[gdal-dev] ogr SSL errors on ubuntu

Jorge Gustavo Rocha jgr at osgeopt.pt
Thu Oct 20 15:00:53 PDT 2022


Hi Even,

Thank you so much for addressing this issue in so short time.

I've checked out your pr. It runs fine on my side.

Regards,

Jorge

On 20/10/22 20:58, Even Rouault wrote:
> Jorge,
> 
> Fix/workaround and links to related issues in 
> https://github.com/OSGeo/gdal/pull/6561
> 
> The curl binary manages to ignore that, but I couldn't easily spot 
> how/where in its source code.
> 
> The difference in errors are due to your curl versions using different 
> backends: gnutls vs openssl.
> 
> Even
> 
> Le 20/10/2022 à 20:35, Jorge Gustavo Rocha a écrit :
>> Hi,
>>
>> Lately, I have problems opening some datasets using ogr2ogr or ogrinfo 
>> due to SSL errors.
>>
>> I think others tools like curl had the same kind of problems, but now 
>> they seem to work well.
>>
>> Problems with ogr
>> =================
>>
>> Example (GDAL 3.6.0dev-f033e1fa1e, released 2022/08/04):
>>
>> ogrinfo 
>> 'https://wssig3.azores.gov.pt/geoserver/ows?service=WFS&version=2.0.0&request=GetFeature&typename=ge:GE.Borehole&outputFormat=application/json&EXCEPTIONS=application/json&srsname=EPSG:5013'
>>
>> ERROR 1: OpenSSL SSL_read: error:0A000126:SSL routines::unexpected eof 
>> while reading, errno 0
>>
>> Example (GDAL 3.4.3, released 2022/04/22):
>>
>> ogrinfo 
>> 'https://wssig3.azores.gov.pt/geoserver/ows?service=WFS&version=2.0.0&request=GetFeature&typename=ge:GE.Borehole&outputFormat=application/json&EXCEPTIONS=application/json&srsname=EPSG:5013'
>>
>> ERROR 1: GnuTLS recv error (-110): The TLS connection was non-properly 
>> terminated.
>>
>> maybe related: https://github.com/openssl/openssl/issues/18574
>>
>> Has someone a nice workaround? Do we need to change ogr code to handle 
>> this?
>>
>> Regards,
>>
>> Jorge
> 

-- 
OSGeo Portugal
NIF: 509588190
email: geral at osgeopt.pt
https://www.osgeopt.pt/

Próximo evento: SASIG 2017, 20 a 22 de novembro, Porto
Mais informações: http://osgeopt.pt/sasig2017/


More information about the gdal-dev mailing list