APRS.FI API not working encrypted

[Nicole Boivin]

I have written an application to retrieve data on multiple stations thru the API. It works fine for non encrypted requests. I keep getting errors when I try to go encrypted. I am using Indy components. Example : IdHTTP.Get(http://api.aprs.fi/api/get?...

I am getting the following error: 14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure. The protocol is specified as TLSv1_2. I. I believe that it is the specified protocol. Does anyone have any ideas? 

[Joni Kähärä]

Hi,

Your URL says "http" instead of "https".

    Joni OH2EWL

[Nicole Boivin]

Joni,

  That is exactly my point. If I issue IdHTTP.Get(http://api.aprs.fi/api/get?... it works, however if I try to encrypt: IdHTTP.Get(https://api.aprs.fi/api/get?... it fails with the error messages stated above. Do you have any ideas why? Thank you

--
You received this message because you are subscribed to a topic in the Google Groups "aprs.fi" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/aprsfi/ynTHp_g3NYM/unsubscribe.
To unsubscribe from this group and all its topics, send an email to aprsfi+un...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/aprsfi/c4717a3c-05a2-4b52-94d0-7eb00fb4aa32n%40googlegroups.com.

[Joni Kähärä]

Hi,

Are you able to talk to any other TLS endpoint besides api.aprs.fi? If not (and this is getting a bit off-topic), maybe try googling "IdHTTP TLS"?

As some of those SO answers mention, looking at what goes over the wire with tcpdump(8) or Wireshark may provide valuable clues about what's going wrong.

    Joni OH2EWL

[Nicole Boivin]

I figured it out. It is working fine now, thanks to Sergio Gomez Cortijo, builder of the SGCIndy upgrade. It is free for Delphi and CBuilder users. It is an upgrade package for Indy and the crypto libraries that is up to date. I installed these and it still did not work, then I looked  at his samples of HTTP and FTP Apps. I noticed that each had a copy of the crypto DLLs in the executable directory of the application. I did the same and now it works. Here is what is going on. By default Windows 10 and 11 DO NOT install the crypto libraries on the machine. That begs the question, how do the browsers get away with it. They early bind these libraries, so they end up as part of the application. Most Delphi Apps late bind. The first place your app looks for the libraries is in the executable's directory. If not found they ask the OS. If they are not somewhere on the machine AND registered in the registry they cannot be found and will not work. It is as simple as that. I hope this is of assistance to someone else

Nicole

VE3GIQ.  gio Gómez Corti

On Mon, Jul 14, 2025 at 11:33 AM Joni Kähärä <joni....@gmail.com> wrote:

Hi,

Are you able to talk to any other TLS endpoint besides api.aprs.fi? If not (and this is getting a bit off-topic), maybe try googling "IdHTTP TLS"?

As some of those SO answers mention, looking at what goes over the wire with tcpdump(8) or Wireshark may provide valuable clues about what's going wrong.

    Joni OH2EWL

maanantai 14. heinäkuuta 2025 klo 17.25.34 UTC+3 psell...@gmail.com kirjoitti:

Joni,

  That is exactly my point. If I issue IdHTTP.Get(http://api.aprs.fi/api/get?... it works, however if I try to encrypt: IdHTTP.Get(https://api.aprs.fi/api/get?... it fails with the error messages stated above. Do you have any ideas why? Thank you

On Thu, Mar 20, 2025 at 12:52 PM Joni Kähärä <joni....@gmail.com> wrote:

Hi,

Your URL says "http" instead of "https".

    Joni OH2EWL

keskiviikko 19. maaliskuuta 2025 klo 23.14.51 UTC+2 psell...@gmail.com kirjoitti:

I have written an application to retrieve data on multiple stations thru the API. It works fine for non encrypted requests. I keep getting errors when I try to go encrypted. I am using Indy components. Example : IdHTTP.Get(http://api.aprs.fi/api/get?...

I am getting the following error: 14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure. The protocol is specified as TLSv1_2. I. I believe that it is the specified protocol. Does anyone have any ideas? 

--
You received this message because you are subscribed to a topic in the Google Groups "aprs.fi" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/aprsfi/ynTHp_g3NYM/unsubscribe.
To unsubscribe from this group and all its topics, send an email to aprsfi+un...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/aprsfi/c4717a3c-05a2-4b52-94d0-7eb00fb4aa32n%40googlegroups.com.

--
You received this message because you are subscribed to a topic in the Google Groups "aprs.fi" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/aprsfi/ynTHp_g3NYM/unsubscribe.
To unsubscribe from this group and all its topics, send an email to aprsfi+un...@googlegroups.com.

To view this discussion visit https://groups.google.com/d/msgid/aprsfi/e6327e5e-ace9-47ac-9fa3-8f26432b593an%40googlegroups.com.