OpenSSL1.0 issues with Qt6.5.5
-
Hello,
Our desktop application, which utilizes certificates for mTLS communication over HTTPS, recently underwent an upgrade from Qt5.6.3 to Qt6.5.5. In the previous version, we relied on the libeay32.dll and ssleay32.dll libraries. However, we discovered that the Qt6.5.5 application build does not load these libraries. Instead, it recognizes openssl 3 libraries, but unfortunately, our certificates are not compatible with openssl 3. Are there any options available to maintain backward compatibility and keep using openssl 1.0 libraries?
I came across this link:
https://www.qt.io/blog/moving-to-openssl-3-in-binary-builds-starting-from-qt-6.5-beta-2
Do you know what it means by "use your own builds based on OpenSSL 1.x", does qt6 need to be build using the openssl 1.x libraries?Thank you!
Harmeet -
Hello,
Our desktop application, which utilizes certificates for mTLS communication over HTTPS, recently underwent an upgrade from Qt5.6.3 to Qt6.5.5. In the previous version, we relied on the libeay32.dll and ssleay32.dll libraries. However, we discovered that the Qt6.5.5 application build does not load these libraries. Instead, it recognizes openssl 3 libraries, but unfortunately, our certificates are not compatible with openssl 3. Are there any options available to maintain backward compatibility and keep using openssl 1.0 libraries?
I came across this link:
https://www.qt.io/blog/moving-to-openssl-3-in-binary-builds-starting-from-qt-6.5-beta-2
Do you know what it means by "use your own builds based on OpenSSL 1.x", does qt6 need to be build using the openssl 1.x libraries?Thank you!
Harmeet@Harmeet said in OpenSSL1.0 issues with Qt6.5.5:
unfortunately, our certificates are not compatible with openssl 3.
In what way?
Do you know what it means by "use your own builds based on OpenSSL 1.x", does qt6 need to be build using the openssl 1.x libraries?
The pre-compiled binary distributions of Qt 6.5+ provided by the online installer use OpenSSL 3 libraries (They will try to load these at run-time).
Building the Qt 6 libraries requires OpenSSL 1.1.1 or later. If you must use OpenSSL 1.1.1 then you can build your own Qt libraries against that version of OpenSSL (See Enabling and Disabling SSL Support when Building Qt from Source).There is no OpenSSL 1.0.x support at all.
The low-level interfaces in OpenSSL will be going away over time, and support for the older version will eventually be retired. It strikes me that you are better off putting effort into fixing any incompatibility with OpenSSL 3 than putting effort into downgrading Qt.
