Situation with SSL UniGUI & ISAPI

[ravedadave]

Hi,

We have been a loyal user of UniGUI for many years, the product has met our expectations well and is an itegral part of our business..

The application is huge over a million lines of code fully compiled.

Lately we have had no end of trouble, using our application via IIS.  Sessions are terminated multiple times of the day for no reason,

 MAX_PENDING_REQUESTS has to be modified otherwise users get 503 errors constantly, it's got that bad I've had to run the app as a UNIGUI service application.

Exactly the same code but as a service bypassing IIS.   It worked flawlessy it was like using another system.

The problem with this is the dreaded tls 1.2 only option with legacy ciphers, it's not a solution for the future.

Will we ever be going to TLS 1.3 ?

I'm at a loss where to go now.  I've made previous posts about the IIS situation I even logged a support case but nothing.

The software is critical to our business so any pointers, help or advice would be greatly appreciated,

 

Regards,

Dave

 

 

 

 

[Farshad Mohajeri]

Hi, 

Just a quick note regarding the ssl. When using isapi dlls the whole ssl protocol is controlled by iis itself. Probably you need to apply most recent updates to enable tls 1.3. 

Normally tls 1.3 has been supported by iis for many years. 

[ravedadave]

@Farshad Mohajeri  Thanks I was talking about service/standalone due to the IIS issues mentioned, I would rather be able to find a solution to what could cause so many IIS issues.

 

[Farshad Mohajeri]

Have you considered using Hyperserver ? 

[Farshad Mohajeri]

Bu switching to Hyperserver you can deploy your app as standalone exe and still run it under iis. 

[ravedadave]

I have performed tests with this in the past but still had the 503 errors.

[Farshad Mohajeri]

4 minutes ago, ravedadave said:

I have performed tests with this in the past but still had the 503 errors.

In this case problem lies in a different place. 503 error is a general error which shows your app has become unstable. Can you share Hyperserver log files?

[rgreat]

As an option you could drop IIS and use your app in http selfhost mode + nginx as reverse proxy. it would handle https as well.

[picyka]

CloudFlare perfect SSL.

[irigsoft]

2 hours ago, picyka said:

CloudFlare perfect SSL.

Is it ?

https://www.independent.co.uk/tech/cloudflare-down-server-error-500-update-b2878629.html

[picyka]

3 minutes ago, irigsoft said:

É mesmo?

https://www.independent.co.uk/tech/cloudflare-down-server-error-500-update-b2878629.html

Yes, that's the company I've used. In all the years I've used them, I've had very few problems.

[irigsoft]

for TLS 1.3 with unigui try:

https://en.delphipraxis.net/topic/13541-indy-taurutls-and-tls-13/

https://www.esegece.com/products/sgcindy