Server error?

[Klaus major-k]

Hi Bob,

> Am 30.12.2020 um 23:59 schrieb Bob Sneidar via use-livecode <use-livecode at lists.runrev.com>:
> 
> TLSv1 is dead. It uses the OpenSSL library that had the Heartbleed vulnerability. Not sure if v5 libraries can use the latest encryption libraries. I don’t know why not. 

the big question is:
Why does it work in the IDE, but not in a runtime made with the same IDE?

Seems that the IDE and the runtime use different "revSecurity.dll"s?!

> Bob S
>> ...
>> I am currently working on a stack in LC 5.x for a customer.
>> This stack only loads another stack from a server and displays it.
>> 
>> Works fine in the IDE, but I get this error when trying this in the 
>> standalone, alle externals etc. are in fact present.
>> The error reads:
>> ----------------------------------------------
>> Cannot connect
>> error error:1407742E:SSL
>> routines:SSL23_GET_SERVER_HELLO:tlsv1
>> alert protocol version
>> -----------------------------------------------
>> Maybe this is a mismatch between the SSL version on the server
>> and the SSL version in LC5.x? 
>> But then it should also not work in the IDE!? This is very strange.
>> Any insights and workarounds, if any, are very welcome, thanks!

Best

Klaus

--
Klaus Major
https://www.major-k.de
klaus at major-k.de