Search code examples
macosdelphiopensslindylazarus

EIdOSSLConnectError Error connecting with SSL - EOF was observed

My platform is this

  • OS X Yosemite 10.10.5
  • newest Indy (10.6.2.0, download 2016 March 13 - Indy10_5346.zip)
  • Lazarus 1.4.4

Concerning OpenSSL versions I have tried:

  • HomeBrew OpenSSL installed like this: "brew install openssl --universal"
  • Built-in (0.9.8) OS X supplied in /usr/lib/

I am getting error:

EIdOSSLConnecError Error connecting with SSL - EOF was observed that violates the protocol

In file Protocols/IdSSLOpenSSLHeaders.pas at line 19418

However, as I am using newest of everything - why am I be getting this error?

(Happens in call to OpenEncodedConnection)

Here's how I setup my Indy HTTP client OpenSSL handler:

FIOHandlerOpenSSL := TIdSSLIOHandlerSocketOpenSSL.Create;
FIOHandlerOpenSSL.SSLOptions.SSLVersions := [sslvSSLv23,sslvTLSv1,sslvTLSv1_1,sslvTLSv1_2]
FIOHandlerOpenSSL.Mode := sslmClient;
FIOHandlerOpenSSL.VerifyMode := [];
FIOHandlerOpenSSL.VerifyDepth := 0;
Solution

  • EOF means the connection was closed unexpectedly, in this case during the handshake. You are enabling multiple SSLVersions, which means Indy will use SSLv23 internally to connect. That will only work if the server is using SSLv23 to listen, thus allowing the client and server to negotiate a compatible SSL/TLS version. If the server is using a specific SSL/TLS version instead of SSLv23, SSLv23 will not work on the client side. You would have to use the same specific SSL/TLS version on the client side to match.