Icon View Thread

The following is the text of the current message along with any replies.
Messages 1 to 5 of 5 total
Thread Miscellaneous considerations ...
Wed, Feb 3 2021 9:24 AMPermanent Link

Alvaro

Tim the question I have is the following:
ewbsrvr.exe in any of its three modes, is it compiled with a specific TLS library? or does it just make use of Windows APIs when it runs ??.
I understand that it obviously uses the APIs of the PC that hosts it, but does the ewbsrvr make special conditions for the use of these APIs?
The Windows 7 Pro that I have installed is original and has all the updates up to date.
I don't understand why it reports that it is using TLS 1.0.
I do not know if the reported 501 error is due to this version issue.
When I was testing the EWB3beta version, I asked the same question and in fact it was not clear to me what to do.
Regarding the installation of ewbsrvr.exe as a service, the manual explains some parts of the process.
For example:
If the Administrator key (EWBDefault) is only for the IDE environment, how do I fix it on a server as a service, if the only way I have is from the IDE?
Every time I try to change it, the server gives me an error.
The external ewbsrvr.exe as a service, can it work with the default user password?
Excuse my questions, but I can't find a clear line to be able to install and configure an ewbsrvr as a service on a PC that does not have the IDE installed.
Since the first version of EWB, I have been waiting for ewbsrvr to work natively with SSL.
In fact, the Stunnel suggested by you was very useful for the projects installed so far.
So I am now testing how to do the installation and configuration of the server.
Otherwise EWB is an excellent development environment, I am comfortable with the editor, language, components, error handling, etc.
I await a response where I can have clearer guidelines about the installation.
Thank you so much!!!
Cordially.
Alvaro
Wed, Feb 3 2021 2:42 PMPermanent Link

Raul

Team Elevate Team Elevate

On 2/3/2021 9:24 AM, Alvaro wrote:
> ewbsrvr.exe in any of its three modes, is it compiled with a specific TLS library? or does it just make use of Windows APIs when it runs ??.

Not Tim but based on things he has said before EWB uses windows TLS
(i.e. schannel/Wincrypt API)

> I understand that it obviously uses the APIs of the PC that hosts it, but does the ewbsrvr make special conditions for the use of these APIs?
> The Windows 7 Pro that I have installed is original and has all the updates up to date.
> I don't understand why it reports that it is using TLS 1.0.

Are you sure TLS 1.2 is enabled ?

I'd check with IISCrypto to confirm first.

Win 7 (and Server 2008) as well as Win 8 (Server 2012) had a poor TLS
support initially and while lot of it got patched you might need to
enable it (and re-patch after some component installs).


> If the Administrator key (EWBDefault) is only for the IDE environment, how do I fix it on a server as a service, if the only way I have is from the IDE?

Tim said he is working on a command line utility and there is existing
the API you can use as well :
https://www.elevatesoft.com/manual?action=viewtopic&id=ewb3&topic=Server_Administration_API

> Excuse my questions, but I can't find a clear line to be able to install and configure an ewbsrvr as a service on a PC that does not have the IDE installed.

It's a good question and i believe this is one area Tim is working on to
add more tools for this

Meanwhile you could interact with the API direct to make admin easier

of if the server is remotely accessible you can manager it from IDE
remotely (i know this might be of limited value in most cases but IDE
can manager a remote server)

Raul
Wed, Feb 3 2021 3:02 PMPermanent Link

Alvaro

Raul, I appreciate your answer, I am going to verify the indicated points, in order to try to install the ewbsrvr as a service.
For the rest, I'll be waiting for Tim to finish developing the mentioned utilities.
Thank you so much!!!
Wed, Feb 3 2021 3:37 PMPermanent Link

Alvaro

Raul, download the IISCrypto utility. After restarting Windows 7, TLS 1.2 was enabled.
And now I can say that ... IT WORKS !!!!
The test I keep doing it with ewbsrvr.exe 32bits cmdline.
Thank you so much!!!
I will continue to investigate ewbsrvr.exe as a service.
Cordially
Thu, Feb 11 2021 10:44 AMPermanent Link

Tim Young [Elevate Software]

Elevate Software, Inc.

Avatar

Email timyoung@elevatesoft.com

Alvaro,

<< ewbsrvr.exe in any of its three modes, is it compiled with a specific TLS library? or does it just make use of Windows APIs when it runs ??. >>

As Raul indicates, EWB 3 uses the built-in Windows crypto APIs.

<< I understand that it obviously uses the APIs of the PC that hosts it, but does the ewbsrvr make special conditions for the use of these APIs? >>

No.  That is specifically the benefit of using the crypto APIs under Windows - they are automatically updated and the customer/machine owner controls how the TLS is configured independent of the EWB 3 web server.

<< I don't understand why it reports that it is using TLS 1.0. >>

Raul is correct here, also - use IISCrypto to ensure that the TLS levels are configured properly and that the proper TLS support is enabled/disabled.  Just be careful if you're using remote desktop services - there are some additional issues with Win7 and remote desktop as it relates to TLS support:

https://support.microsoft.com/en-us/topic/update-to-add-rds-support-for-tls-1-1-and-tls-1-2-in-windows-7-or-windows-server-2008-r2-8aff6954-a80d-411c-c75c-6aeaaab4f570

<< If the Administrator key (EWBDefault) is only for the IDE environment, how do I fix it on a server as a service, if the only way I have is from the IDE? >>

No, you cannot configure the web server remotely from the Server Manager in the IDE.  You *must* configure the web server using the ewbsrvr.ini file, and you must restart the web server whenever you make any configuration changes that you want to go into effect immediately.

<< The external ewbsrvr.exe as a service, can it work with the default user password? >>

Yes, but you'll see a warning in the web server's system log files when the web server is started.  It is definitely not recommended that you expose any EWB 3 web server to a public port without changing the default Administrator password.

<< Excuse my questions, but I can't find a clear line to be able to install and configure an ewbsrvr as a service on a PC that does not have the IDE installed. >>

I made an entire video about it here:

https://www.elevatesoft.com/articles?action=view&category=ewb&article=elevate_web_builder_3_web_server_video

and there's an entire section of the manual about these topics:

https://www.elevatesoft.com/manual?action=topics&id=ewb3&section=using_the_web_server

Please watch the video and read through those topics to gain a better understanding of how everything now works.

Tim Young
Elevate Software
www.elevatesoft.com
Image