<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">I’m attempting to hit a WMS using HTTP, not HTTPS, but I run into the following SSL error
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">HTTP: request failed with curl error code 60 (SSL certificate problem: unable to get local issuer certificate)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I can get around this error by downloading a CA bundle file and setting the CURL_CA_BUNDLE environment variable to point to it, but why is a CA bundle file necessary when not even using SSL (hitting a WMS using HTTP, not HTTPS)? Does anyone
know a workaround that wouldn’t require deploying a CA bundle file to my servers and setting an environment variable to point to it?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’m currently using the stable release of MSVC 2017 x64 package downloaded from GISInternals -
<a href="http://www.gisinternals.com/release.php">http://www.gisinternals.com/release.php</a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">A sample mapfile looks like this<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">MAP<o:p></o:p></p>
<p class="MsoNormal"> NAME USA1<o:p></o:p></p>
<p class="MsoNormal"> STATUS ON<o:p></o:p></p>
<p class="MsoNormal"> IMAGETYPE PNG8<o:p></o:p></p>
<p class="MsoNormal"> RESOLUTION 72<o:p></o:p></p>
<p class="MsoNormal"> IMAGECOLOR 255 255 255<o:p></o:p></p>
<p class="MsoNormal"> UNITS METERS<o:p></o:p></p>
<p class="MsoNormal"> PROJECTION "proj=lcc" "lat_1=20" "lat_2=60" "lat_0=40" "lon_0=-112.52116185" "x_0=0" "y_0=0" "ellps=GRS80" "units=m" "datum=NAD83" END<o:p></o:p></p>
<p class="MsoNormal"> SIZE 1500 1500<o:p></o:p></p>
<p class="MsoNormal"> EXTENT -45292.7219576058 780481.616003812 45290.5126012127 871065.05991903<o:p></o:p></p>
<p class="MsoNormal"> LAYER<o:p></o:p></p>
<p class="MsoNormal"> NAME "WMS_DRG"<o:p></o:p></p>
<p class="MsoNormal"> TYPE RASTER<o:p></o:p></p>
<p class="MsoNormal"> STATUS ON<o:p></o:p></p>
<p class="MsoNormal"> PROJECTION "proj=longlat" "ellps=GRS80" "datum=NAD83" "no_defs" END<o:p></o:p></p>
<p class="MsoNormal"> CONNECTION "http://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WmsServer?"<o:p></o:p></p>
<p class="MsoNormal"> CONNECTIONTYPE WMS<o:p></o:p></p>
<p class="MsoNormal"> METADATA<o:p></o:p></p>
<p class="MsoNormal"> "wms_srs" "EPSG:4326"<o:p></o:p></p>
<p class="MsoNormal"> "wms_name" "0"<o:p></o:p></p>
<p class="MsoNormal"> "wms_server_version" "1.1.1"<o:p></o:p></p>
<p class="MsoNormal"> "wms_format" "image/png"<o:p></o:p></p>
<p class="MsoNormal"> END<o:p></o:p></p>
<p class="MsoNormal"> END<o:p></o:p></p>
<p class="MsoNormal">END<o:p></o:p></p>
</div>
<br>
******************* PLEASE NOTE ******************* <br>
This message, along with any attachments, is for the designated recipient(s) only and may contain privileged, proprietary, or otherwise confidential information. If this message has reached you in error, kindly destroy it without review and notify the sender
immediately. Any other use of such misdirected e-mail by you is prohibited. Where allowed by local law, electronic communications with Zurich and its affiliates, including e-mail and instant messaging (including content), may be scanned for the purposes of
information security and assessment of internal compliance with company policy.
</body>
</html>