Qt Maintenance SSL Handshake Error

A.v.O

SSL Handshake problem on Windows 10

Problem

I got this problem suddenly. It was working a few weeks ago.
Probably Microsoft got rid of some certificates and the ftp mirror has none of the new and needed certificates installed yet, is my guess.

Log file

[0] Arguments: P:\Qt\MaintenanceTool.exe
[29] Operations sanity check succeeded.
[30] Reading Qt Account settings from disk: "C:/Users/user/AppData/Roaming/Qt/qtaccount.ini"
[30] Opensource installation detected: "P:/Qt"
[30] QtAccount information:
[30] Login completed: false
[30] Email: "????????????????"
[30] Total number of licenses: 0
[30] Account type: 1
[31] Language: en-US
[10987] Login completed to Qt Account: "??????"
[11080] Saving licenses to file: "C:/Users/user/AppData/Roaming/Qt/qtlicenses.ini"
[11081] Saving Qt Account settings to file: "C:/Users/user/AppData/Roaming/Qt/qtaccount.ini"
[11141] "Installation preconditions ok, installation can proceed!" [ "success" ]
[20576] Preparing meta information download...
[25207] Retrieving meta information from remote repository...
[26733] Warning: SSL error: "The issuer certificate of a locally looked up certificate could not be found"
[27174] Warning: Network error while downloading 'https://ftp1.nluug.nl/languages/qt/online/qtsdkrepository/windows_x86/android/qt6_602_x86_64/2021-02-25-1258_meta.7z': SSL handshake failed.

Opening the same URL in a browser on the same system is no problem.
This probably because the browser brings its own SSL certificates.

Is There a Solution?

Can I select a different mirror server to download from?
This is probably not possible anymore since (https://github.com/JKSH/QtSdkRepoChooser)

AxelVienna

Your server (ftp1.nluug.nl) holds a valid ssl certificate issued by let's encrypt, which should not cause the local lookup error at [26733]. I have had a similar error once and the troublemaker was a firewall / proxy environment that didn't like end-to-end encrypted downloads.

A.v.O

@AxelVienna The Windows I'm running it on was originally running on my hardware box as Windows 7 then upgraded to Windows 10 and next virtualized it onto my Linux server where it had several Windows 10 major updates and is up-to-date.

I moved to Linux many years ago because I did not trust Microsoft anymore with my data.
To many bad experiences with breaking harddisk data integrity.

Maybe all the upgrading did this Windows not any good since another fresh Windows 10 installed dual boot system did the update without any problems.
I copied the Qt directory onto the VM and now the update on the WM has no problem any more.

It is just weird. I did not even restart the VM.
Another good reason not to be dependent on a Microsoft product :)

fcarney

Just encountered this error with Windows 10. I made sure I updated so all root certs are good.

I get these warnings/errors and cannot update meta data:

[9484] Preparing meta information download...
[21549] Retrieving meta information from remote repository...
[22620] Warning: SSL error: "The issuer certificate of a locally looked up certificate could not be found"
[22858] Warning: Network error while downloading 'https://mirrors.ocf.berkeley.edu/qt/online/qtsdkrepository/windows_x86/android/qt6_624_x86_64/2022-03-14-1203_meta.7z': SSL handshake failed.

I navigated to https://mirrors.ocf.berkeley.edu and the browser did not complain about certs.

The version of MaintenanceTool is 4.1.1 built in May 24, 2021.

I don't see any command line options to update the certs the MaintenanceTool actually uses.

I thought it might be firewall, but it is not blocking anything.
I can run the maintenancetool just fine in Linux on the same network.

So this is some Windows 10 issue, or maintenancetool issue on Windows.

I looked at reinstalling Qt, but the issue is I have several kits installed and I don't want to mess that up. I don't know if those kits are still available through the Qt installer anymore.

fcarney

I just downloaded the online installer and it has the exact same error. All I can think is it something wrong with my machine then.

fcarney

I downloaded virtual box on the same Windows 10 machine.
I created new virtual box computer and installed latest Windows 10 on the computer.
When it tries to get meta data it fails with: "Cannot retrieve remote tree."
I get past the login and it recognizes my account. So I really don't understand what the issue could be.

fcarney

Had a virtual box on my Linux machine that the MaintenanceTool actually works on.
I have windows 10 in a computer on that virtual box.
Downloaded the latest online installer.
Login works.
Meta data fails with the same ssl error.

So the maintenance tool only seems to work on Linux where I am at.
Is there any way to change the repos it is attempting to use?

SGaist

Hi,

You can change the mirror following the information here.

fcarney

Woah, this online installer fails to get meta data:
qt-unified-windows-x64-4.4.2-online.exe

But I have this old online installer laying around and it logs in and retrieves the meta data:
qt-unified-windows-x86-3.0.6-online.exe
My only guess is this might be using different repos.

Something is really really wrong with the Windows download options.
Anyone with Windows 10 using the online installer have this issue?

fcarney

@SGaist
Using one of the examples got me going: maintenancetool(.exe) --mirror http://qt.mirror.constant.com