Mega Search
23.2 Million


Sign Up

Make a donation  
Using TLS with IW14.0.36  
News Group: embarcadero.public.delphi.thirdpartytools.intraweb

Hi

Now that SSL is just about dead in the water, and browsers are demanding 
that TLS1.0 [or greater] be used, are there any instructions as to how 
to use TLS with a standalone IntraWeb server?

Many thanks.
-- 
Regards,
Will Owyong
(GMT+10, Australia)

Vote for best question.
Score: 0  # Vote:  0
Date Posted: 22-Jan-2015, at 7:26 PM EST
From: William Owyong
 
Re: Using TLS with IW14.0.36  
News Group: embarcadero.public.delphi.thirdpartytools.intraweb
> {quote:title=William Owyong wrote:}{quote}
> On 23/01/2015 2:26 PM, William Owyong wrote:
> > Hi
> >
> > Now that SSL is just about dead in the water, and browsers are demanding
> > that TLS1.0 [or greater] be used, are there any instructions as to how
> > to use TLS with a standalone IntraWeb server?
> >
> > Many thanks.
> >
> 
> Correction, using 14.0.32 Ultimate edition.

Hi William,

If you need HTTPS we strongly recommend you to update to latest IW 14.0.37.

Using this version you can get an A grade in SSL Labs test out of the box and you can support more than one version of TLS, like this:

ServerController.SSLOptions.SSLVersions = [TLSv1,TLSv11,TLSv12]

Check version history here (we introduced these changes in IW 14.0.35): http://www.atozedsoftware.com/intraweb/History/XIV/index.EN.aspx

Vote for best answer.
Score: 0  # Vote:  0
Date Posted: 23-Jan-2015, at 2:21 AM EST
From: Alexandre Machado
 
Re: Using TLS with IW14.0.36  
News Group: embarcadero.public.delphi.thirdpartytools.intraweb
On 23/01/2015 2:26 PM, William Owyong wrote:
> Hi
>
> Now that SSL is just about dead in the water, and browsers are demanding
> that TLS1.0 [or greater] be used, are there any instructions as to how
> to use TLS with a standalone IntraWeb server?
>
> Many thanks.
>

Correction, using 14.0.32 Ultimate edition.

I think I have TLS 1.0 working now in my test environment.

I used SSLBuddy but it misses a step in the self-signed cert creation 
for IW - it doesn't let you define a password during creation but 
demands one when preparing the certificate for installation into IW SA 
server.

The website 
(http://www.atozedsoftware.com/intraweb/Blog/20120905.EN.aspx) says that 
only TLS1.0 is supported but I'm given a choice up to TLS1.2 in the 
SSLOptions.SSLVersion property. When trying to use TLS 1.1 or 1.2 it 
seems to revert back to TLS 1.0.

Does 14.0.32 only support TLS 1.0 or is there something else I need to 
do to get it working?

-- 
Regards,
Will Owyong
(GMT+10, Australia)

Vote for best answer.
Score: 0  # Vote:  0
Date Posted: 22-Jan-2015, at 8:37 PM EST
From: William Owyong