Qt-Security-QSslSocketSetPeerVerifyMode

Check QSslSocket::setPeerVerifyMode

Required inputs: IR

The method QSslSocket::setPeerVerifyMode() of the Qt framework allows to set the mode used for verifying the peer's TLS certificate. This rule reports all calls to this method. The Qt framework automatically determines the best mode to use for the application. Setting the mode manually poses a security risk and should be avoided if possible.

Possible Messages

Key	Text	Severity	Disabled
suspicious_call	Found suspicious call to {}.	None	False

Options

• This rule shares the following common options: exclude_in_macros, exclude_messages_in_system_headers, excludes, extend_exclude_to_macro_invocations, includes, justification_checker, languages, post_processing, provider, report_at, severity

• The following places define options that affect this rule: Stylechecks, Analysis-GlobalOptions

• This rule has no individual options.