[twsocket] A problem/bug with current daily snapshot of ICS

2010-05-05 Thread Zvone
I have 2 snapshots. The one I downloaded on 2009-11-18, and the one I downloaded on 2010-05-03 (so it is snapshot from 2010-04-28 in fact which is the last date I see in the history). When I compile a project I have, it stops with the following error message: [BCC32 Error] utilcls.h(511): E2015 A

Re: [twsocket] A problem/bug with current daily snapshot of ICS

2010-05-06 Thread Zvone
> please try to add the line below to OverbyteIcsLIBEAY.pas and report back, > thank you! > > type >{$EXTERNALSYM size_t} <== this line >size_t = LongWord; // x86 Arno, This appears to solve the issue. The project I have now compiles without errors with this version as well. /me is happy

Re: [twsocket] BTW: Support for OpenSSL 0.9.8n is available (ICS v7)

2010-05-10 Thread Zvone
well, that's great news i thought it was not fixed already and it was still disabled in "N" version as well. good to know! but what does this mean "require the extension as needed"? if i understood correctly - if you have 098n and server supports the extension, it will be used with no additional

Re: [twsocket] A problem/bug with current daily snapshot of ICS

2010-05-11 Thread Zvone
> You are welcome! It's fixed and checked in. Should be included > in the next daily snapshot as well. However declaration of size_t > moved to OverbyteIcsTypes.pas and there are some other changes too. > Please give it a trial and let me know how it works for you. Arno, didn't had time to test th

Re: [twsocket] BTW: Support for OpenSSL 0.9.8n is available (ICS v7)

2010-05-13 Thread Zvone
> Most likely that's wrong, as I recall the vulnerability, > it's probably only safe to not enable option > "SslOpt_ALLOW_UNSAFE_LEGACY_RENEGOTIATION". I never even meant to enable this option. If it fails I don't care. Many servers will be upgraded quickly to fix this issue anyway so I don't thin

Re: [twsocket] Wiki (was BTW: Support for OpenSSL 0.9.8n is available(ICS v7))

2010-05-13 Thread Zvone
>> I have a suggestion - why are you so strict about approval of people >> that write content? > > Probably because it's safer against SPAM and other unwanted content? Here are thoughts for you: - NSIS documenation works on user contribution and does just fine - I could probably find much more ex

[twsocket] Issue with compiling on CB2010

2010-05-14 Thread Zvone
When compiling current V7 on CB2010 (possibly D2010 as well) - when doing "Install" on the design-time package it pops: "Unable to find static library: OverbyteIcsCB2009Run.lib" On a related note - when doing install should I change active configuration to "Release" for both Run-time and Design-ti

Re: [twsocket] Should ICS support IPv6 on W2K?

2010-06-01 Thread Zvone
Arno, don't bother with Win2000 without service packs support. See this: OS usage by market share: Windows XP - 62.53% Windows Vista - 15.26% Windows 7 - 12.67% Mac OS X 10.6 - 2.34% Mac OS X 10.5 - 1.96% Linux - 1.13% Java ME - 0.73% Mac OS X 10.4 - 0.66% iPhone - 0.60% Windows 2000 - 0.50% It

[twsocket] A bug or issue with Pop3 component

2010-06-28 Thread Zvone
I believe I discovered an issue with Pop3 component. I test it with same sequence of commands and with same server. If I issue the following sequence: Connect(); User(); Pass(); Stat(); List(); Uidl(); --- this one does not trigger events (OnUidlBegin, OnUidlEnd and OnUidlLine) but only if called

[twsocket] A bug with Pop3 - followup

2010-06-28 Thread Zvone
I tried synchronous calls now and discovered that event trigger is not necessary related to UIDL after LIST: SyncPop3Cli1->Host = "pop3.host.name"; SyncPop3Cli1->Port = 110; SyncPop3Cli1->UserName = "username"; SyncPop3Cli1->PassWord = "password"; SyncPop3Cli1->ConnectSync(); SyncPop3Cli1->UserSyn

Re: [twsocket] A bug with Pop3 - followup

2010-06-29 Thread Zvone
> You have to reset property MsgNum to zero before both List() and Uidl(). Alright, that seems to work, although it is not entirely logical to me. I'll put it in the wiki documentation when updating it along with one "complete" example. Thanks Arno. -- To unsubscribe or change your settings for TW

