benibela / ararat-synapse Goto Github PK

Hello! Thanks for updating Synapse to support OpenSSL 1.1.
I found that the HTTPS server written in Synapse does not work with private keys created using EC (RSA keys work fine). The error
10091,error:0D0680A8:asn1 encoding routines:asn1_check_tlen:wrong tag is generated in the "TSSLOpenSSL.SetSslKeys" function in unit "ssl_openssl11".
The problem was solved if in the module "ssl_openssl11_lib.pas" in the function "InitSSLInterface" replace the line

_SslCtxUsePrivateKeyFile := GetProcAddr(SSLLibHandle, 'SSL_CTX_use_RSAPrivateKey_file');

with

_SslCtxUsePrivateKeyFile := GetProcAddr(SSLLibHandle, 'SSL_CTX_use_PrivateKey_file');

Perhaps the same should be done in the module "ssl_openssl_lib.pas"
After that, the server normally accepts both keys in the EC format and keys in the RSA format.