diff options
| author | Mårten Nordheim <marten.nordheim@qt.io> | 2020-09-30 14:44:11 +0200 |
|---|---|---|
| committer | Mårten Nordheim <marten.nordheim@qt.io> | 2020-10-14 15:58:16 +0200 |
| commit | 51faa0700d18b1235da791dff226faffeafa9f84 (patch) | |
| tree | 52233e43567b4805dae8889f54f8fb6e08d455c8 /src/network/ssl/qsslsocket_schannel_p.h | |
| parent | 844318f54aa3f8509c16941727cdc755cbea7f05 (diff) | |
Schannel: TLS1.3 support
It's not possible to connect to microsoft.com with Schannel TLS 1.3 for
some reason (also tested with Internet Explorer), but other sites work
fine. Must be something they have to iron out for later.
In my experience this needs a preview release of Windows. One of my
machines is opted into the dev channel of Windows where they enabled TLS
1.3 by default, and it works well in my tests except for the part above.
On my other machine, after enabling TLS 1.3 through the registry, I fail
to complete the handshake with any site. So around March/April next year
is when this code would activate for most people.
MinGW apparently defines NTDDI_VERSION as the one for Windows Server
2003, so it currently doesn't build the new TLS 1.3 code. In Qt (as a
project) we could consider setting this higher, but that's out of scope
for this patch!
Fixes: QTBUG-81294
Change-Id: If329959c3a30ecbfbb8c0d335cc39ccb6d012890
Reviewed-by: Timur Pocheptsov <timur.pocheptsov@qt.io>
Diffstat (limited to 'src/network/ssl/qsslsocket_schannel_p.h')
| -rw-r--r-- | src/network/ssl/qsslsocket_schannel_p.h | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/src/network/ssl/qsslsocket_schannel_p.h b/src/network/ssl/qsslsocket_schannel_p.h index fe29dadec0..57c8c75629 100644 --- a/src/network/ssl/qsslsocket_schannel_p.h +++ b/src/network/ssl/qsslsocket_schannel_p.h @@ -58,8 +58,11 @@ QT_REQUIRE_CONFIG(schannel); #include "qsslsocket_p.h" #define SECURITY_WIN32 +#define SCHANNEL_USE_BLACKLISTS 1 +#include <Winternl.h> // needed for UNICODE defines #include <security.h> #include <schnlsp.h> +#undef SCHANNEL_USE_BLACKLISTS #undef SECURITY_WIN32 QT_BEGIN_NAMESPACE |