[Certificate] How can I import/read the client/ intermediate certificate

[horoma]

Hi, everyone,

I know qt has API to manage the CA certificate, but I do not find any API to handle the manage the client/ intermediate certificates.
Does anyone has implement the import/ read the client/ intermediate certificate? Please give me advise. Thank you very much!

[ChrisW67]

QSslSocket::setLocalCertificate() sets the client certificate for those occasions it is required.

I would guess that intermediate CA certificates should be placed in the CA certificate store. They are checked recursively up to a limited depth (See QSslSocket::setPeerVerifyDepth()) although unlimited by default.

[horoma]

QSslSocket::setLocalCertificate() sets the client certificate for those occasions it is required.

I would guess that intermediate CA certificates should be placed in the CA certificate store. They are checked recursively up to a limited depth (See QSslSocket::setPeerVerifyDepth()) although unlimited by default.

Thank you very much. I guess the local certiciate is client certificate. But I find that qt do not support .p12 format of certificate.

[ChrisW67]

Then use a tool to convert the PKCS12 file to PEM format. OpenSSL will do this for you with something like:

openssl pkcs12 -in cred.p12 -out certkey.pem -nodes -clcerts

openssl pkcs12 -in cred.p12 -out certkey.pem -nodes -clcerts

To copy to clipboard, switch view to plain text mode