<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Arial,Helvetica,sans-serif">
<p>Hi,</p>
<p><br>
</p>
<p>we use Mapproxy (1.10.0) with an OSM-TileServer source accessible by HTTPS.</p>
<p>The tileservers SSL certificate is self-signed.</p>
<p><br>
</p>
<p>For this case, the Mapproxy documentation tells us...</p>
<p></p>
<div><br>
</div>
<div>"If you want to use SSL but do not need certificate verification, then you can disable it with the ssl_no_cert_checks option. You can also disable this check on a source level, see WMS source options."<br>
</div>
<div><br>
</div>
<div>Therefore our configuration includes...<br>
"http:<br>
ssl_no_cert_checks: True"</div>
<div>... on the "globals"-level.</div>
<div><br>
</div>
<div>This has the effect, that Mapproxy successfully initializes without a cert verification error.</div>
<div>But we still get the following error, as soon as Mapproxy tries to connect to its tileserver source:</div>
<div><br>
</div>
<div>Could not verify connection to URL: "https://our.tileserver/0/0/0.png": [SSL: CERTIFICATE_VERIFY_FAILED] certificate ...<br>
</div>
<div><br>
It seems that the config parameter "<span>ssl_no_cert_checks</span>" does not have any effect here.</div>
<div><br>
</div>
<div>Can you help us? Is there anythin we have not considered?</div>
<div><br>
</div>
<div>Roman<br>
</div>
</div>
</body>
</html>