Mike Posted May 23, 2018 Share Posted May 23, 2018 TRAPEZ.exe: 00001EA0: 16:30:47 [Indy]:EIdOSSLUnderlyingCryptoError : Error accepting connection with SSL. error:1408A0C1:SSL routines:ssl3_get_client_hello:no shared cipher : Addr: $00000000009A217B TRAPEZ.exe: 00002368: 16:55:39 [Indy]:EIdOSSLAcceptError : Error accepting connection with SSL. EOF was observed that violates the protocol : Addr: $00000000009A233C Hi, The errors above are show in my application log (64bit). I am using commercial version 1.0.0.1425 with included SSL files. Any idea what could cause this? Quote Link to comment Share on other sites More sharing options...
Administrators Farshad Mohajeri Posted May 23, 2018 Administrators Share Posted May 23, 2018 Does this situation prevent users from being able to use your app? I mean are these occasional errors or persistent? Sent from my SM-N950F using Tapatalk Quote Link to comment Share on other sites More sharing options...
Mike Posted May 23, 2018 Author Share Posted May 23, 2018 Hi Farshad, The application is still working but I don't want to wait until it crashes. It is a business app so must prevent downtime. The log file is getting full with these messages. Regards. Quote Link to comment Share on other sites More sharing options...
Mike Posted May 24, 2018 Author Share Posted May 24, 2018 Any idea what could cause this and how to solve this? Quote Link to comment Share on other sites More sharing options...
Administrators Farshad Mohajeri Posted May 24, 2018 Administrators Share Posted May 24, 2018 Can you please check your ServerModule->SSL property. What are the values for Method & SSLVersion? Quote Link to comment Share on other sites More sharing options...
Administrators Farshad Mohajeri Posted May 24, 2018 Administrators Share Posted May 24, 2018 Do you receive these errors from a specific client? Quote Link to comment Share on other sites More sharing options...
Mike Posted May 24, 2018 Author Share Posted May 24, 2018 Method:sslvSSLv23SSLVersions (enabled):sslvSSLv2sslvSSLv3sslvTLSv1sslvTLSv1_1sslvTLSv1_2 I can't see which clients get this errors. The log file doesn't show the IP-address. Quote Link to comment Share on other sites More sharing options...
Administrators Farshad Mohajeri Posted May 24, 2018 Administrators Share Posted May 24, 2018 Can you try below settings (Or simply edit the DFM and delete current settings) Method: sslvTLSv1_1 SSLVersions: [sslvTLSv1_1,sslvTLSv1_2 ] Quote Link to comment Share on other sites More sharing options...
Mike Posted May 24, 2018 Author Share Posted May 24, 2018 Hi Farshad, If select this method and select [sslvTLSv1_1,sslvTLSv1_2] the method jumps back to sslvSSLv3. Quote Link to comment Share on other sites More sharing options...
Administrators Farshad Mohajeri Posted May 24, 2018 Administrators Share Posted May 24, 2018 You need to check both options in the object inspector. Sent from my SM-N950F using Tapatalk Quote Link to comment Share on other sites More sharing options...
Mike Posted May 25, 2018 Author Share Posted May 25, 2018 If I select both options it changes automatically back to sslvSSLv3. Quote Link to comment Share on other sites More sharing options...
Administrators Farshad Mohajeri Posted May 25, 2018 Administrators Share Posted May 25, 2018 Ok then choose tlsv1 only Sent from my SM-N950F using Tapatalk Quote Link to comment Share on other sites More sharing options...
Mike Posted May 25, 2018 Author Share Posted May 25, 2018 Unfortunately I get the same result. Quote Link to comment Share on other sites More sharing options...
Administrators Farshad Mohajeri Posted May 26, 2018 Administrators Share Posted May 26, 2018 Maybe someone is trying to connect using "http://" instead of "https://" Quote Link to comment Share on other sites More sharing options...
Administrators Farshad Mohajeri Posted May 26, 2018 Administrators Share Posted May 26, 2018 In any case, if you can't resolve, can you please report this to support portal? Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.