Does the 5.3.1 tab browser example include openssl? is it possible to add it for the example.



  • I built the tab browser example for 5.3.1 on a mac. It is giving ssl errors on some sites, like macys. Does it include openssl?

    If not how can I add it and rebuild to see if that fixes the problem?


  • Moderators

    Hi,

    If you used the precompiled packages, Qt searches your system for OpenSSL. You just need to install OpenSSL and make sure it's visible in your PATH; you don't need to recompile anything.

    Note: Qt cannot distribute OpenSSL due to legal restrictions on cryptographic software.



  • I'm on a mac. Openssl appears to be installed on the system.
    How do I make sure it's visible in the PATH and is that the QT tab browser path, or the QT Creator Path.

    Here's the output about openssl from terminal

    $ openssl version -a
    OpenSSL 0.9.8za 5 Jun 2014
    built on: Sep 9 2014
    platform: darwin64-x86_64-llvm
    options: bn(64,64) md2(int) rc4(ptr,char) des(idx,cisc,16,int) blowfish(idx)
    compiler: -arch x86_64 -fmessage-length=0 -pipe -Wno-trigraphs -fpascal-strings -fasm-blocks -O3 -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DMD32_REG_T=int -DOPENSSL_NO_IDEA -DOPENSSL_PIC -DOPENSSL_THREADS -DZLIB -mmacosx-version-min=10.6
    OPENSSLDIR: "/System/Library/OpenSSL"


  • Moderators

    Hmm... ok, you've got it installed on your system. It's a rather old version with known vulnerabilities, but think it should still work.

    Are you able to use that browser to view a web page via HTTPS? (e.g. use that browser to navigate to https://wiki.qt.io ) -- if this works, then your issue isn't that OpenSSL isn't found. Please post the full error message.



  • No errors opening that site you gave me. But many ssl errors on macys.com trying to buy anything through guest checkout. So I was assuming that it was an openssl problem, because the error comes from an openssl section in the code.

    SSL Errors:
    https://asoo.estara.com....

    The root certificate of the certificate chain is self signed and untrusted. Do you want to ignore these errors for this host.

    Are these errors actually coming up because of macys site and would come up in any browser, or are they coming up because macys is confused by the qtwebkit implementation?

    Is there something I can try to get rid of these errors?
    I am new to QT, and the project I am trying to fix was built in 5.3.1 using qtwebkit.



  • I messed around a little and now I get ssl errors even on opening the browser.
    I think if it can't find ssl it is supposed to give a warning, but this looks like it finds it but then it doesn't work.

    How can I fix this. I'm on a mac os x 10.10.5 Yosemite.

    Last login: Wed Oct 14 16:13:59 on ttys000
    dans-Mac-Pro:~ dan$ openssl version -a
    OpenSSL 0.9.8zg 14 July 2015
    built on: Jul 16 2015
    platform: darwin64-x86_64-llvm
    options: bn(64,64) md2(int) rc4(ptr,char) des(idx,cisc,16,int) blowfish(idx)
    compiler: -arch x86_64 -fmessage-length=0 -pipe -Wno-trigraphs -fpascal-strings -fasm-blocks -O3 -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DMD32_REG_T=int -DOPENSSL_NO_IDEA -DOPENSSL_PIC -DOPENSSL_THREADS -DZLIB -mmacosx-version-min=10.6
    OPENSSLDIR: "/System/Library/OpenSSL"
    dans-Mac-Pro:~ dan$


  • Moderators

    @dansav said:

    I messed around a little and now I get ssl errors even on opening the browser.

    What did you do when you messed around? Undo that first.

    But many ssl errors on macys.com trying to buy anything through guest checkout. So I was assuming that it was an openssl problem, because the error comes from an openssl section in the code.

    It's not a problem with finding OpenSSL. It looks like OpenSSL is working fine for you.

    Instead, the problem is that the macy's site is using a self-signed certificate, and WebKit is rejecting it because it self-signed certificates are less secure.

    I'm afraid I don't have experience with web security, so I suggest you ask around on how to handle these self-signed certificates.



  • I reposted this because I had qtwebengine tab browser mixed up with qtwebkit tab browser, so some of my statements were incorrect. I do get errors on the https site you said to try.


Log in to reply
 

Looks like your connection to Qt Forum was lost, please wait while we try to reconnect.