EldoS | Feel safer!

Software components for data protection, secure storage and transfer

Error 75777 on https

Also by EldoS: MsgConnect
Cross-platform protocol-independent communication framework for building peer-to-peer and client-server applications and middleware components.
#32116
Posted: 02/05/2015 09:45:29
by Walter Schrabmair (Priority Standard support level)
Joined: 05/03/2013
Posts: 150

HI,
I have the latest VCL SBB and got an error 75777 on https://api.clickatell.com/http/sendmsg

I dont know why it does not work anymore, but some time ago it worked fine.
clickatel is an sms service. When I use http instead of https it works fine.
I have all options enabled (sbSSL3 also.)

Code
    if ((bSendSMS) and (RegUsername<>'Unregistriert!') ) then
      begin
      lPostParams := TStringList.Create;
      lPostParams.Clear;
      lPostParams.Add('user=wschrabi');
      lPostParams.Add('password=*******');
      lPostParams.Add('api_id=3497842');
      lPostParams.Add('to='+smstel);
      lPostParams.Add('text=Der Download der MSDS ist abgeschlossen! (Gefunden: '+inttostr(anzfound)+'/Nicht gefunden: '+inttostr(anznotfound)+') Timestamp: '+datetimetostr(now));
      MMLOGDETAIL.Clear;
      stage:=8;
      ElHttpsClient2.PostWebForm ('https://api.clickatell.com/http/sendmsg',lPostParams);
      lPostParams.Free;
      end;
      
    except
      ShowMessage('Konnte SMS Server nicht connecten! ');

    end;


As I tested it with CHrome/FF with a https GET it works fine.
MOreover I have discovered that the TSL10 protocoll is used. SeeGIF.
WHen I disable all version in httpclient and enable only TSL10 then I get ERROR 75784

What to do?

WHen I use SimpleSSL Client from the Demo and make a GET with the
parameterpart for sending a SMS it works also fine. See GIF.

How can I make a POST in the DEMOSSLCLient? I also could provide you
with password in helpdesk, when you would like to investigate.



Thanks
Walter


#32118
Posted: 02/05/2015 12:29:12
by Walter Schrabmair (Priority Standard support level)
Joined: 05/03/2013
Posts: 150

I found the error, I had not SSLEnabled in the HTTPSCLient.
The Demo Httpsclient works also fine with GET.

My Question: I the parameterpart of the URL encrypted transfered?

The Problem is thet with GET the password in the parameterpart of the url will be in the log file on the host.
Theresofar I would like to use POST.

POST works now also.

Sorry for bother you!
#32119
Posted: 02/05/2015 12:41:29
by Eugene Mayevski (EldoS Corp.)

Quote
Walter Schrabmair wrote:
My Question: I the parameterpart of the URL encrypted transfered?


The request URL is transferred encrypted in any type of request which is sent over TLS (and thus HTTPS). Yet, you are right, the logs can contain the parameters, this depends on server setup.

SSLEnabled should not affect the connection because you pass the "https" protocol scheme indicator in the URL. However maybe some combination of properties causes this side effect. Looking into the code I don't see where the glitch can come from.


Sincerely yours
Eugene Mayevski

Reply

Statistics

Topic viewed 382 times

Number of guests: 1, registered members: 0, in total hidden: 0




|

Back to top

As of July 15, 2016 EldoS Corporation will operate as a division of /n software inc. For more information, please read the announcement.

Got it!