Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-19825

SSL should present the whole certificate chain for local certificate

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • P3: Somewhat important
    • 5.1.0
    • 4.7.3
    • Network: SSL
    • None
    • 19d9e81b393544f6bd9e6a71d344e1b0f9c378ff

    Description

      QSslConfiguration::setLocalCertificate only accepts one single certificate. But aduring client authentication, the client must present his certificate including the full chain of intermediate certificates up to (and including) the root.

      The actual implementation does not work, if the server only installs the CA-root-certificate, but not the issuing certificates, and the CA uses issuing certificate (as e.g. SwissSign).

      void QSslCertificatePrivate::init(const QByteArray &data, QSsl::EncodingFormat format) ignores all certificats exept the first one and QSslConfiguration::setLocalCertificate does not accept a list. Both should be corrected.

      The same problem exists in Apple/Safari, b.t.w.

      Attachments

        Issue Links

          For Gerrit Dashboard: QTBUG-19825
          # Subject Branch Project Status CR V

          Activity

            People

              richmoore Richard Moore (qtnetwork)
              mrw Marc Wäckerlin
              Votes:
              2 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Gerrit Reviews

                  There are no open Gerrit changes