TSPServer Component

Properties   Methods   Events   Config Settings   Errors  

The TSPServer component supports server-side functionality of the timestamping protocol.

Syntax

TsbxTSPServer

Remarks

Use this control to serve timestamping requests from your application.

Property List

The following is the full list of the properties of the component with short descriptions. Click on the links for further details.

Method List

The following is the full list of the methods of the component with short descriptions. Click on the links for further details.

Event List

The following is the full list of the events fired by the component with short descriptions. Click on the links for further details.

Config Settings

The following is a list of config settings for the component with short descriptions. Click on the links for further details.

Accuracy Property (TSPServer Component)

The accuracy of the server time, in microseconds.

Syntax

property Accuracy: Int64 read get_Accuracy write set_Accuracy;

Default Value

0

Remarks

Use this property to provide the accuracy of the time returned by the server, in microseconds. This specifies the maximum deviation of the returned time from the actual server time.

Active Property (TSPServer Component)

Indicates whether the server is active and is listening to new connections.

Syntax

property Active: Boolean read get_Active;

Default Value

false

Remarks

This read-only property returns True if the server is listening to incoming connections.

This property is read-only and not available at design time.

AuthBasic Property (TSPServer Component)

Enables or disables basic authentication.

Syntax

property AuthBasic: Boolean read get_AuthBasic write set_AuthBasic;

Default Value

false

Remarks

Use this property to enable or disable basic user authentication in the HTTP server.

AuthDigest Property (TSPServer Component)

Enables or disables digest authentication.

Syntax

property AuthDigest: Boolean read get_AuthDigest write set_AuthDigest;

Default Value

false

Remarks

Use this property to enable or disable digest-based user authentication in the HTTP server.

AuthDigestExpire Property (TSPServer Component)

Specifies digest expiration time for digest authentication.

Syntax

property AuthDigestExpire: Integer read get_AuthDigestExpire write set_AuthDigestExpire;

Default Value

20

Remarks

Use this property to specify the digest expiration time for digest authentication, in seconds.

AuthRealm Property (TSPServer Component)

Specifies authentication realm for digest and NTLM authentication.

Syntax

property AuthRealm: String read get_AuthRealm write set_AuthRealm;

Default Value

'SecureBlackbox'

Remarks

Specifies authentication realm for digest and NTLM authentication types.

BoundPort Property (TSPServer Component)

Indicates the bound listening port.

Syntax

property BoundPort: Integer read get_BoundPort;

Default Value

0

Remarks

Check this property to find out the port that has been allocated to the server by the system. The bound port always equals Port if it is provided, or is allocated dynamically if configured to fall in the range between PortRangeFrom and PortRangeTo constraints.

This property is read-only and not available at design time.

ClientAuth Property (TSPServer Component)

Enables or disables certificate-based client authentication.

Syntax

property ClientAuth: TsbxClientAuthTypes read get_ClientAuth write set_ClientAuth;

TsbxClientAuthTypes = (
  ccatNoAuth,
  ccatRequestCert,
  ccatRequireCert
);

Default Value

ccatNoAuth

Remarks

Set this property to true to tune up the client authentication type: ccatNoAuth = 0; ccatRequestCert = 1; ccatRequireCert = 2;

DefaultPolicy Property (TSPServer Component)

Specifies the default TSA policy.

Syntax

property DefaultPolicy: String read get_DefaultPolicy write set_DefaultPolicy;

Default Value

''

Remarks

Use this property to specify the default TSA policy.

Endpoint Property (TSPServer Component)

Specifies the resource address of the TSA endpoint.

Syntax

property Endpoint: String read get_Endpoint write set_Endpoint;

Default Value

'/'

Remarks

Use this property to specify the endpoint of which the TSA service should be responding.

ErrorOrigin Property (TSPServer Component)

Indicates the endpoint where the error originates from.

