Re: [Interest] SSL & Let's Encrypt certificate expiration

2021-10-06 Thread Christophe THOMAS
Hello So without the flag OpenSSL would use another store ? One located locally or embedded inside OpenSSL? Christophe > Le 7 oct. 2021 à 01:37, Thorsten Glaser a écrit : > > On Wed, 6 Oct 2021, Hamish Moffatt via Interest wrote: > >> The OpenSSL blog writes that this unfortunately doesn't

[Interest] Problems with Qt 5.15.6 on windows when discovering details of a Bluetooth LE service

2021-10-06 Thread Michael Heiser | SYSTRONIK Elektronik und Systemtechnik GmbH
Hello Specialists, I have problems regarding crashes or application hangs on windows 10 with QT 5.15.6 and Bluetooth LE and our own peripherals. We have investigated this on old and also on newer pc hardware. When doing a lowEnergyService discoverDetails() the CPU on each core goes for seconds to

Re: [Interest] SSL & Let's Encrypt certificate expiration

2021-10-06 Thread Thorsten Glaser
On Wed, 6 Oct 2021, Hamish Moffatt via Interest wrote: > The OpenSSL blog writes that this unfortunately doesn't happen with > 1.0.2 though - it sees the expired root and gives up. > https://www.openssl.org/blog/blog/2021/09/13/LetsEncryptRootCertExpire/ http://www.mirbsd.org/cvs.cgi/src/lib/li

Re: [Interest] SSL & Let's Encrypt certificate expiration

2021-10-06 Thread Thorsten Glaser
On Wed, 6 Oct 2021, Thiago Macieira wrote: > On Wednesday, 6 October 2021 09:55:21 PDT Thorsten Glaser wrote: > > On my own servers I’ve adapted my dehydrated hook to remove the > > faulty intermediate, but of course this depends on server admins > > to DTRT, plus it’ll apparently cause more troub

Re: [Interest] SSL & Let's Encrypt certificate expiration

2021-10-06 Thread Hamish Moffatt via Interest
On 7/10/21 02:53, Thiago Macieira wrote: On Wednesday, 6 October 2021 02:41:39 PDT Hamish Moffatt via Interest wrote: I upgraded to 1.0.2u and added the X1 root directly to Qt. Now the application works. But the instructions from OpenSSL say to also remove the X3 root which I'm not able to do (i

Re: [Interest] SSL & Let's Encrypt certificate expiration

2021-10-06 Thread Hamish Moffatt via Interest
On 7/10/21 02:48, Thiago Macieira wrote: On Tuesday, 5 October 2021 17:03:43 PDT Hamish Moffatt via Interest wrote: We have had some difficulty here with Windows 10's "lazy loading" of the root certificates. Unless users have been to a site that uses the ISRG X1 root certificate using Chrome or

Re: [Interest] SSL & Let's Encrypt certificate expiration

2021-10-06 Thread Thiago Macieira
On Wednesday, 6 October 2021 09:55:21 PDT Thorsten Glaser wrote: > On my own servers I’ve adapted my dehydrated hook to remove the > faulty intermediate, but of course this depends on server admins > to DTRT, plus it’ll apparently cause more trouble for Android… Can you share the change? I also us

Re: [Interest] SSL & Let's Encrypt certificate expiration

2021-10-06 Thread maitai
I vaguely understand that, but that is not my question. My question is why forcing the loading of systemCACertificates() works. --Philippe Le 06-10-2021 20:28, Thorsten Glaser a écrit : On Wed, 6 Oct 2021, maitai wrote: old Ubuntu 16.04 VM. ca-certificates (20160104ubuntu1) does not have t

Re: [Interest] SSL & Let's Encrypt certificate expiration

2021-10-06 Thread Thorsten Glaser
On Wed, 6 Oct 2021, maitai wrote: > old Ubuntu 16.04 VM. ca-certificates (20160104ubuntu1) does not have the ISRG X1 root: (xenial)# ls -l /etc/ssl/certs/6187b673.0 /etc/ssl/certs/4042bcee.0 ls: cannot access '/etc/ssl/certs/6187b673.0': No such file or directory ls: cannot access '/etc/ssl/cert

Re: [Interest] SSL & Let's Encrypt certificate expiration

2021-10-06 Thread maitai
OK, this is a SSL/TLS specialists debate and I am not, I just have simple questions. What I see: On Linux 16.04/Qt 5.11.3/SSL 1.0.2g If I force the loading of systemCa into the default SSL configuration all is OK QSslConfiguration def = QSslConfiguration::defaultConfiguration(); def.

Re: [Interest] SSL & Let's Encrypt certificate expiration

2021-10-06 Thread Thorsten Glaser
On Wed, 6 Oct 2021, Thiago Macieira wrote: > If OpenSSL has any path to a still-valid root certificate, then it can ignore > the others. That's one way of dealing with expirations: you add a new link in > the chain that will continue to be valid when the other path(s) aren't. You > can also pru

Re: [Interest] SSL & Let's Encrypt certificate expiration

2021-10-06 Thread Thiago Macieira
On Wednesday, 6 October 2021 02:41:39 PDT Hamish Moffatt via Interest wrote: > I upgraded to 1.0.2u and added the X1 root directly to Qt. Now the > application works. But the instructions from OpenSSL say to also remove > the X3 root which I'm not able to do (it's loaded from Windows), so I am > pu

Re: [Interest] SSL & Let's Encrypt certificate expiration

2021-10-06 Thread Thiago Macieira
On Tuesday, 5 October 2021 17:03:43 PDT Hamish Moffatt via Interest wrote: > We have had some difficulty here with Windows 10's "lazy loading" of the > root certificates. Unless users have been to a site that uses the ISRG > X1 root certificate using Chrome or Edge, they do not have this > certific

Re: [Interest] QtCreator 5.0.1 bug

2021-10-06 Thread Mike Chinander
QtCreator 5.0.2 is supposed to fix this. https://code.qt.io/cgit/qt-creator/qt-creator.git/tree/dist/changes-5.0.2.md?h=5.0 On Wed, Oct 6, 2021 at 9:51 AM Nuno Santos wrote: > Hi, > > Is just me or we can’t cancel builds on the latest QtCreator? > > When I choose to cancel a build, the build sto

[Interest] QtCreator 5.0.1 bug

2021-10-06 Thread Nuno Santos
Hi, Is just me or we can’t cancel builds on the latest QtCreator? When I choose to cancel a build, the build stops, but I can’t trigger a new build unless I close QtCreator and start it over again. Is anyone else having this problem? Regards, Nuno

Re: [Interest] SSL & Let's Encrypt certificate expiration

2021-10-06 Thread Hamish Moffatt via Interest
On 6/10/21 20:02, Christophe Thomas wrote: Thank you for the hint, I found this link that talks about it: https://community.letsencrypt.org/t/isrg-root-lazy-loading-problem-missing-from-random-updated-windows-10-versions/141550/2 We've also tested on an old linux (ubuntu 16), when trying to

Re: [Interest] SSL & Let's Encrypt certificate expiration

2021-10-06 Thread Christophe Thomas
Thank you for the hint, I found this link that talks about it: https://community.letsencrypt.org/t/isrg-root-lazy-loading-problem-missing-from-random-updated-windows-10-versions/141550/2 We've also tested on an old linux (ubuntu 16), when trying to connect one test website, openssl is not finaliz