TurboActivate.Activate Error &h24 (0x24) - TA_E_INET_TLSSolved

We've got an important client that can't update to the latest version of our application. When we get to TurboActivate.Active we get a return value of 36 (hex 24). We've updated TurboActivate to 4.1.8.1 and the problem persists.

When we disconnect from their network and use a phone hotspot we get a different error of 35 (hex 23).

We've followed the instructions on using Internet Explorer to check internet connection and that is fine.

Built using Xojo 2019 R1.1 (64-bit application) and the customer has Windows 10 64-bit.

Any ideas?

Well, firstly, use the latest Xojo classes so you can human readable errors. See the FAQ on updating your classes and libraries: https://wyday.com/limelm/help/faq/#update-libs

/* MessageId: TA_E_INET_TLS Message code (in Hex): 0x24 Message code (in Decimal): 36

MessageText:

The secure connection to the activation servers failed due to a TLS or certificate error. This is most often caused by MITM (man-in-the-middle) attempts on corporate networks or, if on Unix operating systems (macOS, Linux, BSD, etc.), it's caused by out-of-date or missing "CA certificates". This means either keeping your system itself up-to-date, or manually updating the CA certs.

More information here: https://wyday.com/limelm/help/faq/#internet-error*/#define TA_E_INET_TLS ((HRESULT)0x00000024L)

There's not really enough information to help, other than to say it's likely use-error. Most likely MITM of communication to/from wyDay servers. And they didn't correctly setup the MITM certificates.

Right, this is an extremely old Xojo app. But we did replicate the error with the example project.

We're dealing with a corporate IT department (in China). Would the Man in the Middle certificates be named something specific? Just trying to figure out the terminology to send to them.

>> " Would the Man in the Middle certificates be named something specific?"

Well, MITM is a specific term for the process of creating "fake" certificates for services for the purpose of intercepting traffic, monitoring it, and modifying it within that organization.

They'd be creating MITM for wyday.com. Clearly they did it wrong. Or did a half-assed job of it.

The actual solution: don't MITM. But try telling an IT department that (even in the U.S.). Or hire IT staff with the competence to do it correctly.

It might be easier to just offline activate: https://wyday.com/limelm/help/offline-activation/

Reply
Discard post