Qt 4.7 SSL error : "The certificate has expired”

Joshy Abraham

We compiled the Qt code using the OpenSSL libraries. But we are not able to load the HTTPS webpages. The SSL Error handler is throwing “The certificate has expired” exception. we used http://orkut.com to test the SSL issues.

What was happening before we recompiled Qt source?

Following errors, when we tried to launch HTTPS urls
QSslSocket: cannot call unresolved function SSLv3_client_method QSslSocket: cannot call unresolved function SSL_CTX_new QSslSocket: cannot call unresolved function SSL_library_init QSslSocket: cannot call unresolved function ERR_get_error QSslSocket: cannot call unresolved function ERR_error_string

What we did?

Download and install Win32 OpenSSL v1.0.0d Light
Open VS2008 command prompt
Navigate to “C:\Qt\4.7.1” 4) configure.exe -debug-and-release -webkit -openssl -I C:\OpenSSL-Win32\Include -L C:\OpenSSL-Win32\Lib
nmake

Error After compiling with openSSL dll

when we try to load SSL url using webview , we get the following error
“The certificate has expired”
We handled the networkAccessManager sslErrors(QNetworkReply*,QList) event which showed as the “certificate expired” error.
We are unclear about what additional settings are needed to fix this issue

ZapB

Has the certificate actually expired? Obvious question I know but worth checking.

sanjaysampat

I am not sure, if the following is valid or security problem.
In the "networkAccessManager sslErrors(QNetworkReply*,QList) event", we called the QNetworkReply method "reply->ignoreSslErrors(expectedSslErrors);". We have added the error "QSslError::CertificateExpired" in the 'expectedSslErrors'. It ignored the error, and we were able to load the https page.

ZapB

Well, what are the dates on the certificate?

privet

you'll need two openSSL libs. These are on win32:
ssleay32.dll
LIBEAY32.dll

AND

you can ignore invalid certificates:

@
connect(ui->mywebview->page()->networkAccessManager(),
SIGNAL(sslErrors(QNetworkReply*, const QList<QSslError> & )),
this,
SLOT(sslErrorHandler(QNetworkReply*, const QList<QSslError> & )));

void MainWindow::sslErrorHandler(QNetworkReply* qnr, const QList<QSslError> & errlist)
{
qnr->ignoreSslErrors();
}
@

[EDIT: code formatting, please wrap in @-tags, Volker]