fabiorov Posted April 18, 2017 Share Posted April 18, 2017 Hi I followed the steps in http://www.unigui.com/doc/online_help/configure_unigui_server.htmto configure SSL. Also, I followed these steps from Godaddy: cert.pem is in the zip file as a long string on letters and numbers with a .crt extensionroot.pem if they need it can be downloaded directly from us using these links:Or you could use these direct links for the GoDaddy versions:Roothttps://certs.godaddy.com/repository/gdroot-g2.crtSigning Certhttps://certs.godaddy.com/repository/gdig2.crt But when I start the service, It stopped and server logs says: "[initWebServer]:EIdOSSLGetMethodError : Error getting SSL method. : Addr: $0077FDEC" Any suggestion? Link to comment Share on other sites More sharing options...
bbosnjak Posted April 18, 2017 Share Posted April 18, 2017 If you can't find help here, you can try to find help for the Indy components being used. For example, the following post may have some clues to help: http://stackoverflow.com/questions/17348345/how-can-i-create-install-a-ssl-cert-for-a-standalone-datasnap-rest-server-on-loc. It mentions a utility for generating CRT files locally and for processing what you get back from a provider like GoDaddy. Sent from my SM-P900 using Tapatalk Link to comment Share on other sites More sharing options...
bbosnjak Posted April 18, 2017 Share Posted April 18, 2017 Be sure you have the necessary OpenSSL DLL's, too, in the right place, etc... Sent from my SM-P900 using Tapatalk Link to comment Share on other sites More sharing options...
fabiorov Posted April 18, 2017 Author Share Posted April 18, 2017 I followed all steps, including copying DLL's to the exe folder ... I really don't know what more to do Link to comment Share on other sites More sharing options...
Administrators Farshad Mohajeri Posted April 18, 2017 Administrators Share Posted April 18, 2017 Hi, Certification files must be in PEM format. Link to comment Share on other sites More sharing options...
fabiorov Posted May 2, 2017 Author Share Posted May 2, 2017 Hi everybody The SSL problems was solved, there are a list of issues that must to be addressed: 1) If you use Godaddy's SSL files, they sent you 2 files: one files with letters and numbers (example "a44df2336d") this is the cert.pem file, and other file that has the word "bundle" this is the root file. 2) You must to have already the KEY file. 3) rename all the files (and extensions to the expected filenames, "cert.pem", "root.pem" and "key.pem" 4) You must to copy the DDLs files (libeay32.dll and ssleay32.dll) and the PEM files 5) (Only if you are using "service" type project), add the following lines in server module (This is an issue that Farshad will fix in next release, so this step will not be necesary in the future): SSL.SSLOptions.RootCertFile := Self.StartPath + SSL.SSLOptions.RootCertFile; SSL.SSLOptions.CertFile := Self.StartPath + SSL.SSLOptions.CertFile; SSL.SSLOptions.KeyFile := Self.StartPath + SSL.SSLOptions.KeyFile; 6) Unblock SSL port (403) in the server's firewall 7) Ensure that your DNS has registered your domain, is can be not enought to simply redirect That's all!! 1 Link to comment Share on other sites More sharing options...
bbosnjak Posted May 2, 2017 Share Posted May 2, 2017 Thanks for posting! BTW, the HTTPS port is usually 443. Are you using 403 as an alternate? Sent from my SM-P900 using Tapatalk Link to comment Share on other sites More sharing options...
Sherzod Posted May 2, 2017 Share Posted May 2, 2017 The SSL problems was solved, there are a list of issues that must to be addressed: Thanks for the detailed report. Link to comment Share on other sites More sharing options...
fabiorov Posted May 2, 2017 Author Share Posted May 2, 2017 Sorry is port 443 ... typing error Link to comment Share on other sites More sharing options...
mazluta Posted November 13, 2021 Share Posted November 13, 2021 hi every one. i have the same problems with ClodDNS and Sectigo (comodo) to create all necessary file do : How to create crt+root+key pem files This is from CloudDNS 1. order+buy Dynamic Domain Name, For me it was hanibaaldemos.com And you can control what is the REAL IP that represent the Domain name. very chip very goos srvice. 1.1 create requet file + key file. like in http://unigui.com/doc/online_help/getting-a-ssl-certificate-from.htm Enter all data + in common name write the domain name (for me – hanibaaldemos.com) Enter The encryption method – SHA1 + RSA + 2048 key length. 1.2 ask for pem text encode. Keep the request file + the key file. I named them hanibaaldeomscom.txt And hanibaaldemos.key 1.3 send the request file to Certificate Authority You will get back zip file contain: AAACertificateServices.crt hanibaalmailer_com.crt (your domain name) SectigoRSADomainValidationSecureServerCA.crt USERTrustRSAAAACA.crt 1.4 rename AAACertificateServices.crt to ---> root.pem Rename your domain name.crt to ---> cert.pem Rename hanibaaldemos.key (what you save in 1.2) to ---> key.pem Use it as necessary. Link to comment Share on other sites More sharing options...
Recommended Posts
Please sign in to comment
You will be able to leave a comment after signing in
Sign In Now