SSLMode smVerifyCA and OpenSSL

Discussion of open issues, suggestions and bugs regarding UniDAC (Universal Data Access Components) for Delphi, C++Builder, Lazarus (and FPC)
Post Reply
mariot
Posts: 17
Joined: Mon 02 Feb 2015 11:35

SSLMode smVerifyCA and OpenSSL

Post by mariot » Mon 10 Feb 2020 15:29

Hi,

We tested connection to PostgreSQL with SSLMode = smVerifyCA, but stopped us error message "The SSLModel = smVerifyCA is not supported when using OpenSSL". How can we connect to PostgreSQL with SSLMode = smVerifyCA, please?

We use OpenSSL libraries libcrypto-1_1.dll and libssl-1_1.dll. For example pgAdmin has Verify-CA SSLmode functional with that libraries.

Mario

ViktorV
Devart Team
Posts: 2856
Joined: Wed 30 Jul 2014 07:16

Re: SSLMode smVerifyCA and OpenSSL

Post by ViktorV » Fri 14 Feb 2020 13:54

You can create an SSL connection to PostgreSQL server with the option smVerifyCA using the TCRSSLIOHandler component that combines UniDAC with SecureBridge. SecureBridge supports most modern protocols and algorithms.
You can test the required functionality with SecureBridge Trial Edition, a full-featured time-limited version of SecureBridge Professional Edition.
The TCRSSLIOHandler component is located in the dcldacsbridgeXXX package. This package is included in the UniDAC demos. See the package installation instructions in the file "%UniDACDemos%\TechnologySpecific\SecureBridge\Readme.html", where %UniDACDemos% is the UniDAC Demo projects installation path on your computer.

mariot
Posts: 17
Joined: Mon 02 Feb 2015 11:35

Re: SSLMode smVerifyCA and OpenSSL

Post by mariot » Mon 17 Feb 2020 11:03

Thanks.

I thought it is a bug in UniDAC when smVerifyCA was introduced as a new in release version 7.5.13 and I could not use it in UniDAC class TUniConnection.

Is SecureBridge "full version" a part of UniDAC? Or we must buy it? We have UniDAC Professional Edition licence.

Mario

ViktorV
Devart Team
Posts: 2856
Joined: Wed 30 Jul 2014 07:16

Re: SSLMode smVerifyCA and OpenSSL

Post by ViktorV » Fri 21 Feb 2020 10:38

No, SecureBridge (https://www.devart.com/sbridge) is a separate product.

Post Reply