https request with self signed certificate

Infinity

Hello everyone

I would like to make a https get request to a server which has a self signed certificate. When I do the request with curl it looks like this and it returns the correct values:

curl -G -k -H 'Accept: application/json' -H "Authorization: Bearer ${AuthoToken}" https://123.123.123.123:xx/api/users

The AuthoToken is stored in an environment variable.

Ho can I implement this in my Qt Application? I tried around for several hours with QNetworkRequest and QSslSocket, but somehow I cannot figure out how to get it working. The certificate of the server looks something like this. I copied it into a cert.pem file.

The request should return a JSON Object which I can process in my application.

openSSL seem to work. When I call:

qDebug() << "openSSL Version:" << QSslSocket::sslLibraryBuildVersionString();

I get the following output:

openSSL Version: "OpenSSL 1.1.1c  28 May 2019"

Thanks for your help

SGaist

Hi,

What exact error are you getting from the socket ?

Infinity

That is my test applikation:

MainWindow::MainWindow(QWidget *parent) :
    QMainWindow(parent),
    ui(new Ui::MainWindow)
{
    ui->setupUi(this);

    qDebug() << "openSSL Version:" << QSslSocket::sslLibraryBuildVersionString();

    QSslSocket *socket = new QSslSocket(this);
    connect(socket, SIGNAL(encrypted()), this, SLOT(ready()));

    QString certPath = "/home/xyz/src/qtsrc-5.13/socket/cert.pem.txt";
    QSslCertificate certificate = getCertificate(certPath);
    QList<QSslCertificate> certificates;
    certificates << certificate;

    socket->addCaCertificate(certificate);

    QSslConfiguration config = socket->sslConfiguration();
    QList<QSslCertificate> sockeCertificates = config.caCertificates();
    qDebug() << "Number of Certificates" << sockeCertificates.size();
    qDebug() << "isNull:" << sockeCertificates.at(0).isNull();
    qDebug() << "isSelfSigned:" << sockeCertificates.at(0).isSelfSigned();

    /*
    config.setCaCertificates(certificates);
    socket->setSslConfiguration(config);
    */

    socket->connectToHostEncrypted("1.1.1.1", 1163);
    if (!socket->waitForEncrypted()) {
        qDebug() << "Socket Error:" << socket->errorString();
    }

    socket->write("GET / HTTP/1.0\r\n\r\n");
    while (socket->waitForReadyRead())
        qDebug() << socket->readAll().data();
}

MainWindow::~MainWindow()
{
    delete ui;
}

void MainWindow::ready()
{
    qDebug() << "Ready";
}

QSslCertificate MainWindow::getCertificate(const QString filePath)
{
    QFile certFile(filePath);

    QByteArray certArray;
    if (certFile.open(QIODevice::ReadOnly | QIODevice::Text)) {
        while (!certFile.atEnd()) {
            QByteArray line = certFile.readLine().trimmed();
            certArray.append(line);
        }
    }

    return QSslCertificate(certArray);

}

And the is the output:

openSSL Version: "OpenSSL 1.1.1c  28 May 2019"
Number of Certificates 1
isNull: true
isSelfSigned: false
Socket Error: "Der Name des Hosts ist keiner aus der Liste der für dieses Zertifikat gültigen Hosts"

I'm not quite sure how to setup the certificate which I got from the server.