Hi Helmut, that's ok. I will add a hint in the GUI, too.
I also moved your stuff to the top of the bugs/feature page, to make it more visible. Oliver Am 16.10.2015 um 09:14 schrieb Helmut Schmidt: > Dears, > > I understand that there is a wish for a full-featured-all-inclusive > windows installer package including the security related libraries such > as SSL. > > As stated before, I personally will not provide that. > The reasons are various, including the following but not necessarily > complete: > 1.) If a company like digia providing Qt with lawyers at hand for > consulting and if necessary defending them at court comes to the > conclusion that there are legal issues or uncertainties > [http://doc.qt.io/qt-5/ssl.html], how can I come to a different conclusion? > I don't want to take a risk for an adventure where only othes have the > advantage. Sorry. > 2.) I take security seriously. Also the security of the users installing > the windows binaries. And I think that the illusion of having security > in a specific fields while having not is worse than knowing to have no > security. A colleague at work who is deeper in this topic recently > explained me that all kinds of security risks that you could even > imagine but will never be used because they are too complicated are > actually used nowadays. > Based on that it feels irresponsible for me just to download a SSL > binary somewhere from the internet and redistribute it without have a > decent control how this library has been created. > 3.) Even if I would ignore my concerns from 1.) and do the laborious > task of compiling SSL by myself to have full traceability I could never > guarantee that I would be able to be aware of and fix any security hole > in a timely manner. > > What I did and what I can offer for mitigation: > 1.) I have extended the Wiki page > https://bitbucket.org/maproom/qmapshack/wiki/BugFeatures with > information on that topic including possible workarounds. This should > help users to help themselves. Feel free to extend and polish this. > 2.) I can provide in future the basic QMS package for Windows as it > looks before creating the installer (e.g. as in > https://bitbucket.org/huirad/test/downloads/QMapShack_Install_Windows64bit__1.3.1.post.1337.Qt542.7z). > After unzipping, this is fully functional based on the current feature > set (i.e. without SSL support). > Based on that some other volunteer who less shares my above concerns > could step in and repackage this by adding the missing libraries and > then creating an installer package. > > Have a good day, > > Helmut > > > Am 15.10.2015 um 20:15 schrieb Oliver Eichler: >> Looks like due to regulations concerning encryption technology Windows >> binaries of Qt are not shipped with the OpenSSL libraries included. >> Pretty pointless if you consider the fact that you can download that >> stuff from every corner of the Net. >> >> curl comes in quite handy if you want to load WMS maps via GDAL. >> >> I would suggest to add those libraries to the binary blob for Windows. >> >> Oliver >> >> Am Mittwoch, 14. Oktober 2015, 22:54:07 schrieb Pierre Baldensperger: >> >> > Amazing but true. >> >> > No need for all the gisinternals GDAL... >> >> > Just download a Windows OpenSSL package and copy the 2 DLLs libeay32.dll >> >> > and ssleay32.dll to QMS home directory. For me curl is not needed. >> >> > >> >> > I used this OpenSSL package (but there may be others): >> >> > >> >> > https://indy.fulgan.com/SSL/openssl-1.0.2d-x64_86-win64.zip >> >> > >> >> > It also works with Helmut's "official" 1.3.1 installer. >> >> > Thanks both Helmut and Oliver for your outstanding support! >> >> > >> >> > -Pierre. >> >> > >> >> > On 14/10/2015 21:08, Helmut Schmidt wrote: >> >> > > Good point Oliver, >> >> > > >> >> > > it seems to be sufficient to copy >> >> > > the following from bin directory in >> >> > > >> http://download.gisinternals.com/sdk/downloads/release-1800-x64-gdal-1-11- >> >> > > 1-mapserver-6-4-1.zip - curl directory and libcurl.dll [maybe even this >> >> > > can be left out] - libeay32.dll >> >> > > - ssleay32.dll >> >> > > >> >> > > Apparently Qt for Windows comes without that SSL stuff. >> >> > > >> >> > > Regards, >> >> > > >> >> > > Helmut >> >> > > >> >> > > Am 14.10.2015 um 16:41 schrieb Oliver Eichler: >> >> > >> Hi, >> >> > >> >> >> > >> the map objects for TMS and WMTS do not use GDAL at all. They use >> >> > >> QtNetwork. So if it fails on SSL connections it's because of >> missing SSL >> >> > >> support in Qt. Or probably some module handling the encryption is >> >> > >> missing. >> >> > >> >> >> > >> Oliver >> >> > >> >> > >> ---------------------------------------------------------------------------- >> >> > -- _______________________________________________ >> >> > Qlandkartegt-users mailing list >> >> > Qlandkartegt-users@lists.sourceforge.net >> >> > https://lists.sourceforge.net/lists/listinfo/qlandkartegt-users >> >> >> >> ------------------------------------------------------------------------------ >> >> >> >> _______________________________________________ >> Qlandkartegt-users mailing list >> Qlandkartegt-users@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/qlandkartegt-users >> > ------------------------------------------------------------------------------ > _______________________________________________ > Qlandkartegt-users mailing list > Qlandkartegt-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/qlandkartegt-users ------------------------------------------------------------------------------ _______________________________________________ Qlandkartegt-users mailing list Qlandkartegt-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/qlandkartegt-users
