Using Windows certificate trust store

Remoting SDK
1

Hi,

Do you have sample projects using the Windows Trust Store?

Thanks

Mies

2

Hi,

No, we haven’t

3

Okay,

Do you have a best practice working with certificates then?

4

Hi,

Can you specify what channels you are using?

  • for Indy channels, you can specify .pem file. it is managed via OpenSSL 1.0.2
  • for socket channels, you can use autogenerated certificate or also specify .pem file. it is also managed via OpenSSL 1.1.1
  • for WinHTTPServer, you can specify certhash. correspondent certificate will be taken from Windows Trust Store.

see more at the SSL/TLS (Delphi) article.

5

Yes, we are using Indy now that’s why I’m asking because I don’t see Indy supporting OpenSSL 1.1.x in the near future.

Thank for your information.

7

Hi,

you can use socket version of server’s channels. they are available on all platforms and support OpenSSL 1.1.1