[Lazarus] Email sending program using Indy stopped working - seems to be an SSL problem
Bo Berglund
bo.berglund at gmail.com
Sat Jan 13 15:49:34 CET 2024
On Sat, 13 Jan 2024 09:30:17 +0100 (CET), Michael Van Canneyt via lazarus
<lazarus at lists.lazarus-ide.org> wrote:
>
>
>On Sat, 13 Jan 2024, Bo Berglund via lazarus wrote:
>
>> I wrote a commit reporting application for Windows Server16 back in 2018 using
>> then current Lazarus/Fpc.
>> It is a command line program called from a hook in subversion to distribute the
>> log message and details of commits among co-workers.
>>
>> It uses Indy 10.6.2 to do its job.
In fact I don't know which Indy10 version was current in 2018 but I recompiled
today with Lazarus 2.2.4 + Fpc 3.2.2 and there was no improvement. :(
>> Now I have looked in the logfiles the application creates and found this error
>> example:
>>
>> 20240111 17:13:35.343 Connecting to mailserver
>> 20240111 17:13:36.590 EXCEPTION: In SendSvnMessage = Error connecting with SSL.
>> error:1409442E:SSL routines:ssl3_read_bytes:tlsv1 alert protocol version
>>
>
>Indy 10 uses a completely outdated version of the SSL library, which does
>not have the most recent cryptographic routines (notably for tls).
>
>Most likely the server was updated and now rejects this old version.
It looks likely. I will check with the ISP tech support on Monday (this company
closes support on week-ends)..
>There is of course a new version of the openssl library (3.2.x).
>The interface of that library changed, but to the best of my knowledge,
>indy does not support it.
Then I have to switch to my backup plan, which is to do the mailing itself from
a php script on my webserver (hosted at the same ISP server as the mail server
is running on).
Then I have to modify the mailer program so it posts the data to that php
handler instead of using the SMTP Indy component to do the job.
>The sgcWebSockets suite has an updated version of openssl which should be able to
>support openssl 3, but that is paying software..
>
There is a lot of stuff related to the SVN server communications built into my
mailer also using Indy so I will have to modify that application...
--
Bo Berglund
Developer in Sweden
More information about the lazarus
mailing list