Qt-Security-QSslConfigurationSetPeerVerifyMode

Check QSslConfiguration::setPeerVerifyMode

Required inputs: IR

The method void QSslConfiguration::setPeerVerifyMode(QSslSocket::PeerVerifyMode mode) is used to set the peer verification mode of the QSslSocket. The default mode is QSslSocket::autoVerifyPeer, which automatically chooses the correct mode for client or server code. That is, if the QSslSocket is in server mode, the peer will be queried (QSslSocket::QueryPeer) without affecting the handshake. If the QSslSocket is in client mode, the handshake will be aborted, should the peer not be able to provide a certificate. This should not be changed, since it can allow man-in-the-middle attacks to go unnoticed.

Possible Messages

Key	Text	Severity	Disabled
suspicious_call	Found suspicious call to {}.	None	False

Options

• This rule shares the following common options: exclude_in_macros, exclude_messages_in_system_headers, excludes, extend_exclude_to_macro_invocations, includes, justification_checker, languages, post_processing, provider, report_at, severity

• The following places define options that affect this rule: Stylechecks, Analysis-GlobalOptions

• This rule has no individual options.