Dears,

I understand that there is a wish for a full-featured-all-inclusive 
windows installer package including the security related libraries such 
as SSL.

As stated before, I personally will not provide that.
The reasons are various, including the following but not necessarily 
complete:
1.) If a company like digia providing Qt with lawyers at hand for 
consulting and if necessary defending them at court comes to the 
conclusion that there are legal issues or uncertainties 
[http://doc.qt.io/qt-5/ssl.html], how can I come to a different conclusion?
I don't want to take a risk for an adventure where only othes have the 
advantage. Sorry.
2.) I take security seriously. Also the security of the users installing 
the windows binaries. And I think that the illusion of having security 
in a specific fields while having not is worse than knowing to have no 
security. A colleague at work who is deeper in this topic recently 
explained me that all kinds of security risks that you could even 
imagine but will never be used because they are too complicated are 
actually used nowadays.
Based on that it feels irresponsible for me just to download a SSL 
binary somewhere from the internet and redistribute it without have a 
decent control how this library has been created.
3.) Even if I would ignore my concerns from 1.) and do the laborious 
task of compiling SSL by myself to have full traceability I could never 
guarantee that I would be able to be aware of and fix any security hole 
in a timely manner.

What I did and what I can offer for mitigation:
1.) I have extended the Wiki page 
https://bitbucket.org/maproom/qmapshack/wiki/BugFeatures with 
information on that topic including possible workarounds. This should 
help users to help themselves. Feel free to extend and polish this.
2.) I can provide in future the basic QMS package for Windows as it 
looks before creating the installer (e.g. as in 
https://bitbucket.org/huirad/test/downloads/QMapShack_Install_Windows64bit__1.3.1.post.1337.Qt542.7z).
After unzipping, this is fully functional based on the current feature 
set (i.e. without SSL support).
Based on that some other volunteer who less shares my above concerns 
could step in and repackage this by adding the missing libraries and 
then creating an installer package.

Have a good day,

Helmut


Am 15.10.2015 um 20:15 schrieb Oliver Eichler:
> Looks like due to regulations concerning encryption technology Windows
> binaries of Qt are not shipped with the OpenSSL libraries included.
> Pretty pointless if you consider the fact that you can download that
> stuff from every corner of the Net.
>
> curl comes in quite handy if you want to load WMS maps via GDAL.
>
> I would suggest to add those libraries to the binary blob for Windows.
>
> Oliver
>
> Am Mittwoch, 14. Oktober 2015, 22:54:07 schrieb Pierre Baldensperger:
>
>  > Amazing but true.
>
>  > No need for all the gisinternals GDAL...
>
>  > Just download a Windows OpenSSL package and copy the 2 DLLs libeay32.dll
>
>  > and ssleay32.dll to QMS home directory. For me curl is not needed.
>
>  >
>
>  > I used this OpenSSL package (but there may be others):
>
>  >
>
>  > https://indy.fulgan.com/SSL/openssl-1.0.2d-x64_86-win64.zip
>
>  >
>
>  > It also works with Helmut's "official" 1.3.1 installer.
>
>  > Thanks both Helmut and Oliver for your outstanding support!
>
>  >
>
>  > -Pierre.
>
>  >
>
>  > On 14/10/2015 21:08, Helmut Schmidt wrote:
>
>  > > Good point Oliver,
>
>  > >
>
>  > > it seems to be sufficient to copy
>
>  > > the following from bin directory in
>
>  > >
> http://download.gisinternals.com/sdk/downloads/release-1800-x64-gdal-1-11-
>
>  > > 1-mapserver-6-4-1.zip - curl directory and libcurl.dll [maybe even this
>
>  > > can be left out] - libeay32.dll
>
>  > > - ssleay32.dll
>
>  > >
>
>  > > Apparently Qt for Windows comes without that SSL stuff.
>
>  > >
>
>  > > Regards,
>
>  > >
>
>  > > Helmut
>
>  > >
>
>  > > Am 14.10.2015 um 16:41 schrieb Oliver Eichler:
>
>  > >> Hi,
>
>  > >>
>
>  > >> the map objects for TMS and WMTS do not use GDAL at all. They use
>
>  > >> QtNetwork. So if it fails on SSL connections it's because of
> missing SSL
>
>  > >> support in Qt. Or probably some module handling the encryption is
>
>  > >> missing.
>
>  > >>
>
>  > >> Oliver
>
>  >
>
>  >
> ----------------------------------------------------------------------------
>
>  > -- _______________________________________________
>
>  > Qlandkartegt-users mailing list
>
>  > [email protected]
>
>  > https://lists.sourceforge.net/lists/listinfo/qlandkartegt-users
>
>
>
> ------------------------------------------------------------------------------
>
>
>
> _______________________________________________
> Qlandkartegt-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/qlandkartegt-users
>

------------------------------------------------------------------------------
_______________________________________________
Qlandkartegt-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/qlandkartegt-users

Reply via email to