<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Thanks. I used wireshark to trace the session and it appears that QGIS is attempting to make the connection with TLSv1 which I think is at least part of the problem.<div class=""><br class=""></div><div class="">Can either of you tell me what protocol and cipher suites you’re using? what OS you’re running on? Is there anyway to force QGIS to use a different protocol?</div><div class=""><br class=""></div><div class="">Thanks!</div><div class=""><br class=""></div><div class="">—john</div><div class=""><br class=""><div><blockquote type="cite" class=""><div class="">On Jan 4, 2017, at 1:59 AM, Pasquale Di Donato <<a href="mailto:pasquale.didonato@gmail.com" class="">pasquale.didonato@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class="">Hi John,<div class=""><br class=""></div><div class="">I can access your service too. Using QGIS 2.14.8.</div><div class="">Maybe you have an issue with a proxy?</div><div class=""><br class=""></div><div class="">Pasquale</div></div><div class="gmail_extra"><br class=""><div class="gmail_quote">On Wed, Jan 4, 2017 at 12:57 AM, Jorge Gustavo Rocha <span dir="ltr" class=""><<a href="mailto:jgr@di.uminho.pt" target="_blank" class="">jgr@di.uminho.pt</a>></span> wrote:<br class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi John,<br class="">
<br class="">
I've added your WMS service and it works without any problem. I've just added the url and the connect works. The capabilities are displayed.<br class="">
<br class="">
You can check the print screen [1] with your https WMS layer.<br class="">
<br class="">
I'm using QGIS 2.18.2 on Ubuntu. Which OS are you using?<br class="">
<br class="">
Regards,<br class="">
<br class="">
Jorge Gustavo<br class="">
<br class="">
[1] <a href="http://webgis.di.uminho.pt/~jgr/wms%20with%20https.png" rel="noreferrer" target="_blank" class="">http://webgis.di.uminho.pt/~jg<wbr class="">r/wms%20with%20https.png</a><span class=""><br class="">
<br class="">
<br class="">
Às 17:42 de <a href="tel:03-01-2017" value="+3903012017" target="_blank" class="">03-01-2017</a>, John Cartwright escreveu:<br class="">
</span><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">
Thanks for your reply Luigi! To be clear, the WMS service that I’m<br class="">
trying to connect to does not require a username/password but is only<br class="">
available via https. The server (<a href="https://maps.ngdc.noaa.gov/" rel="noreferrer" target="_blank" class="">https://maps.ngdc.noaa.gov</a>) has a<br class="">
valid CA certificate. I tried adding a SSL Server Configuration<br class="">
(preferences -> authentication -> Manage Certificates -> Server) and<br class="">
while the entry appears to be valid, I still get the SSL Handshake error<br class="">
when trying add a WMS layer.<br class="">
<br class="">
Any further ideas? Here’s the actual URL I’m trying to add:<br class="">
<br class="">
<a href="https://maps.ngdc.noaa.gov/arcgis/services/gebco08_hillshade/MapServer/WMSServer?request=GetCapabilities&service=WMS" rel="noreferrer" target="_blank" class="">https://maps.ngdc.noaa.gov/arc<wbr class="">gis/services/gebco08_hillshade<wbr class="">/MapServer/WMSServer?request=<wbr class="">GetCapabilities&service=WMS</a><br class="">
<br class="">
Thanks again for your help!<br class="">
<br class="">
—john<br class="">
<br class="">
<br class="">
</span><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">
On Jan 2, 2017, at 1:52 AM, Luigi Pirelli <<a href="mailto:luipir@gmail.com" target="_blank" class="">luipir@gmail.com</a><br class=""></span><div class=""><div class="h5">
<mailto:<a href="mailto:luipir@gmail.com" target="_blank" class="">luipir@gmail.com</a>>> wrote:<br class="">
<br class="">
Hi John<br class="">
<br class="">
SSL is managed storing credentials using the QGIS Authentication<br class="">
Manager that store credentials in the same way as Firefox, in a master<br class="">
pwd crypted store in your $home/.qgis2/qgis-auth.db.<br class="">
You should managed credentials using Settings->options->authenticat<wbr class="">ion.<br class="">
<br class="">
QGIS uses OpenSSL => and specifically can import different king of<br class="">
credential method (using plugins => can be expanded). De default auth<br class="">
method installed are listed in the documentation:<br class="">
<a href="https://docs.qgis.org/2.14/en/docs/user_manual/auth_system/auth_overview.html" rel="noreferrer" target="_blank" class="">https://docs.qgis.org/2.14/en/<wbr class="">docs/user_manual/auth_system/a<wbr class="">uth_overview.html</a><br class="">
<br class="">
what is you auth method? can you explain the workflow you followed to<br class="">
store and use your credentials?<br class="">
<br class="">
regards<br class="">
Luigi Pirelli<br class="">
<br class="">
******************************<wbr class="">******************************<wbr class="">******************************<wbr class="">********<br class="">
* Boundless QGIS Support/Development: lpirelli AT boundlessgeo DOT com<br class="">
