Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-97168

Qt does not trigger Windows' lazy loading of SSL root certificates

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Reported
    • Priority: P2: Important
    • Resolution: Unresolved
    • Affects Version/s: 5.15.6
    • Fix Version/s: None
    • Component/s: Network: SSL
    • Labels:
      None
    • Environment:
      Windows 10 21H1 (19043.1237)
    • Platform/s:
      Windows

      Description

      Windows 10 appears to load new SSL root certificates on demand. A new Windows installation will not have the ISRG X1 root certificate (according to certmgr.msc), but if you visit a site that uses it (ie with a certificate issued by LetsEncrypt) in Edge or Chrome, the certificate will automatically appear.

      Accessing a site using QNetworkAccessManager does not trigger the loading of the root certificate though and will fail if the certificate is not already installed.

      (There is a bit of discussion about this Windows behaviour in https://community.letsencrypt.org/t/isrg-root-lazy-loading-problem-missing-from-random-updated-windows-10-versions/141550/2 ).

       

        Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

            Assignee:
            tpochep Timur Pocheptsov
            Reporter:
            hmoffatt Hamish Moffatt
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:

                Gerrit Reviews

                There are no open Gerrit changes