aboutsummaryrefslogtreecommitdiffstats
path: root/src/qmlnetwork/ssl/qqmlsslconfiguration.cpp
Commit message (Collapse)AuthorAgeFilesLines
* Deprecate QQmlSslConfiguration::sslOptions propertyIvan Solovev2025-07-301-0/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | The property has two major issues: * it is out of sync with the underlying m_configuration * it does not allow to disable an SSL option once it was enabled Fixing the behavior is considered dangerous, because it affects the default SSL options, and so potentially affects the application security. As a result, it was decided to deprecate this property and introduce a new one instead of it. Move the QML tests of the deprecated property into a separate TestCase and enable it conditionally based on the value of QT_REMOVAL_QT7_DEPRECATED_SINCE(6, 11) macro. This requires to use QUICK_TEST_MAIN_WITH_SETUP() macro and introduce a custom Setup class to pass the proper value from C++ to QML. [ChangeLog][QQmlNetwork][Deprecation Notices] Deprecated the sslOptions property of sslConfiguration/sslDtlsConfiguration. Use the new sslOptionFlags property instead. Fixes: QTBUG-137900 Change-Id: I7cd559e32475272fa77ae9dbf735d70371755725 Reviewed-by: Mårten Nordheim <marten.nordheim@qt.io> Reviewed-by: Fabian Kosmale <fabian.kosmale@qt.io>
* QQmlSslConfiguration: introduce sslOptionFlags propertyIvan Solovev2025-07-301-0/+18
| | | | | | | | | | | | | | It should replace the sslOptions property which is out-of-sync with the underlying configuration and does not allow to reset an option once it is set. [ChangeLog][QQmlNetwork][sslConfiguration/sslDtlsConfiguration] Added an sslOptionFlags property. Use it instead of the sslOptions property. Task-number: QTBUG-137900 Change-Id: Ic2ce9059514742b597ea2d9a187fadcef1f4cc36 Reviewed-by: Mårten Nordheim <marten.nordheim@qt.io> Reviewed-by: Fabian Kosmale <fabian.kosmale@qt.io>
* QQmlSslConfiguration: add some internal checksIvan Solovev2025-06-241-0/+2
| | | | | | | | | | | | | | | The setSslOptionsList() and setCiphersList() methods are supposed to be called when m_sslOptions and m_ciphers containers are not initialized. Add Q_ASSERT() checks to both of them to protect against potential misuse in future. Amends b44f466621868128672163d3044e508debd57601. Pick-to: 6.10 6.9 6.8 Change-Id: Id915ba2879b862312b9918211d2a0a168f6584a2 Reviewed-by: Tatiana Borisova <tatiana.borisova@qt.io>
* Mark src/qmlnetwork as security-significantIvan Solovev2025-06-241-0/+1
| | | | | | | | | | | | | | The classes in this subdirectory simply expose some of the QtNetwork classes to QML, and mostly act like proxies. The only interesting cases are related to reading ssl certificates from files, but in this case we just take the user-provided file path and use it in QFile without any preprocessing. So it's QFile's responsibility to parse the path. Fixes: QTBUG-136204 Pick-to: 6.10 6.9 6.8 Change-Id: Ia62fb8f7c8539c6461236b4c519a9371d7a03871 Reviewed-by: Mårten Nordheim <marten.nordheim@qt.io>
* Add QSslConfiguration and QSslKey to the QtNetwork QML moduleTatiana Borisova2023-10-051-0/+175
Task-number: QTBUG-115056 Change-Id: I14d55e9ef58f0e45c177f39e74ac15c3035e3342 Reviewed-by: Timur Pocheptsov <timur.pocheptsov@qt.io> Reviewed-by: Qt CI Bot <qt_ci_bot@qt-project.org>