diff options
| author | Peter Hartmann <peter.hartmann@nokia.com> | 2010-06-30 10:09:05 (GMT) |
|---|---|---|
| committer | Peter Hartmann <peter.hartmann@nokia.com> | 2010-06-30 11:05:17 (GMT) |
| commit | 317e2c9199da58879b083b5561a69612ae0a4a41 (patch) | |
| tree | 17ac1daefe782d7b20eab3f8e48d197733ec07ea /src/network/ssl/qsslsocket_openssl_symbols.cpp | |
| parent | dad49a41cc60e6297bd6d7099b6d06e0240c5f16 (diff) | |
| download | Qt-317e2c9199da58879b083b5561a69612ae0a4a41.zip Qt-317e2c9199da58879b083b5561a69612ae0a4a41.tar.gz Qt-317e2c9199da58879b083b5561a69612ae0a4a41.tar.bz2 | |
SSL backend: correct ordering of root CA certificates in the store
Some CAs have several root certificates with the same SubjectInfo, but
different expiration date. This means that OpenSSL needs to choose the
valid root certificate over the expired ones when verifying a
certificate chain. Apparently, the certs added to the store first are
the ones that get used first, so we add the expired ones at the end.
Reviewed-by: Thiago Macieira
Task-number: QTBUG-11664
Diffstat (limited to 'src/network/ssl/qsslsocket_openssl_symbols.cpp')
0 files changed, 0 insertions, 0 deletions