Re: [twsocket] A bug with Pop3 - followup

2010-06-30 Thread Zvone
> Thanks for your wiki-input! > Arno Garrels Thank you for your answers that helped me. By the way, I suggested to Francois to install Geshi for code-coloring, if you refresh the page on: http://wiki.overbyte.be/wiki/index.php/TPop3Cli.List You'll see how it looks much nicer now. The only importa

Re: [twsocket] A bug with Pop3 - followup

2010-07-01 Thread Zvone
>> So if you changed some of the wiki pages now you can surround it with >> these tags and make your code look nicer. > Looks nice with C++, however the Delphi colors should be changed. I didn't want to go into styling because it is a matter of preference. The colors as they are now are defaults o

[twsocket] pop3, buffer and character encoding

2010-07-01 Thread Zvone
OK, I have an issue which I don't entirely understand. The way to check received pop3 message is to create Pop3CliMessageLine event and then add Pop3Cli.LastResponse to your own buffer (UnicodeString) and store that as "email". However, this creates a bit of a problem - LastResponse is UnicodeStr

Re: [twsocket] pop3, buffer and character encoding

2010-07-01 Thread Zvone
After further investigation I made a small pop3 server emulator that sends all character codes except 0x00, 0x0A and 0x0D which should not be in message anyway. Even though the LastResponse unicode looks a bit odd in debugger, after doing a SslPop3Cli->LastResponse.c_str(); and SslPop3Cli->LastRes

Re: [twsocket] pop3, buffer and character encoding

2010-07-02 Thread Zvone
> However, as long as this codepage was one of the windows-xyz, > single byte character sets converting back to Ansi with the > same codepage should work without data loss and give you back > the raw bytes (hopefully). This won't work, for example, with > Japanese locale settings. But there is a s

Re: [twsocket] pop3, buffer and character encoding

2010-07-02 Thread Zvone
> TBytes was the datatype to be used. However that would break > backwards compatibility since historically "string" was used everywhere. > That all was no problem, however the rule is: "DO NOT BREAK BACKWARDS > COMPATIBILITY" and that is where the problems begin. Well you've already broken this r

Re: [twsocket] A better Unicode port of the POP3 client

2010-07-05 Thread Zvone
> Hi, > > I uploaded a better Unicode port of TPop3Cli here: > http://www.duodata.de/misc/delphi/ics/OverbyteIcsPop3Prot.zip Thanks for making a quick fix, I will surely use it and probably a few other people here as well. But I'm more for a permanent solution so I'll keep an eye on this. I've be

Re: [twsocket] SSH support

2010-07-17 Thread Zvone
> Fredrik Larsson wrote: >> Can't you use something like Putty to tunnel the traffic? I may also suggest http://www.stunnel.org/ for wrapping any kind of non-SSL traffic into SSL. -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailma

[twsocket] Detecting POP3 protocol state and disconnecting

2010-08-09 Thread Zvone
A few POP3 related questions... 1. How am I supposed to detect when POP3 component has disconnected or what state is it in? OnSessionClosed appears to trigger BEFORE it disconnects but after QUIT is sent (not logical for me, should be the last one to trigger) and what seems to trigger at the disc

Re: [twsocket] ICS Message handlers

2010-08-13 Thread Zvone
>Can I send attachment to this group? If not, how do I send? >Eric Please don't send attachments even if it is possible. Upload to hotfile.com or some similar service (there is a bunch of them!) like that and link in your message... all of such services offer you a "delete" link which you can use

[twsocket] WM_USER vs. WM_APP messages

2010-08-13 Thread Zvone
>From what I could see, ICS uses a lot of WM_USER+n messages range but the use of these custom messages is not recommended. Instead you should use WM_APP+n. http://msdn.microsoft.com/en-us/library/ms644930%28VS.85%29.aspx The reason to use WM_APP is because WM_USER can conflict with system messag

Re: [twsocket] OpenSSL 1.0

2010-08-24 Thread Zvone
Open SSL is currently branched into two releases - 0.9.8o and 1.0.0a. Although 1.0.x is more recent, 0.9.x versions are currently more stable so I would go with 0.9.x -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/tw

Re: [twsocket] New SVN URLs. Please switch your work copies!

