Best Of

Re: AL begin..end blocks changed colour?

Hi,

Any chance you have one of those Bracket Pair Colorizer extensions installed - they cause this sometimes. My "Bracket Pair Colorizer 2" does/did that until I disabled that.

/Wisa

Wisa123

Re: VS Code for AL: Timeout after 2000 ms for 'terminate'

I get that one too occasionally, but since it doesn't seem to mess up anything I just go with it.
Right now I don't see an open issue about that one on github, so feel free to create one
https://github.com/microsoft/AL/issues

Wisa123

Re: How to encrypt and decrypt the password using RSA algorithm in NAV 2016

Hello @srinivas_dynamics,

Here there is an example using a RSA private key to Encrypt and Decrypt.

You need an external DLL (BouncyCastle) that you can get here:

http://www.bouncycastle.org/csharp/

OBJECT Codeunit 50099 RSA Management
{
  OBJECT-PROPERTIES
  {
    Date=17/10/20;
    Time=12:20:31;
    Modified=Yes;
    Version List=RSA;
  }
  PROPERTIES
  {
    OnRun=VAR
            [email protected] : DotNet "'mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'.System.Security.Cryptography.RSACryptoServiceProvider";
            [email protected] : DotNet "'mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'.System.Security.Cryptography.RSACryptoServiceProvider";
            [email protected] : Text;
            [email protected] : Text;
            [email protected] : Text;
            [email protected] : Text;
          BEGIN
            RSAcspPri := RSAcspPri.RSACryptoServiceProvider;
            Path2PEMFile := 'D:';  // Here the path to your PEM file
            ReadPEM(Path2PEMFile + '\private_unencrypted.pem', 0, RSAcspPri);

            Txt2Encrypt := 'INIT Text to encrypt ABCDE abcde - 1234567890 $%&/()¨?*  ‚¡¢£ „‰‹” ¥¤€‡° END';
            TxtEncrypted := RSAEncrypt(RSAcspPri, Txt2Encrypt);
            TxtDecrypted := RSADecrypt(RSAcspPri, TxtEncrypted);
            MESSAGE('Text to encrypt (%4): %1\\'+
                    'Encrypted text (%5): %2\\'+
                    'Text decrypted (%6): %3',
                     Txt2Encrypt,
                     TxtEncrypted,
                     TxtDecrypted,
                     STRLEN(Txt2Encrypt),
                     STRLEN(TxtEncrypted),
                     STRLEN(TxtDecrypted));
          END;

  }
  CODE
  {

    PROCEDURE [email protected]([email protected] : Text;[email protected] : 'Private,Public';VAR [email protected] : DotNet "'mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'.System.Security.Cryptography.RSACryptoServiceProvider");
    VAR
      [email protected] : DotNet "'BouncyCastle.Crypto, Version=1.8.8.0, Culture=neutral, PublicKeyToken=0e99375e54769942'.Org.BouncyCastle.OpenSsl.PemReader";
      [email protected] : DotNet "'BouncyCastle.Crypto, Version=1.8.8.0, Culture=neutral, PublicKeyToken=0e99375e54769942'.Org.BouncyCastle.Crypto.AsymmetricCipherKeyPair";
      [email protected] : DotNet "'BouncyCastle.Crypto, Version=1.8.8.0, Culture=neutral, PublicKeyToken=0e99375e54769942'.Org.BouncyCastle.Security.DotNetUtilities";
      [email protected] : DotNet "'mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'.System.IO.StreamReader";
      [email protected] : DotNet "'BouncyCastle.Crypto, Version=1.8.8.0, Culture=neutral, PublicKeyToken=0e99375e54769942'.Org.BouncyCastle.Crypto.Parameters.RsaKeyParameters";
      [email protected] : Codeunit 419;
      [email protected] : Text;
      [email protected] : DotNet "'BouncyCastle.Crypto, Version=1.8.8.0, Culture=neutral, PublicKeyToken=0e99375e54769942'.Org.BouncyCastle.Crypto.Parameters.RsaPrivateCrtKeyParameters";
      [email protected] : DotNet "'mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'.System.Security.Cryptography.RSAParameters";
    BEGIN
      ServerFile := FileMgt.ServerTempFileName('');
      ServerFile := FileMgt.UploadFileSilentToServerPath(FilePath, ServerFile);
      reader := reader.StreamReader(ServerFile);
      PemReader := PemReader.PemReader(reader);
      KeyPair := PemReader.ReadObject();
      IF Type = Type::Private THEN BEGIN
        RSAPrivateParameters := KeyPair.Private;
        RSAParameters := DotNetUtilities.ToRSAParameters(RSAPrivateParameters);
      END ELSE BEGIN
        RSAKeyParameters := KeyPair;
        RSAParameters := DotNetUtilities.ToRSAParameters(RSAKeyParameters);
      END;
      RSAcsp.ImportParameters(RSAParameters);
    END;

