<html>
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Hi,<br>
<br>
I am glad to see the following improvement in the latest
1.11-release:<br>
<br>
<blockquote type="cite">
<pre wrap="">MapProxy now uses CA certificates provided by your system if you use Python >=2.7.9 or >=3.4.
The ``ssl_no_cert_checks`` option was broken with these Python versions. This is now fixed.
The ``ssl_ca_certs`` option is still available for older systems, or for custom CA certificates.</pre>
</blockquote>
<br>
It sounds like it will solve my problem. :-)<br>
<br>
Thanks,<br>
Roman<br>
<br>
<br>
<div class="moz-cite-prefix">Am 27.09.2017 um 17:59 schrieb Roman
Woessner:<br>
</div>
<blockquote type="cite"
cite="mid:d1dfabec1b984a6982774a8306ea50a9@disy.net">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
<div id="divtagdefaultwrapper" dir="ltr" style="font-size:12pt;
color:#000000; font-family:Calibri,Arial,Helvetica,sans-serif">
<p>Hi,</p>
<p><br>
</p>
<p>we use Mapproxy (1.10.0) with an OSM-TileServer source
accessible by HTTPS.</p>
<p>The tileservers SSL certificate is self-signed.</p>
<p><br>
</p>
<p>For this case, the Mapproxy documentation tells us...</p>
<div><br>
</div>
<div>"If you want to use SSL but do not need certificate
verification, then you can disable it with the
ssl_no_cert_checks option. You can also disable this check on
a source level, see WMS source options."<br>
</div>
<div><br>
</div>
<div>Therefore our configuration includes...<br>
"http:<br>
ssl_no_cert_checks: True"</div>
<div>... on the "globals"-level.</div>
<div><br>
</div>
<div>This has the effect, that Mapproxy successfully initializes
without a cert verification error.</div>
<div>But we still get the following error, as soon as Mapproxy
tries to connect to its tileserver source:</div>
<div><br>
</div>
<div>Could not verify connection to URL:
<a class="moz-txt-link-rfc2396E" href="https://our.tileserver/0/0/0.png">"https://our.tileserver/0/0/0.png"</a>: [SSL:
CERTIFICATE_VERIFY_FAILED] certificate ...<br>
</div>
<div><br>
It seems that the config parameter "<span>ssl_no_cert_checks</span>"
does not have any effect here.</div>
<div><br>
</div>
<div>Can you help us? Is there anythin we have not considered?</div>
<div><br>
</div>
<div>Roman<br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
MapProxy mailing list
<a class="moz-txt-link-abbreviated" href="mailto:MapProxy@lists.osgeo.org">MapProxy@lists.osgeo.org</a>
<a class="moz-txt-link-freetext" href="https://lists.osgeo.org/mailman/listinfo/mapproxy">https://lists.osgeo.org/mailman/listinfo/mapproxy</a></pre>
</blockquote>
</body>
</html>