Prevent spurious SSL errors from local certificates.
authorRichard J. Moore <rich@kde.org>
Sun, 12 Jan 2014 16:59:27 +0000 (16:59 +0000)
committerThe Qt Project <gerrit-noreply@qt-project.org>
Thu, 16 Jan 2014 20:57:06 +0000 (21:57 +0100)
commit7c8131763de9e70ca56f16635716e7e00559b5d1
tree4e0a6996ab23483645bf187808359270a73cadac
parent3a2631391914e002769d0e3f6a934d241fa1d389
Prevent spurious SSL errors from local certificates.

Qt since approximately 4.4 has set the verify callback on both the SSL
store and the SSL context. Only the latter is actually needed. This is
normally not a problem, but openssl prior to 1.0.2 uses the verify
code to find the intermediate certificates for any local certificate
that has been set which can lead to verification errors for the local
certificate to be emitted.

Task-number: QTBUG-33228
Task-number: QTBUG-7200
Task-number: QTBUG-24234
Change-Id: Ie4115e7f7faa1267ea9b807c01b1ed6604c4a16c
Reviewed-by: Peter Hartmann <phartmann@blackberry.com>
Reviewed-by: Thiago Macieira <thiago.macieira@intel.com>
src/network/ssl/qsslcontext.cpp
tests/auto/network/ssl/qsslsocket/tst_qsslsocket.cpp