Syntax

property ErrorOrigin: TsbxErrorOrigins read get_ErrorOrigin write set_ErrorOrigin;

TsbxErrorOrigins = (
  eoLocal,
  eoRemote
);

Default Value

eoLocal

Remarks

Use this property to establish whether the reported error originates from a local or remote endpoint.

This property is not available at design time.

ErrorSeverity Property (TSPServer Component)

The severity of the error that happened.

Syntax

property ErrorSeverity: TsbxErrorSeverities read get_ErrorSeverity write set_ErrorSeverity;

TsbxErrorSeverities = (
  esInfo,
  esWarning,
  esFatal
);

Default Value

esWarning

Remarks

Use this property to establish whether the error is fatal.

This property is not available at design time.

ExternalCrypto Property (TSPServer Component)

Provides access to external signing and DC parameters.

Syntax

property ExternalCrypto: TsbxExternalCrypto read get_ExternalCrypto;

Remarks

Use this property to tune-up remote cryptography settings. SecureBlackbox supports two independent types of external cryptography: synchronous (based on OnExternalSign event) and asynchronous (based on DC protocol and DCAuth signing component).

This property is read-only.

FIPSMode Property (TSPServer Component)

Reserved.

Syntax

property FIPSMode: Boolean read get_FIPSMode write set_FIPSMode;

Default Value

false

Remarks

This property is reserved for future use.

Host Property (TSPServer Component)

The host to bind the listening port to.

Syntax

property Host: String read get_Host write set_Host;

Default Value

''

Remarks

Use this property to specify the IP address on which to listen to incoming connections.

PinnedClient Property (TSPServer Component)

Populates the pinned client details.

Syntax

property PinnedClient: TsbxTLSClientEntry read get_PinnedClient;

Remarks

Use this property to access the details of the client connection previously pinned with PinClient method.

This property is read-only and not available at design time.

PinnedClientChain Property (TSPServer Component)

Contains the certificate chain of the pinned client.

Syntax

property PinnedClientChain: TsbxCertificateList read get_PinnedClientChain;

Remarks

Use this property to access the certificate chain of the client connection pinned previously with a PinClient call.

This property is read-only and not available at design time.

Port Property (TSPServer Component)

Specifies the port number to listen for connections on.

Syntax

property Port: Integer read get_Port write set_Port;

Default Value

80

Remarks

Use this property to specify the port number to listen to connections on. Standard port numbers are 80 for an HTTP server, and 443 for an HTTPS server.

Alternatively, you may specify the acceptable range of listening ports via PortRangeFrom and PortRangeTo properties. In this case the port will be allocated within the requested range by the operating system, and reported in BoundPort.

PortRangeFrom Property (TSPServer Component)

Specifies the lower limit of the listening port range for incoming connections.

Syntax

property PortRangeFrom: Integer read get_PortRangeFrom write set_PortRangeFrom;

Default Value

0

Remarks

Use this property to specify the lower limit of the port range to listen to connections on. When a port range is used to specify the listening port (as opposed to a fixed value provided via Port), the port will be allocated within the requested range by the operating system, and reported in BoundPort.

Note that this property is ignored if the Port property is set to a non-zero value, in which case the server always aims to listen on that fixed port.

PortRangeTo Property (TSPServer Component)

Specifies the upper limit of the listening port range for incoming connections.

Syntax

property PortRangeTo: Integer read get_PortRangeTo write set_PortRangeTo;

Default Value

0

Remarks

Use this property to specify the upper limit of the port range to listen to connections on. When a port range is used to specify the listening port (as opposed to a fixed value provided via Port), the port will be allocated within the requested range by the operating system, and reported in BoundPort.

Note that this property is ignored if the Port property is set to a non-zero value, in which case the server always aims to listen on that fixed port.

ServerCertificates Property (TSPServer Component)

The server's TLS certificates.

Syntax

property ServerCertificates: TsbxCertificateList read get_ServerCertificates write set_ServerCertificates;

Remarks

Use this property to provide a list of TLS certificates for the server endpoint.

