Angus

Did you have a chance to check that SSL problem on FD_READ that we have?

I have fixed my local copy of ICS and it works fine for both with and
without SSL (We are using SSL for one equipment we are testing).

inside TCustomSslWsocket.Do_FD_READ:

I added

        if (not FSslEnable) or (FSocksState <> socksData) or
           (FHttpTunnelState <> htsData) then begin
            inherited Do_FD_READ(msg);
            Exit;
        end;

before

    WSocket_Synchronized_WSAASyncSelect({$IFDEF POSIX}Self,{$ENDIF}
         FHSocket, Handle, FMsg_WM_ASYNCSELECT, FD_WRITE or FD_CLOSE or
FD_CONNECT);

So, first thing FD_READ will do is checking if Ssl is enabled, if it is not
enabled it will simply call inherited without calling
WSocket_Synchronized_WSAASyncSelect that is causing all the issues we have,
and if SSL is active it will work as you designed

Anyway, I fixed my copy and it is working fine for us.. I was just
wondering if you are going to fix the official release because I'm sure
other users will have similar experiences as we are having and they won't
know what is happening, and what is causing their software to behave odd..

Or you can just ignore it and disregard your users...

This was my last attempt to give you an advice to fix a broken code... if
you think it is not broken, just ignore it... I've helped ICS team before
and some bugs that I reported were fixed by Arno Garrels... I miss that old
times when ICS team actually cared about the users...

Eric



On Thu, Feb 2, 2017 at 10:23 AM, Angus Robertson - Magenta Systems Ltd <
an...@magsys.co.uk> wrote:

> Four new zips for Win32 and Win64 versions of OpenSSL 1.1.0d and
> 1.0.2k should be downloadable from the Wiki at:
>
> http://wiki.overbyte.be/wiki/index.php/ICS_Download
>
> Unfortunately the web site itself is currently misbehaving so I've not
> been able to update the web page itself.
>
> Meanwhile, the new zips can be downloaded from my web site instead.
>
> https://www.magsys.co.uk/delphi/magics.asp
>
> SVN and the overnight zip have also been updated to include OpenSSL
> 1.1.0d and can also be downloaded from my web site.
>
> The new OpenSSL releases fix three moderate risk and one low risk
> security bugs that could potentially cause a server to crash.
>
> Angus
>
>
> --
> To unsubscribe or change your settings for TWSocket mailing list
> please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
> Visit our website at http://www.overbyte.be
>
-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be

Reply via email to