[gdal-dev] Re: Gdal_translate, WMS source and own certificate

[Even Rouault]

Adam,

I also think it would be better if we had the same options for the WMS and WCS 
drivers. I'm wondering if there's a reason for not turning off SSL verification 
by default. I guess the SSL peer verification makes mostly sense for a web 
browser where you could access some rogue site asking for your credit card 
number, but for a online image service whose URL you must write in a XML file, 
it's probably unnecessary and we could disable it unconditionnaly ?

Best regards,

Even

Le mardi 21 décembre 2010 14:16:31, Jukka Rahkonen a écrit :
> Adam Nowacki <nowak <at> xpam.de> writes:
> > Can you test http://trac.osgeo.org/gdal/changeset/21304/trunk ? Add
> > <UnsafeSSL>true</UnsafeSSL> inside <GDAL_WMS>.
> 
> Yes, it works. However, the ticked appeared to be a duplicate for #3510,
> and the attached patch is solving the problem as well. You, the developers
> need to choose which fix to take. The #3510 fix includes also a way to
> give username and password with WMS_XML but on the other hand it would
> make GDAL WMS driver to never check the certificates. GDAL WCS skips
> certificates already and for the end user it would be nice if WMS and WCS
> drivers behaves in a similar way, what ever it is.
> 
> -Jukka Rahkonen-
> 
> _______________________________________________
> gdal-dev mailing list
> gdal-dev at lists.osgeo.org
> http://lists.osgeo.org/mailman/listinfo/gdal-dev