A TLS endpoint needs a certificate to be able to accept TLS connections. At least one of the certificates in the collection - the endpoint certificate - must have a private key associated with it.

The collection may include more than one endpoint certificate, and more than one chain. A typical usage scenario is to include two chains (ECDSA and RSA), to cater for clients with different cipher suite preferences.

This property is not available at design time.

SessionTimeout Property (TSPServer Component)

Specifies the default session timeout value in milliseconds.

Syntax

property SessionTimeout: Integer read get_SessionTimeout write set_SessionTimeout;

Default Value

360000

Remarks

Specifies the period of inactivity (in milliseconds) after which the connection will be terminated by the server.

SigningCertificate Property (TSPServer Component)

The certificate to be used for signing.

Syntax

property SigningCertificate: TsbxCertificate read get_SigningCertificate write set_SigningCertificate;

Remarks

Use this property to specify the certificate that shall be used for signing the data. Note that this certificate should have a private key associated with it. Use SigningChain to supply the rest of the certificate chain for inclusion into the signature.

This property is not available at design time.

SigningChain Property (TSPServer Component)

The signing certificate chain.

Syntax

property SigningChain: TsbxCertificateList read get_SigningChain write set_SigningChain;

Remarks

Use this property to provide the chain for the signing certificate. Use SigningCertificate property, if it is available, to provide the signing certificate itself.

This property is not available at design time.

SocketSettings Property (TSPServer Component)

Manages network connection settings.

Syntax

property SocketSettings: TsbxSocketSettings read get_SocketSettings;

Remarks

Use this property to tune up network connection parameters.

This property is read-only.

TLSSettings Property (TSPServer Component)

Manages TLS layer settings.

Syntax

property TLSSettings: TsbxTLSSettings read get_TLSSettings;

Remarks

Use this property to tune up the TLS layer parameters.

This property is read-only.

TSAName Property (TSPServer Component)

Specifies the name of TSA.

Syntax

property TSAName: String read get_TSAName write set_TSAName;

Default Value

''

Remarks

Use this property to provide the alternative name of the TSA, in RDN format.

Users Property (TSPServer Component)

Provides a list of registered users.

Syntax

property Users: TsbxUserAccountList read get_Users write set_Users;

Remarks

Assign a list of 'known' users to this property to automate authentication handling by the component.

This property is not available at design time.

WebsiteName Property (TSPServer Component)

Specifies the web site name to use in the certificate.

Syntax

property WebsiteName: String read get_WebsiteName write set_WebsiteName;

Default Value

'SecureBlackbox'

Remarks

If using an internally-generated certificate, use this property to specify the web site name to be included as a common name. A typical common name consists of the host name, such as '192.168.10.10' or 'domain.com'.

Config Method (TSPServer Component)

Sets or retrieves a configuration setting.

Syntax

function Config(ConfigurationString: String): String;

Remarks

Config is a generic method available in every component. It is used to set and retrieve configuration settings for the component.

These settings are similar in functionality to properties, but they are rarely used. In order to avoid "polluting" the property namespace of the component, access to these internal properties is provided through the Config method.

To set a configuration setting named PROPERTY, you must call Config("PROPERTY=VALUE"), where VALUE is the value of the setting expressed as a string. For boolean values, use the strings "True", "False", "0", "1", "Yes", or "No" (case does not matter).

To read (query) the value of a configuration setting, you must call Config("PROPERTY"). The value will be returned as a string.

DoAction Method (TSPServer Component)

Performs an additional action.

Syntax

function DoAction(ActionID: String; ActionParams: String): String;

Remarks

DoAction is a generic method available in every component. It is used to perform an additional action introduced after the product major release. The list of actions is not fixed, and may be flexibly extended over time.

The unique identifier (case insencitive) of the action is provided in the ActionID parameter.

ActionParams contains the value of a single parameter, or a list of multiple parameters for the action in the form of PARAM1=VALUE1;PARAM2=VALUE2;....

DropClient Method (TSPServer Component)

Terminates a client connection.

