Dears, I understand that there is a wish for a full-featured-all-inclusive windows installer package including the security related libraries such as SSL.
As stated before, I personally will not provide that. The reasons are various, including the following but not necessarily complete: 1.) If a company like digia providing Qt with lawyers at hand for consulting and if necessary defending them at court comes to the conclusion that there are legal issues or uncertainties [http://doc.qt.io/qt-5/ssl.html], how can I come to a different conclusion? I don't want to take a risk for an adventure where only othes have the advantage. Sorry. 2.) I take security seriously. Also the security of the users installing the windows binaries. And I think that the illusion of having security in a specific fields while having not is worse than knowing to have no security. A colleague at work who is deeper in this topic recently explained me that all kinds of security risks that you could even imagine but will never be used because they are too complicated are actually used nowadays. Based on that it feels irresponsible for me just to download a SSL binary somewhere from the internet and redistribute it without have a decent control how this library has been created. 3.) Even if I would ignore my concerns from 1.) and do the laborious task of compiling SSL by myself to have full traceability I could never guarantee that I would be able to be aware of and fix any security hole in a timely manner. What I did and what I can offer for mitigation: 1.) I have extended the Wiki page https://bitbucket.org/maproom/qmapshack/wiki/BugFeatures with information on that topic including possible workarounds. This should help users to help themselves. Feel free to extend and polish this. 2.) I can provide in future the basic QMS package for Windows as it looks before creating the installer (e.g. as in https://bitbucket.org/huirad/test/downloads/QMapShack_Install_Windows64bit__1.3.1.post.1337.Qt542.7z). After unzipping, this is fully functional based on the current feature set (i.e. without SSL support). Based on that some other volunteer who less shares my above concerns could step in and repackage this by adding the missing libraries and then creating an installer package. Have a good day, Helmut Am 15.10.2015 um 20:15 schrieb Oliver Eichler: > Looks like due to regulations concerning encryption technology Windows > binaries of Qt are not shipped with the OpenSSL libraries included. > Pretty pointless if you consider the fact that you can download that > stuff from every corner of the Net. > > curl comes in quite handy if you want to load WMS maps via GDAL. > > I would suggest to add those libraries to the binary blob for Windows. > > Oliver > > Am Mittwoch, 14. Oktober 2015, 22:54:07 schrieb Pierre Baldensperger: > > > Amazing but true. > > > No need for all the gisinternals GDAL... > > > Just download a Windows OpenSSL package and copy the 2 DLLs libeay32.dll > > > and ssleay32.dll to QMS home directory. For me curl is not needed. > > > > > > I used this OpenSSL package (but there may be others): > > > > > > https://indy.fulgan.com/SSL/openssl-1.0.2d-x64_86-win64.zip > > > > > > It also works with Helmut's "official" 1.3.1 installer. > > > Thanks both Helmut and Oliver for your outstanding support! > > > > > > -Pierre. > > > > > > On 14/10/2015 21:08, Helmut Schmidt wrote: > > > > Good point Oliver, > > > > > > > > it seems to be sufficient to copy > > > > the following from bin directory in > > > > > http://download.gisinternals.com/sdk/downloads/release-1800-x64-gdal-1-11- > > > > 1-mapserver-6-4-1.zip - curl directory and libcurl.dll [maybe even this > > > > can be left out] - libeay32.dll > > > > - ssleay32.dll > > > > > > > > Apparently Qt for Windows comes without that SSL stuff. > > > > > > > > Regards, > > > > > > > > Helmut > > > > > > > > Am 14.10.2015 um 16:41 schrieb Oliver Eichler: > > > >> Hi, > > > >> > > > >> the map objects for TMS and WMTS do not use GDAL at all. They use > > > >> QtNetwork. So if it fails on SSL connections it's because of > missing SSL > > > >> support in Qt. Or probably some module handling the encryption is > > > >> missing. > > > >> > > > >> Oliver > > > > > > > ---------------------------------------------------------------------------- > > > -- _______________________________________________ > > > Qlandkartegt-users mailing list > > > [email protected] > > > https://lists.sourceforge.net/lists/listinfo/qlandkartegt-users > > > > ------------------------------------------------------------------------------ > > > > _______________________________________________ > Qlandkartegt-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/qlandkartegt-users > ------------------------------------------------------------------------------ _______________________________________________ Qlandkartegt-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/qlandkartegt-users
