Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-122459

[Boot2Qt] SSL connection is broken in webengine apps runing on Boot2Qt device

    XMLWordPrintable

Details

    • Bug
    • Resolution: Cannot Reproduce
    • P1: Critical
    • 6.7.0 RC
    • 6.7.0 Beta3
    • WebEngine
    • None
    • Linux/Yocto

    Description

      NOTE: It used to work with 6.7.0b2, but stopped working after update to 6.7.0b3.

      Linux Ubuntu 22.04 

      Qt Creator 12.0.2

      Device: Raspberry Pi4 64 bit 

      Steps to reproduce:

      1. Open any webengine app that uses SSL connection
      2. Run the app on Boot2Qt device 

      Expected: The SSL connection works and I'm able to open the website and get the content.

      Actual:  Cannot get the content. 

      Reproducibility:  100% 

      [2354:2363:0920/115408.449574:ERROR:cert_issuer_source_aia.cc(36)] Error parsing cert retrieved from AIA (as DER):
      ERROR: Couldn't read tbsCertificate as SEQUENCE
      ERROR: Failed parsing Certificate[2354:2363:0920/115408.468302:ERROR:cert_verify_proc_builtin.cc(701)] CertVerifyProcBuiltin for www.qt.io failed:
      ----- Certificate i=0 (CN=www.qt.io) -----
      ERROR: Time is before notBefore
      [2354:2377:0920/115408.476380:ERROR:ssl_client_socket_impl.cc(975)] handshake failed; returned -1, SSL error code 1, net_error -201
      [2354:2363:0920/115412.174994:ERROR:cert_verify_proc_builtin.cc(701)] CertVerifyProcBuiltin for fonts.googleapis.com failed:
      ----- Certificate i=0 (CN=upload.video.google.com) -----
      ERROR: Time is before notBefore
      [2354:2377:0920/115412.177905:ERROR:ssl_client_socket_impl.cc(975)] handshake failed; returned -1, SSL error code 1, net_error -201
      [2354:2377:0920/115412.281948:ERROR:ssl_client_socket_impl.cc(975)] handshake failed; returned -1, SSL error code 1, net_error -201
      [2354:2363:0920/115412.518020:ERROR:cert_verify_proc_builtin.cc(701)] CertVerifyProcBuiltin for www.googletagmanager.com failed:
      ----- Certificate i=0 (CN=*.google-analytics.com) -----
      ERROR: Time is before notBefore
      [2354:2377:0920/115412.520801:ERROR:ssl_client_socket_impl.cc(975)] handshake failed; returned -1, SSL error code 1, net_error -201
      [2354:2363:0920/115414.348179:ERROR:cert_verify_proc_builtin.cc(701)] CertVerifyProcBuiltin for track.hubspot.com failed:
      ----- Certificate i=0 (CN=hubspot.com,O=Cloudflare\, Inc.,L=San Francisco,ST=California,C=US) -----
      ERROR: Time is before notBefore
      [2354:2377:0920/115414.352285:ERROR:ssl_client_socket_impl.cc(975)] handshake failed; returned -1, SSL error code 1, net_error -201
      [2354:2377:0920/115414.486043:ERROR:ssl_client_socket_impl.cc(975)] handshake failed; returned -1, SSL error code 1, net_error -201
      [2354:2363:0920/115414.495279:ERROR:cert_verify_proc_builtin.cc(701)] CertVerifyProcBuiltin for connect.facebook.net failed:
      ----- Certificate i=0 (CN=*.facebook.com,O=Meta Platforms\, Inc.,L=Menlo Park,ST=California,C=US) -----
      ERROR: Time is before notBefore
      [2354:2377:0920/115414.498826:ERROR:ssl_client_socket_impl.cc(975)] handshake failed; returned -1, SSL error code 1, net_error -201
      [2354:2363:0920/115414.560469:ERROR:cert_verify_proc_builtin.cc(701)] CertVerifyProcBuiltin for app.hubspot.com failed:
      ----- Certificate i=0 (CN=hubspot.com,O=Cloudflare\, Inc.,L=San Francisco,ST=California,C=US) -----
      ERROR: Time is before notBefore
      [2354:2377:0920/115414.564732:ERROR:ssl_client_socket_impl.cc(975)] handshake failed; returned -1, SSL error code 1, net_error -201
      js: The resource https://fonts.googleapis.com/css?family=Titillium+Web:400,400i,600 was preloaded using link preload but not used within a few seconds from the window's load event. Please make sure it has an appropriate `as` value and it is preloaded intentionally. 

      Attachments

        Issue Links

          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

              michal Michal Klocek
              lkos Łukasz Kosiorowski
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Gerrit Reviews

                  There are no open Gerrit changes