Details
-
Bug
-
Resolution: Unresolved
-
P2: Important
-
None
-
5.15.6
-
None
-
Windows 10 21H1 (19043.1237)
Description
Windows 10 appears to load new SSL root certificates on demand. A new Windows installation will not have the ISRG X1 root certificate (according to certmgr.msc), but if you visit a site that uses it (ie with a certificate issued by LetsEncrypt) in Edge or Chrome, the certificate will automatically appear.
Accessing a site using QNetworkAccessManager does not trigger the loading of the root certificate though and will fail if the certificate is not already installed.
(There is a bit of discussion about this Windows behaviour in https://community.letsencrypt.org/t/isrg-root-lazy-loading-problem-missing-from-random-updated-windows-10-versions/141550/2 ).