Details
-
Type:
Task
-
Status: In Progress
-
Priority:
P2: Important
-
Resolution: Unresolved
-
Affects Version/s: 6.2
-
Fix Version/s: None
-
Component/s: Network: SSL
-
Labels:
-
Platform/s:
-
Story Points:8
-
Sprint:Qt6_Foundation_Sprint 38, Qt6_Foundation_Sprint 39, Foundation PM Priority
Description
With OpenSSL v3 as a TLS backend some auto-tests started failing:
- tst_QSslSocket::protocolServerSide (error:0A00018E:SSL routines::ca md too weak - replacing the old cert fixes the problem).
- tst_QSslSocket::serverCipherPreferences (error:0A000076:SSL routines::no suitable signature algorithm) - test seems to be crap and very OpenSSL version specific. e.g. I can make it work if selecting TLS_CHACHA20_POLY1305_SHA256 as the preferable ciphersuite ... others don't seem work though, have to remove/re-think the test).
- tst_QSslSocket::setLocalCertificateChain (the problem with 'weak' MD, same as in 'protoccolServerSide')
- tst_QSslSocket::setSocketDescriptor (same problem with old cert/MD)
- tst_QSslSocket::allowedProtocolNegotiation (error:0A00018E:SSL routines::ca md too weak)
- tst_QSslSocket::spontaneousWrite (old cert, MD)
- tst_QSslSocket::verifyMode() - TBU
- tst_QSslSocket::setReadBufferSize (error:0A00018E:SSL routines::ca md too weak)
- tst_QSslSocket::abortOnSslErrors (error:0A00018E:SSL routines::ca md too weak)
- tst_QSslSocket::waitForMinusOne (TBU)
- tst_QSslSocket::qtbug18498_peek2 (TBU)
- tst_QSslSocket::dhServer (error:0A00018E:SSL routines::ca md too weak)
- tst_QSslSocket::dhServerCustomParams (error:0A00018E:SSL routines::ca md too weak)
- tst_QSslSocket::ecdhServer (error:0A00018E:SSL routines::ca md too weak)
- tst_QSslSocket::verifyClientCertificate (old cert, MD)
- tst_QSslSocket::ephemeralServerKey (old cert, MD)
- tst_QSslSocket::oldErrorsOnSocketReuse (MD problem)
- tst_QSslSocket::alertInvalidCertificate(MD)
MD == "ca md too weak"
Attachments
Issue Links
- relates to
-
QTBUG-94596 Check OpenSSL plugin built and linked against OpenSSL 3.
-
- Closed
-
Gerrit Reviews
For Gerrit Dashboard: QTBUG-95123 | ||||||
---|---|---|---|---|---|---|
# | Subject | Branch | Project | Status | CR | V |
363607,2 | tst_QSslSocket - replace an old certificate | dev | qt/qtbase | Status: MERGED | +2 | 0 |
364043,2 | tst_QSslSocket - replace an old certificate | 6.1 | qt/qtbase | Status: MERGED | +2 | 0 |
364044,2 | tst_QSslSocket - replace an old certificate | 6.2 | qt/qtbase | Status: MERGED | +2 | 0 |
364052,2 | tst_QSslSocket - replace an old certificate | tqtc/lts-5.15 | qt/tqtc-qtbase | Status: MERGED | +2 | 0 |