|
Author | 64bit RTC Web Server with SSL |
Stephen Mott 2018-11-05 14:27:40 Registered user |
Hi, I'm trying to add SSL support to my 64bit RTC Webserver using StreamSec v2.3.1.273, but it won't compile MpArith.pas because I don't have StreamSec.DSI.ArithTypes & StreamSec.DSI.Arith (there may be more, but it won't go past this file). Any idea where I find these files?
Steve.. |
Henrick Wibell Hellström 2018-11-07 21:23:23 Registered user |
Sorry for the late reply, I have been relocating the last couple of days, and have still not set up a complete office at my new location.
Regarding your question: ST 2.3 is for Win32 executables only. If you wish to compile it for Win64 binaries, you will need the PKC Tools 4.0 add-on. Technically, you can use the dcu-only trial download, but naturally I recommend using the PKC Tools 4.0 source code. |
Stephen Mott 2018-11-08 14:27:11 Registered user |
Thanks Henrick, good luck with the relocation, I'll sort out getting it ordered.
|
Stephen Mott 2018-11-08 15:02:38 Registered user |
Just trying out the demo version, while waiting approval, and although it now compiles, I'm getting an exception when loading the certificate, this works fine on Win32:
PW := TSecretKey.CreateBMPStr('abc',3); WHILE NOT MPYarrow.YarrowHasReseeded DO BEGIN Sleep(100); Application.ProcessMessages; END; SimpleTLSInternalServer1.ImportFromPFX(ExtractFilePath(AppFileName) + 'Server.pfx', PW); // this gives an exception in SsArc4.pas / TARC4.Decrypt at 'xor byte [rdi],AL' |
Henrick Wibell Hellström 2018-11-08 16:44:40 Registered user |
Thank you for the report, I will investigate.
|
Henrick Wibell Hellström 2018-11-08 19:29:08 Registered user |
BTW, by "64bit" I take it you mean Win64. Is that correct?
|
Stephen Mott 2018-11-09 00:18:46 Registered user |
Yep
|
Stephen Mott 2018-12-07 14:30:32 Registered user |
Hi Henrick, hope the relocation went well, did you have any luck with this?
|
Henrick Wibell Hellström 2018-12-08 08:15:48 Registered user |
No, I couldn't reproduce on my machine with any of the PFX files I use for testing, and I have been waiting for similar reports from other users, but haven't got any so far.
Do you think you could email me a sample PFX file that works with Win32 but not Win64? |
Stephen Mott 2018-12-10 00:27:48 Registered user |
The one I'm testing is the one that comes with the RTC example, I can send it if you don't have it..?
|
Henrick Wibell Hellström 2018-12-11 11:32:25 Registered user |
No, you don't have to send it, but please compile and run the server in Win32 mode, connect with a browser, and check if it is the server certificate from 2017. You will find the validity dates of the certificate in the certificate viewer of the browser. If it is the 2017 cert, I can't reproduce on my development machine. If not, please send the PFX.
Another question: What kind of development environment are you using? Are you running in a virtual machine, on a computer with an extreme low end or extreme high end CPU, or anything else that comes to mind? |
Stephen Mott 2018-12-13 16:39:02 Registered user |
Yes the 32bit version works fine, well it imports the pfx, browser gives a warning, says the pfx is:
Issued by: Demo Root CA Expires: Wednesday, 10 November 2027 at 15:43:04 Greenwich Mean Time It is a VM, Fusion 11.0.2, guest is Windows 10.0.17763.168, host is a Mac i9/32GB running 10.14.2 Beta (18C52a), though when I initially reported it, it was an i7/16GB Mac running 10.13, I've only recently upgraded and copied everything across. |
Stephen Mott 2019-01-10 14:24:39 Registered user |
Hi Henrick,
Happy New Year.. Any other thoughts on this? Steve.. |
Henrick Wibell Hellström 2019-01-14 12:50:13 Registered user |
Sorry, no, I have not been able to reproduce.
One thing that might be noted, though, is that sometimes some debugging tools, error tracking tools and logging tools, have been prone to mess with some of the assembler implementations in ST 2.x. Are you using anything that might inject code into method headers, change the calling convention, etc? |
Stephen Mott 2019-01-18 14:57:22 Registered user |
I use the NexusDB memory manager and Eurekalog? I can try without Eurekalog, nxmm is a bit more tricky to exclude..
|
Stephen Mott 2019-01-18 16:53:49 Registered user |
Well Eurekalog was fine, but commenting out nxReplacementMemoryManager did the trick, not sure what implications this has for speed though...
|
Stephen Mott 2019-01-18 17:49:30 Registered user |
Yea, it's quite noticeably slower, should I report it to them or can you liaise with them direct..?
|
Henrick Wibell Hellström 2019-01-18 20:24:04 Registered user |
This should work (and works here), provided you are using a version of nxReplacementMemoryManager that supports CPUX64.
The potential problem I am try to get at, is that the TARC4.Decrypt method doesn't declare the Win64 pseudo-ops .PARAMS etc, and this is known to have thrown off some higher level debuggers and error tracking tools in the past. If disabling the nxReplacementMemoryManager is sufficient to solve the issue, and if you are using a version of those units that are supposed to work on the platform, that would hint to a problem with buffer overruns or dangling pointers, but if that were the case, I should be able to replicate here, and I can't. |
Stephen Mott 2019-01-21 22:48:22 Registered user |
I'm currently using v4.1201, I assume it supports CPUX64..? I did have to translate a few units to 64bit (plus unicode), some of the 32bit libs were never updated before the developers disappeared, so there could be other factors, at the time I was more worried about making the 64bit version work, as the 32bit version kept running out of memory and meant having to keep restarting the server, so the upgrade was mainly just fixing compiler errors and warnings. I'll have to do more digging..
|
Stephen Mott 2019-01-25 16:08:31 Registered user |
Is there a problem with your shop, I went to order the PKC Tools 4.0 add-on and it says 'Shop Closed'?
|
Henrick Wibell Hellström 2019-01-25 16:34:09 Registered user |
Please try again.
There was a problem when the web administration PC was reverted to an older backup. We switched from SWREG to Share-IT a couple of months ago, and the version of www.streamsec.com you saw had the old links. |
Stephen Mott 2019-01-29 15:39:20 Registered user |
Thanks, yep worked this time..
|
Henrick Wibell Hellström 2019-01-29 16:55:11 Registered user |
Thanks!
Did you get the email with your new login credentials? |
Stephen Mott 2019-01-31 17:40:23 Registered user |
Actually no, not even an acknowledgement from MyCommerce, just the PDF I downloaded..?
|
Henrick Wibell Hellström 2019-01-31 20:58:42 Registered user |
Is it possible you entered the wrong email address?
|
Stephen Mott 2019-02-04 17:35:41 Registered user |
I got one through from you thanks, looks like a typo, any way to edit or merge them?
|
Henrick Wibell Hellström 2019-02-05 20:56:11 Registered user |
Done.
|
Stephen Mott 2019-02-07 15:06:04 Registered user |
Great, thanks!
|