[mapserver-users] WMS Layer with secure http url
Rahkonen Jukka
Jukka.Rahkonen at mmmtike.fi
Tue May 5 21:19:56 PDT 2009
Hi,
When the certificate is OK the next thing to do is to change the connection URL so that it includes username and password. If I remember right the format is like https://username:password@foo.com/mapserv?....
-Jukka Rahkonen-
Michael Smith wrote:
Alexandre,
What you need is the servers root certificate added to your libcurl certs.
Its failing on validating the servers ssl certificate.
The curl-config should list your cert directory and then you can add your
cert there and it should validate.
Mike
--
Michael Smith
RSGIS Center
ERDC - CRREL
US Army Corps of Engineers
On 5/5/09 7:02 PM, "Alexandre Dube" <adube at mapgears.com> wrote:
> Hi list,
>
> I'd like to know if it's possible to have a WMS layer linked to a
> secure http url (https). Currently, I see this error in log :
>
> === LOG ===
>
> [Tue May 5 18:53:01 2009].853725 msHTTPExecuteRequests(): HTTP request
> error. HTTP: request failed with curl error code 60 (SSL certificate
> problem, verify that the CA cert is OK. Details:
> error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate
> verify failed) for
> https://foo.com/cgi-bin/mapserv?map=map&LAYERS=Layer&REQUEST=GetMap&SERVICE=WM
> S&FORMAT=image/png&STYLES=&HEIGHT=482&VERSION=1.1.1&SRS=EPSG:900913&WIDTH=732&
> BBOX=-7977472.96139656,6196959.95818015,-7973217.53860244,6199762.02619485&TRA
> NSPARENT=TRUE&EXCEPTIONS=application/vnd.ogc.se_inimage
> [Tue May 5 18:53:01 2009].854421 msDrawWMSLayerLow(): WMS server error.
> WMS GetMap request failed for layer 'Layer' (Status -60: SSL certificate
> problem, verify that the CA cert is OK. Details:
> error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate
> verify failed).
>
> ===========
>
> If I try the url in a browser with cookies/cache emptied, the url ask a
> login/password ( which I know... ) so I guess the WMS layer is refused
> to access the url since it doesn't have the login/password. Is there a
> way to accomplish this ?
>
> Many thanks,
_______________________________________________
mapserver-users mailing list
mapserver-users at lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/mapserver-users
More information about the MapServer-users
mailing list