[mapserver-users] WMS Layer with secure http url

Rahkonen Jukka Jukka.Rahkonen at mmmtike.fi
Tue May 5 21:19:56 PDT 2009


Hi,
When the certificate is OK the next thing to do is to change the connection URL so that it includes username and password. If I remember right the format is like https://username:password@foo.com/mapserv?....

-Jukka Rahkonen-



Michael Smith wrote:


Alexandre,

What you need is the servers root certificate added to your libcurl certs.
Its failing on validating the servers ssl certificate.

The curl-config should list your cert directory and then you can add your
cert there and it should validate.

Mike


-- 
Michael Smith
RSGIS Center
ERDC - CRREL
US Army Corps of Engineers





On 5/5/09  7:02 PM, "Alexandre Dube" <adube at mapgears.com> wrote:

> Hi list,
> 
>   I'd like to know if it's possible to have a WMS layer linked to a
> secure http url (https).  Currently, I see this error in log :
> 
> === LOG ===
> 
> [Tue May  5 18:53:01 2009].853725 msHTTPExecuteRequests(): HTTP request
> error. HTTP: request failed with curl error code 60 (SSL certificate
> problem, verify that the CA cert is OK. Details:
> error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate
> verify failed) for
> https://foo.com/cgi-bin/mapserv?map=map&LAYERS=Layer&REQUEST=GetMap&SERVICE=WM
> S&FORMAT=image/png&STYLES=&HEIGHT=482&VERSION=1.1.1&SRS=EPSG:900913&WIDTH=732&
> BBOX=-7977472.96139656,6196959.95818015,-7973217.53860244,6199762.02619485&TRA
> NSPARENT=TRUE&EXCEPTIONS=application/vnd.ogc.se_inimage
> [Tue May  5 18:53:01 2009].854421 msDrawWMSLayerLow(): WMS server error.
> WMS GetMap request failed for layer 'Layer' (Status -60: SSL certificate
> problem, verify that the CA cert is OK. Details:
> error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate
> verify failed).
> 
> ===========
> 
> If I try the url in a browser with cookies/cache emptied, the url ask a
> login/password ( which I know... ) so I guess the WMS layer is refused
> to access the url since it doesn't have the login/password.  Is there a
> way to accomplish this ?
> 
> Many thanks,

_______________________________________________
mapserver-users mailing list
mapserver-users at lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/mapserver-users






More information about the MapServer-users mailing list