QDtls: respect pre-set verification errors

That's actually how ignoreVerificationErrors (and QSslSocket::ignoreSslErrors)
are used to set the expected/known verification errors before handshake.
Auto-test updated too.

Change-Id: I9c700302d81ddb383a4a750fafd594373fb38ace
Reviewed-by: Edward Welbourne <edward.welbourne@qt.io>
Reviewed-by: Mårten Nordheim <marten.nordheim@qt.io>

1 files changed, 27 insertions, 0 deletions

diff --git a/tests/auto/network/ssl/qdtls/tst_qdtls.cpp b/tests/auto/network/ssl/qdtls/tst_qdtls.cpp
index 571d341126..60ab87d6f2 100644
--- a/tests/auto/network/ssl/qdtls/tst_qdtls.cpp
+++ b/tests/auto/network/ssl/qdtls/tst_qdtls.cpp
@@ -41,6 +41,7 @@
 
 #include <QtCore/qcryptographichash.h>
 #include <QtCore/qbytearray.h>
+#include <QtCore/qvector.h>
 #include <QtCore/qstring.h>
 #include <QtCore/qobject.h>
 
@@ -99,6 +100,7 @@ private slots:
     void protocolVersionMatching();
     void verificationErrors_data();
     void verificationErrors();
+    void ignoreExpectedErrors();
     void verifyServerCertificate_data();
     void verifyServerCertificate();
     void verifyClientCertificate_data();
@@ -685,6 +687,31 @@ void tst_QDtls::verificationErrors()
     }
 }
 
+void tst_QDtls::ignoreExpectedErrors()
+{
+    connectHandshakeReadingSlots();
+
+    auto serverConfig = defaultServerConfig;
+    serverConfig.setPrivateKey(serverKeySS);
+    serverConfig.setLocalCertificate(selfSignedCert);
+    QVERIFY(serverCrypto->setDtlsConfiguration(serverConfig));
+
+    const QVector<QSslError> expectedErrors = {{QSslError::HostNameMismatch, selfSignedCert},
+                                               {QSslError::SelfSignedCertificate, selfSignedCert}};
+
+    clientCrypto->ignoreVerificationErrors(expectedErrors);
+    QVERIFY(clientCrypto->setPeer(serverAddress, serverPort));
+    QVERIFY(clientCrypto->doHandshake(&clientSocket));
+
+    testLoop.enterLoopMSecs(handshakeTimeoutMS);
+
+    QVERIFY(!testLoop.timeout());
+
+    QDTLS_VERIFY_HANDSHAKE_SUCCESS(serverCrypto);
+    QCOMPARE(clientCrypto->handshakeState(), QDtls::HandshakeComplete);
+    QVERIFY(clientCrypto->isConnectionEncrypted());
+}
+
 void tst_QDtls::verifyServerCertificate_data()
 {
     QTest::addColumn<QSslSocket::PeerVerifyMode>("verifyMode");