[Lazarus] Email sending program using Indy stopped working - seems to be an SSL problem

[Bo Berglund]

On Sat, 13 Jan 2024 09:30:17 +0100 (CET), Michael Van Canneyt via lazarus
<lazarus at lists.lazarus-ide.org> wrote:

>
>
>On Sat, 13 Jan 2024, Bo Berglund via lazarus wrote:
>
>> I wrote a commit reporting application for Windows Server16 back in 2018 using
>> then current Lazarus/Fpc.
>> It is a command line program called from a hook in subversion to distribute the
>> log message and details of commits among co-workers.
>>
>> It uses Indy 10.6.2 to do its job.

In fact I don't know which Indy10 version was current in 2018 but I recompiled
today with Lazarus 2.2.4 + Fpc 3.2.2 and there was no improvement. :(

>> Now I have looked in the logfiles the application creates and found this error
>> example:
>>
>> 20240111 17:13:35.343 Connecting to mailserver
>> 20240111 17:13:36.590 EXCEPTION: In SendSvnMessage = Error connecting with SSL.
>> error:1409442E:SSL routines:ssl3_read_bytes:tlsv1 alert protocol version
>>

>
>Indy 10 uses a completely outdated version of the SSL library, which does
>not have the most recent cryptographic routines (notably for tls).
>
>Most likely the server was updated and now rejects this old version.

It looks likely. I will check with the ISP tech support on Monday (this company
closes support on week-ends)..

>There is of course a new version of the openssl library (3.2.x).
>The interface of that library changed, but to the best of my knowledge, 
>indy does not support it.

Then I have to switch to my backup plan, which is to do the mailing itself from
a php script on my webserver (hosted at the same ISP server as the mail server
is running on).

Then I have to modify the mailer program so it posts the data to that php
handler instead of using the SMTP Indy component to do the job.

>The sgcWebSockets suite has an updated version of openssl which should be able to
>support openssl 3, but that is paying software..
>

There is a lot of stuff related to the SVN server communications built into my
mailer also using Indy so I will have to modify that application...


-- 
Bo Berglund
Developer in Sweden