2010-09-01 Thread Zvone
> It supports RAD Studio XE. > The new POP3 client might break existing code, read the > comments in OverbyteIcsPop3Prot.pas. So the updated POP3 is now in main trunk, not anymore on that other separate URL? What about those EXPERIMENTAL timeout and throttling... can we count on these to stay or

[twsocket] New DLL hijacking vulnerability KB 2269637

2010-09-03 Thread Zvone
It appears that this new vulnerability requires programs to adopt secure DLL loading. As Microsoft says they can't fix the issue by patching Windows as it would mess up a lot of programs so it is up to programmers to fix it in their own programs. This applies to all programs that load external libr

Re: [twsocket] New DLL hijacking vulnerability KB 2269637

2010-09-04 Thread Zvone
Well, like I wrote, it effects all programs that use ICS. And it is a bit harder to find a solution that fits all in this case due to nature of the problem. This is how ICS loads for example SSLLEAY32.DLL: const GSSLEAY_DLL_Name : String = 'SSLEAY32.DLL'; ... GSSLEAY_DLL_Handle := LoadLibrary(PC

Re: [twsocket] New DLL hijacking vulnerability KB 2269637

2010-09-04 Thread Zvone
Forget about my remark about "\" or "/". The DllPath could be used as is just DllPath + LibraryName. This avoids the need to process needlessly slashes or backslashes. If this is used I would suggest a bold remark in the docs on Wiki to encourage use of this property if this is to be used. Anyway,

Re: [twsocket] New DLL hijacking vulnerability KB 2269637

2010-09-06 Thread Zvone
>>> const GSSLEAY_DLL_Name : String = 'SSLEAY32.DLL'; > This is not required since writable typed constants is enabled. That's all fine but I don't see it published as property anywhere. How do I modify its value during runtime to set full path for SSLEAY32.DLL and LIBEAY32.DLL? -- To unsubscrib

Re: [twsocket] HTTPcli: source path question

2010-09-07 Thread Zvone
>> Then I noticed that requests to folder without trailing slash (GET >> /somepath/foo/bar) >> are redirected to locations with slash (/somepath/foo/bar/) so it's easy >> to tell it's a directory. this depends how server is configured to treat trailing slash. In most cases it will treat it as acce

Re: [twsocket] HTTPcli: source path question

2010-09-08 Thread Zvone
> Well, then I have a question: maybe you have some ideas of how to organize > recursive download: for example, if user started to download > www.example.com/path/index.html, we should also accept > www.example.com/path/logo.jpg and so on, but not www.example.com/index.php. > If user started ww

[twsocket] pop3 and lastresponse

2010-09-18 Thread Zvone
I found something that might also be issue with pop3 component. If you check one pop3 account and end the session usually LastResponse will be some ending message like "+OK sayonara". But if you then reinitialize pop3 for another account and this account fails to connect, for example due to timeou

Re: [twsocket] pop3 and lastresponse

2010-09-18 Thread Zvone
> IMO the component should clear LastResponse on before connect. Maybe it should, but what it does is different story :) The following fails also with non-sync version but sync is easier to copy-paste. //-- SyncPop3Cli->Host = "put-valid-server-here"; SyncPop3Cli

[twsocket] RFC 2822 date format - Timezone

2010-09-21 Thread Zvone
I think there might be a slight issue with timezone bias calculation. In this function (haven't checked but similar could be used somewhere else too): function TimeZoneBias : String; in OverbyteIcsSmtpProt.pas if timezone could not be calculated (TIME_ZONE_ID_INVALID) or if it is GMT (UTC) it re

Re: [twsocket] TCP LocalPort...

2010-10-09 Thread Zvone
Do you really need to determine free local port? By what you wrote it doesn't seem you need that. You need a free local port if you are making a server type of application, not a client application. If you connect to remote server (then you are making a client application) you connect to whatever

Re: [twsocket] OT: Keyloggers and the way Microsoft treats them

2010-10-13 Thread Zvone
be thankful for it and make your own and make money on it. ms thinks on a corporate level and what their corporate heads think is "good" for their users. it is a whole different mindset than "regular users" mindset. by the time they figure it out you'll have tons of money just for that simple idea.

