Even,<br><br>Thanks for your reply.<br>I understand the need for certificates but using certificates for a server that doesn't require it makes it hard to access that server.<br>If I need to explain to my users to follow Tamas his blogspot to access the server of their choice they go crazy.<br>
<br>I've tried your suggestion and patched port/cpl_http.cpp.<br>But I keep this error: "Protocol https not supported or disabled in libcurl"<br><br>I really feel I need to enable something else in GDAL but I have no idea what.<br>
As a workaround I copy curl.exe as well and use it to get my WFS though https.<br>But of course that is not a solution. I'm still wondering if anybody has some experience with GDAL + WFS driver and https.<br><br>Thanks,<br>
<br>Paul<br><br><br><div class="gmail_quote">2011/5/23 Even Rouault <span dir="ltr"><<a href="mailto:even.rouault@mines-paris.org">even.rouault@mines-paris.org</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Paul,<br>
<br>
as Tamas suggested, I'd *strongly* encourage you to study<br>
<a href="http://szekerest.blogspot.com/2010/12/daily-built-binary-packages-for.html" target="_blank">http://szekerest.blogspot.com/2010/12/daily-built-binary-packages-for.html</a> ,<br>
particularly section 4.<br>
<br>
The error you get is a sign that the certificate isn't recognized by curl and<br>
the fact you need the -k flag of curl.exe just instructs it to bypass the<br>
standard security checks.<br>
<br>
Or, you could try to patch port/cpl_http.cpp and add the following line around<br>
line 299. This should have the same effect of the -k flag.<br>
<br>
curl_easy_setopt(http_handle, CURLOPT_SSL_VERIFYHOST, FALSE);<br>
<br>
The UNSAFESSL option of the WMS driver basically does the above.<br>
<div><div></div><div class="h5"><br>
><br>
> Thanks,<br>
><br>
> Paul<br>
><br>
><br>
> 2011/5/22 Jeff McKenna <<a href="mailto:jmckenna@gatewaygeomatics.com">jmckenna@gatewaygeomatics.com</a>><br>
><br>
> > On 11-05-19 2:32 PM, Even Rouault wrote:<br>
> ><br>
> >> Le jeudi 19 mai 2011 10:22:08, Paul Meems a écrit :<br>
> >><br>
> >>> Hi List,<br>
> >>><br>
> >>> I'm still working on Win7 with VS2008 and I try to add libcurl to GDAL so<br>
> >>> we can use the new WFS driver.<br>
> >>> Two days ago I already succeeded in compile just libcurl and add it to<br>
> >>> GDAL. But then the WFS driver doesn't work with https links.<br>
> >>><br>
> >>> So yesterday I've been trying for almost 10 hours to get libcurl, openssl<br>
> >>> and libssh to compile together.<br>
> >>><br>
> >><br>
> > I should also note that MS4W includes SSL support, and comes with Apache<br>
> > configured and ready-to-go pointing to the necessary files. Some notes on<br>
> > this exist in the included README:<br>
> ><br>
><br>
<a href="http://www.maptools.org/ms4w/index.phtml?page=README_INSTALL.html#g-certificates-for-https-with-wms-wfs-servers" target="_blank">http://www.maptools.org/ms4w/index.phtml?page=README_INSTALL.html#g-certificates-for-https-with-wms-wfs-servers</a><br>
> ><br>
> > -jeff<br>
> ><br>
> ><br>
> > --<br>
> > Jeff McKenna<br>
> > MapServer Consulting and Training Services<br>
> > <a href="http://www.gatewaygeomatics.com/" target="_blank">http://www.gatewaygeomatics.com/</a><br>
> ><br>
> ><br>
> ><br>
> > _______________________________________________<br>
> > gdal-dev mailing list<br>
> > <a href="mailto:gdal-dev@lists.osgeo.org">gdal-dev@lists.osgeo.org</a><br>
> > <a href="http://lists.osgeo.org/mailman/listinfo/gdal-dev" target="_blank">http://lists.osgeo.org/mailman/listinfo/gdal-dev</a><br>
> ><br>
><br>
<br>
<br>
</div></div></blockquote></div><br>