stream.setVersion(QDataStream::Qt_4_2);
quint32 magic = Protocol::magic;
- if (_account.useSsl())
- magic |= Protocol::Encryption;
+ magic |= Protocol::Encryption;
magic |= Protocol::Compression;
stream << magic;
connect(_peer, &RemotePeer::transferProgress, this, &ClientAuthHandler::transferProgress);
// The legacy protocol enables SSL later, after registration
- if (!_account.useSsl() || _legacy)
+ if (_legacy)
startRegistration();
// otherwise, do it now
else
{
emit statusMessage(tr("Synchronizing to core..."));
- // useSsl will be ignored by non-legacy peers
- bool useSsl = false;
- useSsl = _account.useSsl();
-
- _peer->dispatch(Protocol::RegisterClient(Quassel::Features{}, Quassel::buildInfo().fancyVersionString, Quassel::buildInfo().commitDate, useSsl));
+ _peer->dispatch(Protocol::RegisterClient(Quassel::Features{}, Quassel::buildInfo().fancyVersionString, Quassel::buildInfo().commitDate));
}
void ClientAuthHandler::handle(const Protocol::ClientDenied& msg)
_peer->setFeatures(std::move(msg.features));
// The legacy protocol enables SSL at this point
- if (_legacy && _account.useSsl())
+ if (_legacy)
checkAndEnableSsl(msg.sslSupported);
else
onConnectionReady();
void ClientAuthHandler::checkAndEnableSsl(bool coreSupportsSsl)
{
CoreAccountSettings s;
- if (coreSupportsSsl && _account.useSsl()) {
+ if (coreSupportsSsl) {
// Make sure the warning is shown next time we don't have SSL in the core
s.setAccountValue("ShowNoCoreSslWarning", true);
- auto* sslSocket = qobject_cast<QSslSocket*>(socket());
- Q_ASSERT(sslSocket);
- connect(sslSocket, &QSslSocket::encrypted, this, &ClientAuthHandler::onSslSocketEncrypted);
- connect(sslSocket, selectOverload<const QList<QSslError>&>(&QSslSocket::sslErrors), this, &ClientAuthHandler::onSslErrors);
+ connect(socket(), &QSslSocket::encrypted, this, &ClientAuthHandler::onSslSocketEncrypted);
+ connect(socket(), selectOverload<const QList<QSslError>&>(&QSslSocket::sslErrors), this, &ClientAuthHandler::onSslErrors);
qDebug() << "Starting encryption...";
- sslSocket->flush();
- sslSocket->startClientEncryption();
+ socket()->flush();
+ socket()->startClientEncryption();
}
else {
if (s.accountValue("ShowNoCoreSslWarning", true).toBool()) {
void ClientAuthHandler::onSslErrors()
{
- auto* socket = qobject_cast<QSslSocket*>(sender());
- Q_ASSERT(socket);
-
CoreAccountSettings s;
QByteArray knownDigest = s.accountValue("SslCert").toByteArray();
ClientAuthHandler::DigestVersion knownDigestVersion = static_cast<ClientAuthHandler::DigestVersion>(
QByteArray calculatedDigest;
switch (knownDigestVersion) {
case ClientAuthHandler::DigestVersion::Md5:
- calculatedDigest = socket->peerCertificate().digest(QCryptographicHash::Md5);
+ calculatedDigest = socket()->peerCertificate().digest(QCryptographicHash::Md5);
break;
case ClientAuthHandler::DigestVersion::Sha2_512:
- calculatedDigest = socket->peerCertificate().digest(QCryptographicHash::Sha512);
+ calculatedDigest = socket()->peerCertificate().digest(QCryptographicHash::Sha512);
break;
default:
if (knownDigest != calculatedDigest) {
bool accepted = false;
bool permanently = false;
- emit handleSslErrors(socket, &accepted, &permanently);
+ emit handleSslErrors(socket(), &accepted, &permanently);
if (!accepted) {
requestDisconnect(tr("Unencrypted connection canceled"));
}
if (permanently) {
- s.setAccountValue("SslCert", socket->peerCertificate().digest(QCryptographicHash::Sha512));
+ s.setAccountValue("SslCert", socket()->peerCertificate().digest(QCryptographicHash::Sha512));
s.setAccountValue("SslCertDigestVersion", ClientAuthHandler::DigestVersion::Latest);
}
else {
}
}
else if (knownDigestVersion != ClientAuthHandler::DigestVersion::Latest) {
- s.setAccountValue("SslCert", socket->peerCertificate().digest(QCryptographicHash::Sha512));
+ s.setAccountValue("SslCert", socket()->peerCertificate().digest(QCryptographicHash::Sha512));
s.setAccountValue("SslCertDigestVersion", ClientAuthHandler::DigestVersion::Latest);
}
- socket->ignoreSslErrors();
+ socket()->ignoreSslErrors();
}