SSL errors

[Mike]

TRAPEZ.exe: 00001EA0: 16:30:47 [Indy]:EIdOSSLUnderlyingCryptoError : Error accepting connection with SSL.
error:1408A0C1:SSL routines:ssl3_get_client_hello:no shared cipher : Addr: $00000000009A217B

TRAPEZ.exe: 00002368: 16:55:39 [Indy]:EIdOSSLAcceptError : Error accepting connection with SSL.
EOF was observed that violates the protocol : Addr: $00000000009A233C

Hi,

 

The errors above are show in my application log (64bit).

 

I am using commercial version 1.0.0.1425 with included SSL files.

 

Any idea what could cause this?

 

 

 

 

[Farshad Mohajeri]

Does this situation prevent users from being able to use your app?

 

I mean are these occasional errors or persistent?

 

Sent from my SM-N950F using Tapatalk

[Mike]

Hi Farshad,

 

The application is still working but I don't want to wait until it crashes.

 

It is a business app so must prevent downtime.

 

The log file is getting full with these messages.

 

Regards.

[Mike]

Any idea what could cause this and how to solve this?

[Farshad Mohajeri]

Can you please check your ServerModule->SSL property.

What are the values for Method & SSLVersion?

[Farshad Mohajeri]

Do you receive these errors from a specific client?

[Mike]

Method:
sslvSSLv23

SSLVersions (enabled):
sslvSSLv2
sslvSSLv3
sslvTLSv1
sslvTLSv1_1
sslvTLSv1_2

 

I can't see which clients get this errors. The log file doesn't show the IP-address.

 

 

  

[Farshad Mohajeri]

Can you try below settings (Or simply edit the DFM and delete current settings)

 

Method: sslvTLSv1_1

SSLVersions:  [sslvTLSv1_1,sslvTLSv1_2 ]

[Mike]

Hi Farshad,

 

If select this method and select [sslvTLSv1_1,sslvTLSv1_2] the method jumps back to sslvSSLv3.

[Farshad Mohajeri]

You need to check both options in the object inspector.

 

Sent from my SM-N950F using Tapatalk

[Mike]

If I select both options it changes automatically back to sslvSSLv3.

[Farshad Mohajeri]

Ok then choose tlsv1 only

 

Sent from my SM-N950F using Tapatalk

[Mike]

Unfortunately I get the same result.

[Farshad Mohajeri]

Maybe someone is trying to connect using "http://" instead of "https://"

[Farshad Mohajeri]

In any case, if you can't resolve, can you please report this to support portal?