CAPI Windows certificate storage (by Pepak)
ssl_openssl plugin - support for any OpenSLL version (by Pepak)
Ansistring compatibility on Delphi 10+
small "warning" issue
small "warning" issues
asn1util IdToMib RangeCheckError
Fixed, thanks.
asn1util.pas - support for encoding of 64bit MIB element
Incompatible types error on Mac OS X (Mavericks)
Thanks.
WakeOnLan in synamisc fails in D2009, Unicode conversion error
Thank you!
synamisc.pas - fix bug #31
TLS1.3 is supported too, see the ssl_openssl11 plugin. This is for my remind: https://www.openssl.org/docs/manmaster/man3/SSL_CTX_set_keylog_callback.html
httpsend.pas - int64 support and improvements (by Pepak)