Discussion :

[delphiland]

Bonjour à tous,

Voici mon problème : j'utilise Delphi XE7 ( Indy version: 10.6.0.5169 ) pour envoyer des mails avec le composant IdSMTP, tout fonctionne bien mais récemment j'ai reçu un mail de Amazon AWS qui me dit qu'il n'accepte plus "The V2 Client Hello handshake mechanism" et "use a modern TLS handshake method that aligns with current security standards".

Je ne comprend absolument pas le message de Amazon, sauriez vous s'il vous plaît me dire comment je peut modifier ce paramètre Hello ?

Merci de votre aide.


-
Ci dessous le mail de Amazon
-

[Starting September 15, 2025, emails about AWS Health events will be delivered via the AWS User Notifications service. You can opt-in to this enhanced experience today. See footer for details.]

Hello,
Our records indicate that your account is currently using V2 Client Hello, a legacy handshake protocol when initiating connections with Amazon Simple Email Service (SES) SMTP endpoints.

What's Changing?
Starting November 25, 2025, Amazon SES will stop supporting V2 Client Hello on SMTP endpoints. After this date, any traffic using V2 Client Hello to initiate connections with SES SMTP endpoints will be rejected, and your applications will not be able to send emails unless they use a modern TLS handshake method that aligns with current security standards.

Why Is This Change Important?
The V2 Client Hello handshake mechanism, despite supporting TLS 1.2, is outdated and no longer aligned with modern security best practices.

What Do I Need to Do?
To maintain uninterrupted email sending with SES SMTP endpoints, please take the following actions before November 25, 2025:

1. Update Your Applications and Clients or Disable V2 Client Hello: Update your TLS settings to prevent the use of V2 Client Hello and ensure all applications and email-sending clients use a modern TLS handshake compatible with when connecting to SES SMTP endpoints.

2. Test Your Connections: After making the necessary updates, thoroughly test your email-sending workflows to confirm they can successfully establish connections with SES SMTP endpoints using a modern TLS handshake.

For more detailed information and guidance on updating your TLS configurations, please refer to the SES Documentation [1].

If you require further assistance or have any questions, please contact AWS Support [2].

----------------------------------------------------------

[ShaiLeTroll]

Pour Indy c'est sur le TIdSSLIOHandlerSocketOpenSSL et SSLOptions.Method par exemple à sslvSSLv23

et UseTLS à utUseImplicitTLS vs utUseExplicitTLS (StartTLS)


Ta version des deux DLL SSL peut jouer aussi, les problèmes de Hanshake j'en ai eu pour du GET en HTTPS, j'ai viré Indy à l'époque mais pour TidSTMP c'est plus difficile de s'en séparer.