mORMot Open Source

firstfriday

Member

Registered: 2015-07-21

Posts: 29

Connect to a https Server

hi, I have a problem with secTLSSelfSigned.

The client returns always an error code 666.

FHTTPClient.TLS.Enabled:=true;
FHTTPClient.TLS.IgnoreCertificateErrors:=true;
StatusCode := FHTTPClient.Request(FBaseURL, 'POST',10 ,'Content-Type: application/json'#13#10 +  'Accept: application/json',RequestBody);
// StatusCode  always 666

Server ist created like this:

HttpServer := TRestHttpServer.Create('8080', [RestServer], '+', useBidirSocket, 32, secTLSSelfSigned );

what am I doing wrong?

ab

Administrator

From: France

Registered: 2010-06-21

Posts: 15,181

Website

Re: Connect to a https Server

The tests with secTLSSelfSigned do pass here.

There is not enough information in your code.
Use a gist or a download link please to put some reproducible example.

Can you try to debug a little and find out where the client fails?

firstfriday

Member

Registered: 2015-07-21

Posts: 29

Re: Connect to a https Server

I am pritty sure that your code works fine. It is a general Certificate or Windows problem.
I cannot debug because it does not even reach your Framework.
Server (started as an admin with no error):

      certFile := 'cert.pem';
      keyFile := 'key.pem';  
      // these files created with
      // openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 365 -nodes -subj "/CN=mydyndns"
      FServer := TRestHttpServer.create('localhost:8080', [FSQLRestServer], '+',
                  useHttpApiRegisteringURI,32,secTLS,certFile, keyFile); // secTLSSelfSigned has same effect

then I try to access it with a browser and it returns:
ERR_CONNECTION_RESET
or
with curl: curl: (35) Recv failure: Connection was reset

Last edited by firstfriday (2025-09-06 10:40:01)

Chaa

Member

Registered: 2011-03-26

Posts: 260

Re: Connect to a https Server

Try check your firewall settings: Control panel -> System and Security -> Windows Defender Firewall -> Advanced Settings.

firstfriday

Member

Registered: 2015-07-21

Posts: 29

Re: Connect to a https Server

I found finally out that
1) I need to start the server with 0.0.0.0:8080 to be reached form outside my network.
With http I could start it with localhost, with https not.

2) With parameter useHttpApiRegisteringURI the TLS(secTLSSelfSigned) is delegating the TLS functionality to the windows system. In theory you will have to configure it with the management console: prompt:Certmgr.msc and import the certificate generated with opelSSL. But I could not get it running.

The only combination worked for me was

 FServer := TRestHttpServer.create(''0.0.0.0:8080', [FSQLRestServer], '+',
                  useHttpAsync,32,secTLSSelfSigned);

The whole issue about certificates is quite confusing and I found it difficulte to find a working manual for windows to manage it.