{"id":51,"date":"2016-07-25T15:21:41","date_gmt":"2016-07-25T15:21:41","guid":{"rendered":"https:\/\/www.smtpsoftware.com\/?p=51"},"modified":"2021-11-04T10:36:16","modified_gmt":"2021-11-04T10:36:16","slug":"checkmail-gmail-updated-for-improved-ssl-compatability","status":"publish","type":"post","link":"https:\/\/www.smtpsoftware.com\/cs\/checkmail-gmail-updated-for-improved-ssl-compatability\/","title":{"rendered":"CheckMail Gmail aktualizov\u00e1n pro lep\u0161\u00ed kompatibilitu SSL"},"content":{"rendered":"<p>Vypad\u00e1 to, \u017ee Google aktualizoval zabezpe\u010den\u00ed na n\u011bkter\u00fdch sv\u00fdch serverech GMail. To, co za\u010dalo jako ob\u010dasn\u00fd probl\u00e9m, se stalo l\u00e1m\u00e1n\u00edm aplikace, a tak jsme museli vydat aktualizovanou verzi <a href=\"https:\/\/www.smtpsoftware.com\/cs\/checkmail-gmail-new-mail-notification\/\">CheckMail GMail<\/a>.<br \/>\n<!--more--><\/p>\n<p>Ve skute\u010dnosti to byl docela zaj\u00edmav\u00fd probl\u00e9m, na kter\u00e9m se dalo pracovat, tak\u017ee pro ty z v\u00e1s, kte\u0159\u00ed maj\u00ed r\u00e1di techni\u010dt\u011bj\u0161\u00ed softwarovou str\u00e1nku v\u011bc\u00ed, je zde trochu v\u00edce podrobnost\u00ed:-<\/p>\n<p>V posledn\u00ed dob\u011b byla zji\u0161t\u011bna \u0159ada probl\u00e9m\u016f se zranitelnost\u00ed zabezpe\u010den\u00ed u TLS (SSL) v1.0 a nyn\u00ed se pova\u017euje za nejlep\u0161\u00ed postup zp\u0159\u00edsnit servery tak, aby akceptovaly pouze to, co je (prozat\u00edm) pova\u017eov\u00e1no za bezpe\u010dn\u011bj\u0161\u00ed implementaci, zlat\u00fd standard. je TLS 1.2. P\u0159inejmen\u0161\u00edm by se nem\u011bl pou\u017e\u00edvat TLS 1.0. Kdy\u017e v\u0161ak byl vytvo\u0159en CheckMail GMail, nejvy\u0161\u0161\u00edm standardem v t\u00e9 dob\u011b byl TLS 1.0, a proto jsme vyvinuli na\u0161i implementaci klienta SSL, kter\u00e1 se pou\u017e\u00edv\u00e1 jako v\u00fdchoz\u00ed. To fungovalo 100% \u010dasu, dokud uveden\u00e9 servery nebyly zpevn\u011bny. Proto\u017ee Indy ji\u017e nen\u00ed skute\u010dn\u011b podporov\u00e1no a u\u017e v\u016fbec ne s Delphi 6, co\u017e je to, co jsme pou\u017e\u00edvali k v\u00fdvoji v\u0161ech na\u0161ich d\u0159\u00edv\u011bj\u0161\u00edch aplikac\u00ed, znamenalo to hodn\u011b pr\u00e1ce, aby to znovu fungovalo. \u0158e\u0161en\u00edm, kter\u00e9 jsme na\u0161li, bylo nechat klientskou komponentu SSL vyjednat kompatibiln\u00ed \u00farove\u0148 zabezpe\u010den\u00ed se serverem, co\u017e se v \u017e\u00e1dn\u00e9 dokumentaci nezd\u00e1lo b\u00fdt mo\u017en\u00e9. Po mnoha, a m\u00e1m na mysli mnoho pokus\u016f a omyl\u016f, jsme zjistili, \u017ee nastaven\u00ed SSLOptions.Metoda TIdSSLIOHandlerSocket na sslvSSLv23 zp\u016fsobilo toto vyjedn\u00e1v\u00e1n\u00ed. Kdo by si pomyslel, \u017ee v\u00fdchoz\u00ed nastaven\u00ed TLS1.0 bude naru\u0161ovat aplikace? Nen\u00ed to ide\u00e1ln\u00ed, ale s nulovou nad\u011bj\u00ed, \u017ee TLSv1.2 bude implementov\u00e1no v r\u00e1mci kompatibiln\u00ed verze komponent Indy, jak to zat\u00edm bude fungovat. Doufejme, \u017ee to m\u016f\u017ee b\u00fdt u\u017eite\u010dn\u00e9 pro ka\u017ed\u00e9ho, kdo udr\u017euje star\u0161\u00ed aplikace Delphi, kter\u00e9 n\u00e1hle objevily chyby SSL.<\/p>\n<p>Lep\u0161\u00ed zpr\u00e1vou pro CheckMail je, \u017ee se p\u0159ipravuj\u00ed pl\u00e1ny na modern\u011bj\u0161\u00ed \u0159e\u0161en\u00ed nap\u0159\u00ed\u010d platformami vyu\u017e\u00edvaj\u00edc\u00ed nejnov\u011bj\u0161\u00ed v\u00fdvojov\u00e9 n\u00e1stroje a technologie, tak\u017ee na to d\u00e1vejte pozor.<\/p>","protected":false},"excerpt":{"rendered":"<p>Vypad\u00e1 to, \u017ee Google aktualizoval zabezpe\u010den\u00ed na n\u011bkter\u00fdch sv\u00fdch serverech GMail. To, co za\u010dalo jako ob\u010dasn\u00fd probl\u00e9m, se stalo rozbit\u00edm aplikace, a tak jsme museli vydat aktualizovanou verzi CheckMail GMail.<\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"class_list":["post-51","post","type-post","status-publish","format-standard","hentry","category-news"],"_links":{"self":[{"href":"https:\/\/www.smtpsoftware.com\/cs\/wp-json\/wp\/v2\/posts\/51","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.smtpsoftware.com\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.smtpsoftware.com\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.smtpsoftware.com\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.smtpsoftware.com\/cs\/wp-json\/wp\/v2\/comments?post=51"}],"version-history":[{"count":1,"href":"https:\/\/www.smtpsoftware.com\/cs\/wp-json\/wp\/v2\/posts\/51\/revisions"}],"predecessor-version":[{"id":287,"href":"https:\/\/www.smtpsoftware.com\/cs\/wp-json\/wp\/v2\/posts\/51\/revisions\/287"}],"wp:attachment":[{"href":"https:\/\/www.smtpsoftware.com\/cs\/wp-json\/wp\/v2\/media?parent=51"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.smtpsoftware.com\/cs\/wp-json\/wp\/v2\/categories?post=51"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.smtpsoftware.com\/cs\/wp-json\/wp\/v2\/tags?post=51"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}