Details
-
Bug
-
Resolution: Done
-
P3: Somewhat important
-
4.7.3
-
None
-
19d9e81b393544f6bd9e6a71d344e1b0f9c378ff
Description
QSslConfiguration::setLocalCertificate only accepts one single certificate. But aduring client authentication, the client must present his certificate including the full chain of intermediate certificates up to (and including) the root.
The actual implementation does not work, if the server only installs the CA-root-certificate, but not the issuing certificates, and the CA uses issuing certificate (as e.g. SwissSign).
void QSslCertificatePrivate::init(const QByteArray &data, QSsl::EncodingFormat format) ignores all certificats exept the first one and QSslConfiguration::setLocalCertificate does not accept a list. Both should be corrected.
The same problem exists in Apple/Safari, b.t.w.
Attachments
Issue Links
- depends on
-
QTBUG-13281 qsslsocket is missing a function to load server's chain of certificates
-
- Closed
-