BorlandTalk.com Forum Index BorlandTalk.com
Borland discussion newsgroups
 
Archives   FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

POP3 SSL with Indy 9

 
Post new topic   Reply to topic    BorlandTalk.com Forum Index -> Delphi Internet Winsock
View previous topic :: View next topic  
Author Message
Yuriy Synov
Guest





PostPosted: Mon Jan 24, 2005 4:06 pm    Post subject: POP3 SSL with Indy 9 Reply with quote




Dear All,

I'm developing an application that downloads mail via POP3 using SSL. I'm using Indy 9 from VCS (10.10.2004) and OpenSSL 0.9.6m (from Indy FTP site) and running Windows XP. I set up SSL in the following way:

var
pop3: TIdPOP3;
handler: TIdSSLIOHandlerSocket;

{...}

handler := TIdSSLIOHandlerSocket.Create(pop3);
pop3.IOHandler := handler;

pop3.Username := 'user';
pop3.Password := 'pass';
pop3.APOP := false;
pop3.Port := 110;
pop3.Host := 'somehost';
pop3.Connect;

For most POP3/SSL servers it works well. But with one server I have a problem. An exception occurs in 'pop3.Connect' call. I have debugged it, and figured out that the following SSL error occurs:

error:1406D0B8:SSL routines:GET_SERVER_HELLO:no cipher list

When I use OpenSSL test utility on Linux ('openssl s_client -connect
ipostoffice.worldnet.att.net:995') with the failing server, there's no problem. So it seems that the problem is with Indy.

I also discovered that servers that work OK use DES-CBC3-SHA cipher, and the one that fails uses RC4-SHA.

Here are parameters for the account if you are interested:

Username: [email]pbeaupain (AT) att (DOT) net[/email]
Password: xy123456
Incoming server: ipostoffice.worldnet.att.net
SSL: on

Please help me with this problem. TIA.
Back to top
Eugene Mayevski
Guest





PostPosted: Fri Feb 04, 2005 11:30 am    Post subject: Re: POP3 SSL with Indy 9 Reply with quote



Yuriy Synov wrote:

Quote:
I also discovered that servers that work OK use DES-CBC3-SHA cipher, and the one that fails uses RC4-SHA.

Most likely OpenSSL doesn't support RC4 for patent reasons.

You might want to try SecureBlackbox
(http://www.secureblackbox.com/delphi-ssl.html)

Sincerely yours,
Eugene Mayevski

Back to top
Yuriy Synov
Guest





PostPosted: Sat Feb 05, 2005 11:06 am    Post subject: Re: POP3 SSL with Indy 9 Reply with quote




Quote:
Most likely OpenSSL doesn't support RC4 for patent reasons.
OpenSSL does indeed support RC4 because test utility of OpenSSL connects to that server without problems.


Back to top
Clever Components Team
Guest





PostPosted: Sat Feb 19, 2005 4:28 am    Post subject: Re: POP3 SSL with Indy 9 Reply with quote

Yuriy,

Take a look at Clever Internet Suite
http://clevercomponents.com/products/inetsuite/pop3.asp it has full SSL
support out of the box.

Best regards,
Clever Components Team
http://www.clevercomponents.com

"Eugene Mayevski" <mayevski (AT) eldos (DOT) org> wrote

Quote:
Yuriy Synov wrote:

I also discovered that servers that work OK use DES-CBC3-SHA cipher, and
the one that fails uses RC4-SHA.

Most likely OpenSSL doesn't support RC4 for patent reasons.

You might want to try SecureBlackbox
(http://www.secureblackbox.com/delphi-ssl.html)

Sincerely yours,
Eugene Mayevski



Back to top
Display posts from previous:   
Post new topic   Reply to topic    BorlandTalk.com Forum Index -> Delphi Internet Winsock All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2006 phpBB Group
SEO toolkit © 2004-2006 webmedic.