From 2bace7a88868722f6f7a3bd0fde4507e39283a85 Mon Sep 17 00:00:00 2001 From: Timur Pocheptsov Date: Wed, 20 Mar 2024 15:45:32 +0100 Subject: [PATCH] Clarify the priority in selecting TLS backends MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit In case a custom TLS plugin is provided, the order can be unclear (next after OpenSSL is either Schannel on Windows, or Secure Transport on Darwin, then a custom plugin, if any, and the last one is 'cert-only'). Pick-to: 6.5 6.2 Fixes: QTBUG-123092 Change-Id: I02bcc1fa5448f64846d561a72b2522af3286c66c Reviewed-by: Mårten Nordheim (cherry picked from commit 128645d02338029858dd3e03defeff9f16d80172) Reviewed-by: Qt Cherry-pick Bot (cherry picked from commit 8e0bb88d96374de4992944f05dc5ff8e5e82af6f) --- src/network/ssl/qsslsocket.cpp | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/src/network/ssl/qsslsocket.cpp b/src/network/ssl/qsslsocket.cpp index 4d8bda3dd76..649495ca35c 100644 --- a/src/network/ssl/qsslsocket.cpp +++ b/src/network/ssl/qsslsocket.cpp @@ -1538,7 +1538,12 @@ QList QSslSocket::availableBackends() from the list of available backends. \note When selecting a default backend implicitly, QSslSocket prefers - the OpenSSL backend if available. + the OpenSSL backend if available. If it's not available, the Schannel backend + is implicitly selected on Windows, and Secure Transport on Darwin platforms. + Failing these, if a custom TLS backend is found, it is used. + If no other backend is found, the "certificate only" backend is selected. + For more information about TLS plugins, please see + \l {Enabling and Disabling SSL Support when Building Qt from Source}. \sa setActiveBackend(), availableBackends() */