Syntax

procedure DropClient(ConnectionId: Int64; Forced: Boolean);

Remarks

Call this method to shut down a connected client. Forced indicates whether the connection should be closed in a graceful manner.

GetRequestBytes Method (TSPServer Component)

Returns the contents of the client's HTTP request.

Syntax

function GetRequestBytes(ConnectionId: Int64): TBytes;

Remarks

Use this method to get the body of the client's HTTP request. Note that the body of GET and HEAD requests is empty.

GetRequestHeader Method (TSPServer Component)

Returns a request header value.

Syntax

function GetRequestHeader(ConnectionId: Int64; HeaderName: String): String;

Remarks

Use this method to get the value of a request header. A good place to call this method is a request-marking event, such as GetRequest or PostRequest.

GetRequestString Method (TSPServer Component)

Returns the contents of the client's HTTP request.

Syntax

function GetRequestString(ConnectionId: Int64): String;

Remarks

Use this method to get the body of the client's HTTP request to a string. Note that the body of GET and HEAD requests is empty.

GetRequestUsername Method (TSPServer Component)

Returns the username for a connection.

Syntax

function GetRequestUsername(ConnectionId: Int64): String;

Remarks

Use this method to obtain a username for an active connection. The method will return an empty string if no authentication has been performed on the connection.

ListClients Method (TSPServer Component)

Enumerates the connected clients.

Syntax

function ListClients(): String;

Remarks

This method enumerates the connected clients. It returns a list of strings, with each string being of 'ConnectionID|Address|Port' format, and representing a single connection.

PinClient Method (TSPServer Component)

Takes a snapshot of the connection's properties.

Syntax

procedure PinClient(ConnectionId: Int64);

Remarks

Use this method to take a snapshot of a connected client. The captured properties are populated in PinnedClient and PinnedClientChain properties.

ProcessGenericRequest Method (TSPServer Component)

Processes a generic timestamp request.

Syntax

function ProcessGenericRequest(RequestBytes: TBytes; TimeTokenOnly: Boolean): TBytes;

Remarks

This method processes a generic timestamping request and produces a response. Use it to generate timestamps for requests obtained externally, out of the default HTTP channel.

This method respects all current settings of the server object, and invokes TimestampRequest to consult about the request and response details with the application.

If TimeTokenOnly is set, the return value will only contain the TimeStampToken piece of the response. If it is switched off, the whole TimeStampResp structure will be returned.

Start Method (TSPServer Component)

Starts the TSP server.

Syntax

procedure Start();

Remarks

Use this method to start listening for incoming connections.

Stop Method (TSPServer Component)

Stops the TSP server.

Syntax

procedure Stop();

Remarks

Call this method to stop listening for incoming connections.

Accept Event (TSPServer Component)

Reports an incoming connection.

Syntax

type TAcceptEvent = procedure (
  Sender: TObject;
  const RemoteAddress: String;
  RemotePort: Integer;
  var Accept: Boolean
) of Object;

property OnAccept: TAcceptEvent read FOnAccept write FOnAccept;

Remarks

This event is fired when a new connection from RemoteAddress:RemotePort is ready to be accepted. Use the Accept parameter to accept or decline it.

Subscribe to Connect event to be notified of every connection that has been set up.

AuthAttempt Event (TSPServer Component)

Fires when a connected client makes an authentication attempt.

Syntax

type TAuthAttemptEvent = procedure (
  Sender: TObject;
  ConnectionID: Int64;
  const HTTPMethod: String;
  const URI: String;
  const AuthMethod: String;
  const Username: String;
  const Password: String;
  var Allow: Boolean
) of Object;

property OnAuthAttempt: TAuthAttemptEvent read FOnAuthAttempt write FOnAuthAttempt;

Remarks

The component fires this event whenever a client attempts to authenticate itself. Use the Allow parameter to let the client through.

