[mapserver-users] SSL curl error when hitting HTTP WMS

[Jeff McKenna]

The WMS service that you mention redirects all requests to HTTPS: 
https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WmsServer?

-jeff



-- 
Jeff McKenna
MapServer Consulting and Training Services
co-founder of FOSS4G
http://gatewaygeo.com/



On 2020-06-09 2:46 a.m., John Huotari wrote:
> I’m attempting to hit a WMS using HTTP, not HTTPS, but I run into the 
> following SSL error
> 
> HTTP: request failed with curl error code 60 (SSL certificate problem: 
> unable to get local issuer certificate)
> 
> I can get around this error by downloading a CA bundle file and setting 
> the CURL_CA_BUNDLE environment variable to point to it, but why is a CA 
> bundle file necessary when not even using SSL (hitting a WMS using HTTP, 
> not HTTPS)?  Does anyone know a workaround that wouldn’t require 
> deploying a CA bundle file to my servers and setting an environment 
> variable to point to it?
> 
> I’m currently using the stable release of MSVC 2017 x64 package 
> downloaded from GISInternals - http://www.gisinternals.com/release.php
> 
> A sample mapfile looks like this
> 
> MAP
> 
>    NAME USA1
> 
>    STATUS ON
> 
>    IMAGETYPE PNG8
> 
>    RESOLUTION 72
> 
>    IMAGECOLOR 255 255 255
> 
>    UNITS METERS
> 
>    PROJECTION "proj=lcc" "lat_1=20" "lat_2=60" "lat_0=40" 
> "lon_0=-112.52116185" "x_0=0" "y_0=0" "ellps=GRS80" "units=m" 
> "datum=NAD83" END
> 
>    SIZE 1500 1500
> 
>    EXTENT -45292.7219576058 780481.616003812 45290.5126012127 
> 871065.05991903
> 
>    LAYER
> 
>     NAME "WMS_DRG"
> 
>      TYPE RASTER
> 
>      STATUS ON
> 
>      PROJECTION "proj=longlat" "ellps=GRS80" "datum=NAD83" "no_defs" END
> 
>      CONNECTION 
> "http://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WmsServer?"
> 
>      CONNECTIONTYPE WMS
> 
>      METADATA
> 
>        "wms_srs"  "EPSG:4326"
> 
>        "wms_name"  "0"
> 
>        "wms_server_version"  "1.1.1"
> 
>        "wms_format"  "image/png"
> 
>      END
> 
>    END
> 
> END
>