Re: [twsocket] ICS V7 and TLS support

2010-10-15 Thread Zvone
> First off, does ICS V7 support the newest TLS version 1.2 ? whatever 0.9.8n supports, ICS should support. so take a look what 098n supports in openssl docs. > dynamically when a ICS-SSL application starts ? on first use (first connection), not when app starts but when SSL/TLS component is used

[twsocket] MIME, TMimeDecodeW and IP*Works

2010-10-24 Thread Zvone
I was looking a bit at how IP*Works operates that is included in Delphi/CB XE. With MIME decoder it has a nice feature of decoding parts "on demand". Basically it scans MIME message for available parts and builds a list of available parts. They are not decoded at this point. When you access array

[twsocket] Combining ICS with Indy

2010-10-24 Thread Zvone
Someone before here mentioned compiler errors with CB and ICS. Errors like: [BCC32 Error] ws2def.h(213): E2238 Multiple declaration for 'sockaddr' [BCC32 Error] winsock.h(486): E2344 Earlier declaration of 'sockaddr' [BCC32 Error] ws2def.h(222): E2146 Need an identifier to declare [BCC32 Error] ws

Re: [twsocket] Season's greetings

2010-12-23 Thread Zvone
Merry Christmas and Happy 2011 from Croatia to all of you guys especially Francois, Arno and Angus... and big thanks for all the help and tips provided so far! You have no idea how much it is appreciated! -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.e

Re: [twsocket] SSL send emai using gmail?

2011-02-22 Thread Zvone
A kind of related note - if you are downloading mail from Gmail (using POP3) Gmail does not behave as usual servers where you issue RETR command and deletes message only after you issue DELE command but instead it uses settings from Gmail account and seems to ignore DELE command completely. If you

[twsocket] Why ICS prefers non-blocking sockets?

2011-02-22 Thread Zvone
When I looked at Indy and Ararat Synapse they both prefer blocking sockets to connect to text-based protocols like HTTP, POP, SMTP, FTP etc. The reason - because communication is flowed - you send command, you wait reply, if reply does not match you handle error. It is all nice line-by-line inline

Re: [twsocket] SSL send emai using gmail?

2011-02-22 Thread Zvone
See: http://wiki.overbyte.be/wiki/index.php/ICS_Download -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be

Re: [twsocket] How to set in GSSLEAY_DLL_Name under BCB2010?

2011-03-01 Thread Zvone
>GSSLEAY_DLL_Name = "SSLEAY32.DLL"; >doesn't seem to work! well it should. could be a problem with installation? maybe you're missing some of the #pragma's in the cpp file? -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listi

Re: [twsocket] [OT] What are possible dangers using ICS-SSL without SSLversion chec

2011-04-03 Thread Zvone
It is definitely possible to have issues with UPX but I would say that's a bit too sensitive heuristics. With better (read: paid) anti-viri programs I never had any issues - they recognize UPX and unpack it properly and check for whatever is inside. Only AVG and similar software (free versions) had

Re: [twsocket] [OT] What are possible dangers using ICS-SSL without SSLversion chec

2011-04-03 Thread Zvone
Also, is there a mechanism (in ICS) to check for invalid root certificates (regarding the recent SSL issue with bad Comodo certificates)? -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at ht

[twsocket] thread safety and async operation

2011-08-16 Thread Zvone
Is ICS safe for using in non-thread safe programs? i.e. is this scenario safe: - single thread program writes to a disk file - ICS is used to fetch something and written as buffer to the same disk file and not corrupting previous wrte - main thread is never interrupted by ICS events. i.e. ICS eve

Re: [twsocket] thread safety and async operation

2011-08-17 Thread Zvone
Basically you answered what I needed to know. As long as no ProcessMessages is called it is safe to use in non-thread safe environment with single thread. Thanks for the answer. -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/l

Re: [twsocket] Restricted ports on the Mac

2011-11-03 Thread Zvone
Maybe a stupid question but have you tried to telnet to localhost, port 21 to see if anything else listens on it? perhaps a hanged process/thread? -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our webs

Re: [twsocket] Merry Christmas

2011-12-24 Thread Zvone
Čestit Božić i Sretna Nova Godina! (from Croatia) (Merry Christmas and Happy New Year) There, more funny characters for you to test your decoders :) -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our w

[twsocket] 64 bit NNTP Article IDs

2011-12-24 Thread Zvone
Here is a thing I posted on Indy forums but also concerns Overbyte package too. According to RFC-3977 article number is supposed to increase until it reaches bounds of 31-bit value - 2,147,483,647 ( http://tools.ietf.org/html/rfc3977#page-24) and while servers are not allowed to send higher value

Re: [twsocket] IMAP4 support

2012-01-23 Thread Zvone
What do you mean it limits number of items via POP3? How many new mails you have? Gmail AFAIK only disables standard behavior of DELE command and instead of deleting it acts as set in settings of Gmail account (usually marks message as "read"). Also, once email has been accessed through POP3 it c