ConnectionID contains the unique session identifier for that client, HTTPMethod specifies the HTTP method (GET, POST, etc.) used to access the URI resource, AuthMethod specifies the authentication method, and Username and Password contain the professed credentials.

Connect Event (TSPServer Component)

Reports an accepted connection.

Syntax

type TConnectEvent = procedure (
  Sender: TObject;
  ConnectionID: Int64;
  const RemoteAddress: String;
  RemotePort: Integer
) of Object;

property OnConnect: TConnectEvent read FOnConnect write FOnConnect;

Remarks

The component fires this event to report that a new connection has been established. ConnectionId indicates the unique ID assigned to this connection. The same ID will be supplied to any other events related to this connection, such as GetRequest or AuthAttempt.

Disconnect Event (TSPServer Component)

Fires to report a disconnected client.

Syntax

type TDisconnectEvent = procedure (
  Sender: TObject;
  ConnectionID: Int64
) of Object;

property OnDisconnect: TDisconnectEvent read FOnDisconnect write FOnDisconnect;

Remarks

The component fires this event when a connected client disconnects.

Error Event (TSPServer Component)

Information about errors during data delivery.

Syntax

type TErrorEvent = procedure (
  Sender: TObject;
  ConnectionId: Int64;
  ErrorCode: Integer;
  const Description: String
) of Object;

property OnError: TErrorEvent read FOnError write FOnError;

Remarks

The event is fired in case of exceptional conditions during message processing.

ErrorCode contains an error code and Description contains a textual description of the error. For a list of valid error codes and their descriptions, please refer to the HTTPS section.

ExternalSign Event (TSPServer Component)

Handles remote or external signing initiated by the server protocol.

Syntax

type TExternalSignEvent = procedure (
  Sender: TObject;
  ConnectionID: Int64;
  const OperationId: String;
  const HashAlgorithm: String;
  const Pars: String;
  const Data: String;
  var SignedData: String
) of Object;

property OnExternalSign: TExternalSignEvent read FOnExternalSign write FOnExternalSign;

Remarks

Assign a handler to this event if you need to delegate a low-level signing operation to an external, remote, or custom signing engine. Depending on the settings, the handler will receive a hashed or unhashed value to be signed.

The event handler must pass the value of Data to the signer, obtain the signature, and pass it back to the component via SignedData parameter.

OperationId provides a comment about the operation and its origin. It depends on the exact component being used, and may be empty. HashAlgorithm specifies the hash algorithm being used for the operation, and Pars contain algorithm-dependent parameters.

The component uses base16 (hex) encoding for Data, SignedData, and Pars parameters. If your signing engine uses a different input and output encoding, you may need to decode and/or encode the data before and/or after the signing.

A sample MD5 hash encoded in base16: a0dee2a0382afbb09120ffa7ccd8a152 - lower case base16 A0DEE2A0382AFBB09120FFA7CCD8A152 - upper case base16

A sample event handler that uses a .NET RSACryptoServiceProvider class may look like the following: signer.OnExternalSign += (s, e) => { var cert = new X509Certificate2("cert.pfx", "", X509KeyStorageFlags.Exportable); var key = (RSACryptoServiceProvider)cert.PrivateKey; var dataToSign = e.Data.FromBase16String(); var signedData = key.SignHash(dataToSign, "2.16.840.1.101.3.4.2.1"); e.SignedData = signedData.ToBase16String(); };

Notification Event (TSPServer Component)

This event notifies the application about an underlying control flow event.

Syntax

type TNotificationEvent = procedure (
  Sender: TObject;
  const EventID: String;
  const EventParam: String
) of Object;

property OnNotification: TNotificationEvent read FOnNotification write FOnNotification;

Remarks

The component fires this event to let the application know about some event, occurrence, or milestone in the component. For example, it may fire to report completion of the document processing. The list of events being reported is not fixed, and may be flexibly extended over time.

The unique identifier of the event is provided in EventID parameter. EventParam contains any parameters accompanying the occurrence. Depending on the type of the component, the exact action it is performing, or the document being processed, one or both may be omitted.

