Re: [SailfishDevel] [Not TLS] How to use self-signed certificates transparently in a https POST/GET request with a QT Quick application?

2015-08-17 Thread juice
Thank you Jonni, Thomas & Graham for prompt and insightful answers. I think I need to explain a bit more about my planned application, to show what the security model is and why I would like to accept https connection without checking for certificate validity. I am writing a dog-tracing utility

Re: [SailfishDevel] [Not TLS] How to use self-signed certificates transparently in a https POST/GET request with a QT Quick application?

2015-08-17 Thread Graham Cobb
On 17/08/15 20:56, juice wrote: > The authenticity of the server is not so important that it definitely > requires > a true certificate, it is just enough that the communication between the > client > and the server is encrypted. You didn't ask this, so feel free to ignore this comment... But be

Re: [SailfishDevel] How to use self-signed certificates transparently in a https POST/GET request with a QT Quick application?

2015-08-17 Thread yurumi
Hi, you could also set a custom QQmlNetworkAccessManagerFactory for Qt Quick that creates a QNetworkAccessManager that handles SSL errors by ignoring them: http://www.it-digin.com/blog/?p=261 https://forum.qt.io/topic/16990/ignoring-ssl-errors Cheers, Thomas On 17.08.2015 22:07, Jonni Raini

Re: [SailfishDevel] How to use self-signed certificates transparently in a https POST/GET request with a QT Quick application?

2015-08-17 Thread Jonni Rainisto
Hi, Really bad for security, but you can for example in main() before creating any connections add these 3 lines of code, which will make application to skip all verifications, so any self signed and invalid certs are also accepted. QSslConfiguration config = QSslConfiguration::defaultConfigur

[SailfishDevel] How to use self-signed certificates transparently in a https POST/GET request with a QT Quick application?

2015-08-17 Thread juice
This might be a FAQ or otherwice so self-evident question it just shows up my stupidity but I really could not find any pointers on how to do this. Scenario: I am writing a client application that periodically polls for data from a web service, located on a server that may either have a real