libcommuni icon indicating copy to clipboard operation
libcommuni copied to clipboard

Verify ssl peer certificates

Open ManiacTwister opened this issue 8 years ago • 0 comments

Hello,

Currently the ssl certificate aren't verified. In my opinion you should change this behaviour because only if the peer certificate is verified the connection can be secure. As a first step, the sslsockets verifymode should be changed to QSslSocket::VerifyPeer.

Ideally there should also be a way to specify ca certificates and fingerprints on a per server basis.

ManiacTwister avatar Apr 12 '16 03:04 ManiacTwister