[mapserver-users] WMS Layer with secure http url

[Michael Smith]

Alexandre,

What you need is the servers root certificate added to your libcurl certs.
Its failing on validating the servers ssl certificate.

The curl-config should list your cert directory and then you can add your
cert there and it should validate.

Mike


-- 
Michael Smith
RSGIS Center
ERDC - CRREL
US Army Corps of Engineers





On 5/5/09  7:02 PM, "Alexandre Dube" <adube at mapgears.com> wrote:

> Hi list,
> 
>   I'd like to know if it's possible to have a WMS layer linked to a
> secure http url (https).  Currently, I see this error in log :
> 
> === LOG ===
> 
> [Tue May  5 18:53:01 2009].853725 msHTTPExecuteRequests(): HTTP request
> error. HTTP: request failed with curl error code 60 (SSL certificate
> problem, verify that the CA cert is OK. Details:
> error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate
> verify failed) for
> https://foo.com/cgi-bin/mapserv?map=map&LAYERS=Layer&REQUEST=GetMap&SERVICE=WM
> S&FORMAT=image/png&STYLES=&HEIGHT=482&VERSION=1.1.1&SRS=EPSG:900913&WIDTH=732&
> BBOX=-7977472.96139656,6196959.95818015,-7973217.53860244,6199762.02619485&TRA
> NSPARENT=TRUE&EXCEPTIONS=application/vnd.ogc.se_inimage
> [Tue May  5 18:53:01 2009].854421 msDrawWMSLayerLow(): WMS server error.
> WMS GetMap request failed for layer 'Layer' (Status -60: SSL certificate
> problem, verify that the CA cert is OK. Details:
> error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate
> verify failed).
> 
> ===========
> 
> If I try the url in a browser with cookies/cache emptied, the url ask a
> login/password ( which I know... ) so I guess the WMS layer is refused
> to access the url since it doesn't have the login/password.  Is there a
> way to accomplish this ?
> 
> Many thanks,