Ssl: Copy the on-demand cert loading bool from default config
authorDebian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org>
Tue, 21 May 2024 07:53:43 +0000 (10:53 +0300)
committerDmitry Shachnev <mitya57@debian.org>
Tue, 21 May 2024 07:53:43 +0000 (10:53 +0300)
commit0ca22ae751baed187914d65e6d7d350de9bc97d5
treec048e948b4e76015a4cfe7df5d95c8c8b595aa1e
parent6ce34a9d903d1fe36037492d0c62f0a568d04ccc
Ssl: Copy the on-demand cert loading bool from default config

Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=57ba6260c0801055
Last-Update: 2023-06-08

Otherwise individual sockets will still load system certificates when
a chain doesn't match against the configured CA certificates.
That's not intended behavior, since specifically setting the CA
certificates means you don't want the system certificates to be used.

This is potentially a breaking change because now, if you ever add a
CA to the default config, it will disable loading system certificates
on demand for all sockets. And the only way to re-enable it is to
create a null-QSslConfiguration and set it as the new default.

Gbp-Pq: Name CVE-2023-34410.diff
src/network/ssl/qsslsocket.cpp