TimestampRequest Event (TSPServer Component)

Reports an incoming timestamp request.

Syntax

type TTimestampRequestEvent = procedure (
  Sender: TObject;
  ConnectionId: Int64;
  const HashAlgorithm: String;
  MessageImprint: TBytes;
  var Time: String;
  var Accept: Boolean
) of Object;

property OnTimestampRequest: TTimestampRequestEvent read FOnTimestampRequest write FOnTimestampRequest;

Remarks

This event is fired when a new incoming timestamp request is received. Use it to track or alter the details of a generated timestamp.

MessageImprint contains the digest of the message that needs to be timestamped, which was created using HashAlgorithm. Time is the time to be certified. Set Accept to true to accept the request and generate a timestamp, or to false to reject the request.

Supported hash algorithms:

TLSCertValidate Event (TSPServer Component)

Fires when a client certificate needs to be validated.

Syntax

type TTLSCertValidateEvent = procedure (
  Sender: TObject;
  ConnectionID: Int64;
  var Accept: Boolean
) of Object;

property OnTLSCertValidate: TTLSCertValidateEvent read FOnTLSCertValidate write FOnTLSCertValidate;

Remarks

The component fires this event to notify the application of an authenticating client. Use the event handler to validate the certificate and pass your decision back to the server component via the Accept parameter.

TLSEstablished Event (TSPServer Component)

Reports the setup of a TLS session.

Syntax

type TTLSEstablishedEvent = procedure (
  Sender: TObject;
  ConnectionID: Int64
) of Object;

property OnTLSEstablished: TTLSEstablishedEvent read FOnTLSEstablished write FOnTLSEstablished;

Remarks

Subscribe to this event to be notified about the setup of a TLS connection by a connected client.

TLSHandshake Event (TSPServer Component)

Fires when a newly established client connection initiates a TLS handshake.

Syntax

type TTLSHandshakeEvent = procedure (
  Sender: TObject;
  ConnectionID: Int64;
  const ServerName: String;
  var Abort: Boolean
) of Object;

property OnTLSHandshake: TTLSHandshakeEvent read FOnTLSHandshake write FOnTLSHandshake;

Remarks

Use this event to get notified about the initiation of the TLS handshake by the remote client. The ServerName parameter specifies the requested host from the client hello message.

TLSPSK Event (TSPServer Component)

Requests a pre-shared key for TLS-PSK.

Syntax

type TTLSPSKEvent = procedure (
  Sender: TObject;
  ConnectionID: Int64;
  const Identity: String;
  var PSK: String;
  var Ciphersuite: String
) of Object;

property OnTLSPSK: TTLSPSKEvent read FOnTLSPSK write FOnTLSPSK;

Remarks

The component fires this event to report that a client has requested a TLS-PSK negotiation. ConnectionId indicates the unique connection ID that requested the PSK handshake.

Use Identity to look up for the corresponding pre-shared key in the server's database, then assign the key to the PSK parameter. If TLS 1.3 PSK is used, you will also need to assign the Ciphersuite parameter with the cipher suite associated with that identity and their key.

TLSShutdown Event (TSPServer Component)

Reports closure of a TLS session.

Syntax

type TTLSShutdownEvent = procedure (
  Sender: TObject;
  ConnectionID: Int64
) of Object;

property OnTLSShutdown: TTLSShutdownEvent read FOnTLSShutdown write FOnTLSShutdown;

Remarks

The component fires this event when a connected client closes their TLS session gracefully. This event is typically followed by a Disconnect, which marks the closure of the underlying TCP session.

Certificate Type

Provides details of an individual X.509 certificate.

Remarks

This type provides access to X.509 certificate details.

Fields

constructor Create();

constructor Create();

constructor Create();

constructor Create();

constructor Create();

constructor Create();

Config Settings (TSPServer Component)

TSPServer Config Settings

Base Config Settings

Trappable Errors (TSPServer Component)

TSPServer Errors