Details
-
Suggestion
-
Resolution: Unresolved
-
P5: Not important
-
5.11.2
-
None
Description
The overload of QSslSocket::setLocalCertificate taking a file path will succeed silently in all cases (also applicable to setting a null certificate). Having at least one of the following three things as error reporting is not unreasonable to expect:
1) The method returns a success status (bool, probably can be added for Qt6).
2) The method emits a debug warning (qWarning).
3) The socket emits an SSL error.
The offending code is here:
qtbase/src/network/ssl/qsslsocket.cpp
Attachments
Issue Links
- relates to
-
QTBUG-72016 QSslSocket::setPrivateKey silently succeeds with invalid paths
- Open
Gerrit Reviews
For Gerrit Dashboard: QTBUG-72015 | ||||||
---|---|---|---|---|---|---|
# | Subject | Branch | Project | Status | CR | V |
253794,2 | Add input checks for local certificate chains | dev | qt/qtbase | Status: NEW | 0 | 0 |