    PROCEDURE [email protected]([email protected] : DotNet "'mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'.System.Security.Cryptography.RSACryptoServiceProvider";[email protected] : Text) : Text;
    VAR
      [email protected] : DotNet "'mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'.System.Array";
      [email protected] : DotNet "'mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'.System.Type";
      [email protected] : Integer;
      [email protected] : DotNet "'mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'.System.Security.Cryptography.RSAEncryptionPadding";
      [email protected] : Text;
      [email protected] : DotNet "'mscorlib'.System.Convert";
      [email protected] : DotNet "'mscorlib'.System.Text.Encoding";
    BEGIN
      DotNetType := DotNetType.GetType('System.Byte',FALSE);
      Length := STRLEN(Txt2Encrypt);
      DotNetArray := DotNetArray.CreateInstance(DotNetType, Length);
      DotNetArray := Encoding.UTF8.GetBytes(Txt2Encrypt);
      DotNetArray := RSAcsp.Encrypt(DotNetArray, Paddings.Pkcs1);
      TxtEncrypted := Convert.ToBase64String(DotNetArray);

      EXIT(TxtEncrypted);
    END;

    PROCEDURE [email protected]([email protected] : DotNet "'mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'.System.Security.Cryptography.RSACryptoServiceProvider";[email protected] : Text) : Text;
    VAR
      [email protected] : DotNet "'mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'.System.Array";
      [email protected] : DotNet "'mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'.System.Type";
      [email protected] : Integer;
      [email protected] : DotNet "'mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'.System.Security.Cryptography.RSAEncryptionPadding";
      [email protected] : Text;
      [email protected] : DotNet "'mscorlib'.System.Convert";
      [email protected] : DotNet "'mscorlib'.System.Text.Encoding";
    BEGIN
      DotNetType := DotNetType.GetType('System.Byte',FALSE);
      Length := STRLEN(Txt2Decrypt);
      DotNetArray := DotNetArray.CreateInstance(DotNetType, Length);
      DotNetArray := Convert.FromBase64String(Txt2Decrypt);
      DotNetArray := RSAcsp.Decrypt(DotNetArray, Paddings.Pkcs1);
      TxtDecrypted := Encoding.UTF8.GetString(DotNetArray);

      EXIT(TxtDecrypted);
    END;

    BEGIN
    END.
  }
}

ftornero

Re: How to encrypt and decrypt the password using RSA algorithm in NAV 2016

To test the above code you can use this PEM file

Or you can create a new one using OpenSSL and this commands:

openssl genrsa -des3 -out private.pem 2048

openssl rsa -in private.pem -out private_unencrypted.pem -outform PEM

Regards

ftornero

Re: BC 14 on-prem NAVUserPassword Windows & Web Clients - Certificates

Hi,

If you buy a certificate, it should contain the complete chain of certificates needed. So, no need to buy multiple.

Single domain certificate should be sufficient

A self-signed certificate does exactly the same as a purchased certificate. However, with a purchased certificate, the client can be sure that the server can be trusted, as the issuer is trusted. When using a self-signed certificate, that trust is not there, and you will have to install that self-signed certificate on every client.

What you need to understand is that there are certificates in two places. There is one which you use in the Dynamics NAV environment, which is identified using the certificate thumbprint. This is used for the communication between IIS (Internet Information Server) and the Dynamics NAV Server. This is mandatory when using NavUserPassword authentication. It is also used for encrypting communication between the RoleTailored clients and the NAV server.

The second place you might use a certificate is in IIS. IIS is hosting the webclient, and users are connecting to IIS. So, if you want that secured, you need a certificate for that. Also, if you want to use the universal app, SSL is mandatory.

What I usually do is that the server certificate (so, the one identified using the Certificate Thumbprint in the Dynamics NAV Administration) is a self-signed certificate. If the NAV server and the IIS server are on the same machine, this should work immediately. If not, you should export the self-signed certificate you created on the NAV server, and import it on the server running IIS. I assume you got this working

If my IIS server is available from the outside, I use a wildcard certificate (*.domain.com) and install that on IIS.

That 's the webclient covered: You don't need to install the "real" certificate on the clients, as it should already be trusted by the browser.

For the RoleTailored clients I would not bother with "real" certificates if they are only used internally. Also, you cannot purchase certificates for your servers if there are no official Top Level Domain (TLD) names used. You cannot buy a certificate for your company.local domain, for example, so you can only use self-signed certificates. That means you have to install that self-signed certificate on every computer

However, when you set the ServicesCertificateValidationEnabled to false in the client's config file, no validation is done on the certificate, and you don't need to install the certificate on the local client either.

However, do remember that not using a certificate poses a security risk, as traffic between client and server is not encrypted.

I hope this makes it somewhat more clear for you.

Poltergeist

Re: Copy a BLOB to another record

Try with out validate
"Document Manquants" := locExtendedTextHeader.Text;

And use CLEAR("Document Manquants") before insert new value

And use MODIFY to save

AlexeyShamin

Re: posting transfer orders using job queue

Hello!
We use only job queue to run codeunits "TransferOrder-Post Shipment" or "TransferOrder-Post Receipt". Why you need report to grab entries?

AlexeyShamin

Re: Delete Empty Registers

No, it's definitely not necessary. It's probably for cases when some historical data are merged or moved to some backup table to improve performance...

Kepty

Re: Making a field mandatory

This will show red cross on field
1. Create global boolean variable. Example: FieldMandatory
2. on page in ShowMandatory property of field set variable "FieldMandatory"
3. On OnOpenPage trigger:
IF SomeCase THEN
FieldMandatory := TRUE
ELSE
FieldMandatory := FALSE;

This will check field:
1. On On ClosePage trigger
IF SomeCase THEN
TESTFIELD(Field);

AlexeyShamin

Re: Intercompany with open ledger entries

Hey Andy,

As far as i know the reason is consolidation.

Cheers,

Chris

Me_Ontour