* LinkedIn: <a href="https://www.linkedin.com/in/luigipirelli" rel="noreferrer" target="_blank" class="">https://www.linkedin.com/in/lu<wbr class="">igipirelli</a><br class="">
* Stackexchange: <a href="http://gis.stackexchange.com/users/19667/luigi-pirelli" rel="noreferrer" target="_blank" class="">http://gis.stackexchange.com/u<wbr class="">sers/19667/luigi-pirelli</a><br class="">
* GitHub: <a href="https://github.com/luipir" rel="noreferrer" target="_blank" class="">https://github.com/luipir</a><br class="">
* Mastering QGIS 2nd Edition:<br class="">
*<br class="">
<a href="https://www.packtpub.com/big-data-and-business-intelligence/mastering-qgis-second-edition" rel="noreferrer" target="_blank" class="">https://www.packtpub.com/big-d<wbr class="">ata-and-business-intelligence/<wbr class="">mastering-qgis-second-edition</a><br class="">
******************************<wbr class="">******************************<wbr class="">******************************<wbr class="">********<br class="">
<br class="">
<br class="">
On 29 December 2016 at 22:38, John Cartwright<br class="">
<<a href="mailto:john.c.cartwright@comcast.net" target="_blank" class="">john.c.cartwright@comcast.net</a><wbr class="">> wrote:<br class="">
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hello All,<br class="">
<br class="">
I’m trying to use a WMS service over https and get the following<br class="">
error when trying to connect:<br class="">
<br class="">
Failed to download capabilities:<br class="">
Download of capabilities failed: SSL handshake failed<br class="">
<br class="">
The URL works fine in a browser though. I’m guessing that QGIS and<br class="">
the server are not able to agree on a cipher suite. Can anyone tell<br class="">
me what ciphers QGIS supports or any way to get more insight into the<br class="">
underlying problem?<br class="">
<br class="">
QGIS is version 2.18.2.<br class="">
<br class="">
Thanks!<br class="">
<br class="">
—john<br class="">
<br class="">
______________________________<wbr class="">_________________<br class="">
Qgis-user mailing list<br class="">
<a href="mailto:Qgis-user@lists.osgeo.org" target="_blank" class="">Qgis-user@lists.osgeo.org</a><br class="">
List info: <a href="http://lists.osgeo.org/mailman/listinfo/qgis-user" rel="noreferrer" target="_blank" class="">http://lists.osgeo.org/mailman<wbr class="">/listinfo/qgis-user</a><br class="">
Unsubscribe: <a href="http://lists.osgeo.org/mailman/listinfo/qgis-user" rel="noreferrer" target="_blank" class="">http://lists.osgeo.org/mailman<wbr class="">/listinfo/qgis-user</a><br class="">
</blockquote></div></div></blockquote><div class=""><div class="h5">
<br class="">
<br class="">
<br class="">
______________________________<wbr class="">_________________<br class="">
Qgis-user mailing list<br class="">
<a href="mailto:Qgis-user@lists.osgeo.org" target="_blank" class="">Qgis-user@lists.osgeo.org</a><br class="">
List info: <a href="http://lists.osgeo.org/mailman/listinfo/qgis-user" rel="noreferrer" target="_blank" class="">http://lists.osgeo.org/mailman<wbr class="">/listinfo/qgis-user</a><br class="">
Unsubscribe: <a href="http://lists.osgeo.org/mailman/listinfo/qgis-user" rel="noreferrer" target="_blank" class="">http://lists.osgeo.org/mailman<wbr class="">/listinfo/qgis-user</a><br class="">
<br class="">
</div></div></blockquote>
<br class="">
J. Gustavo<span class="HOEnZb"><font color="#888888" class=""><br class="">
-- <br class="">
Jorge Gustavo Rocha<br class="">
Departamento de Informática<br class="">
Universidade do Minho<br class="">
4710-057 Braga<br class="">
Tel: <a href="tel:%2B351%20253604480" value="+351253604480" target="_blank" class="">+351 253604480</a><br class="">
Fax: <a href="tel:%2B351%20253604471" value="+351253604471" target="_blank" class="">+351 253604471</a><br class="">
Móvel: <a href="tel:%2B351%20910333888" value="+351910333888" target="_blank" class="">+351 910333888</a><br class="">
skype: nabocudnosor</font></span><div class="HOEnZb"><div class="h5"><br class="">
<br class="">
______________________________<wbr class="">_________________<br class="">
Qgis-user mailing list<br class="">
<a href="mailto:Qgis-user@lists.osgeo.org" target="_blank" class="">Qgis-user@lists.osgeo.org</a><br class="">
List info: <a href="http://lists.osgeo.org/mailman/listinfo/qgis-user" rel="noreferrer" target="_blank" class="">http://lists.osgeo.org/mailman<wbr class="">/listinfo/qgis-user</a><br class="">
Unsubscribe: <a href="http://lists.osgeo.org/mailman/listinfo/qgis-user" rel="noreferrer" target="_blank" class="">http://lists.osgeo.org/mailman<wbr class="">/listinfo/qgis-user</a></div></div></blockquote></div><br class=""></div>
_______________________________________________<br class="">Qgis-user mailing list<br class=""><a href="mailto:Qgis-user@lists.osgeo.org" class="">Qgis-user@lists.osgeo.org</a><br class="">List info: http://lists.osgeo.org/mailman/listinfo/qgis-user<br class="">Unsubscribe: http://lists.osgeo.org/mailman/listinfo/qgis-user</div></blockquote></div><br class=""></div></body></html>