[mapserver-users] OGR Geojson error

[Jeff McKenna]

On 2020-09-29 2:27 p.m., Weisbender, Eric wrote:
> Thanks Kobben.  I think it might be more than a file naming issue.  
> Below is the response from ogrinfo but I can find anything related 
> online.  Any ideas?
> 
> /usr/local/bin/ogrinfo 
> http://opendata.arcgis.com/datasets/5da472c6d27b4b67970acc7b5044c862_0.geojson
> 
> ERROR 1: Peer's certificate has an invalid signature.

My guess is that there is a problem between your local CA (certificate 
authority) file and the remote server's certificate.

Try this at the commandline:

   curl -k 
https://opendata.arcgis.com/dataset/5da472c6d27b4b67970acc7b5044c862_0.geojson 
|more

That should work for you as the '-k' switch ignores HTTPS and uses an 
insecure connection.

Now try on your local machine:

   curl --verbose 
https://opendata.arcgis.com/datasets/5da472c6d27b4b67970acc7b5044c862_0.geojson 
|more

You should see at the beginning of that output, a section on your local 
CA file, as:

      * successfully set certificate verify locations:
      * CAfile: \ms4w\Apache\conf\ca-bundle\cacert.pem

Then after that in the output you can see the 'handshake' as it tries to 
connect to the remote server, and hopefully you see a message such as:

      * Server certificate:
      *  subject: C=US; ST=California; L=Redlands; O=Environmental 
Systems Research Institute, Inc.; CN=*.opendata.arcgis.com
      *  start date: Apr 24 00:00:00 2020 GMT
      *  expire date: Apr 28 12:00:00 2021 GMT
      *  subjectAltName: host "opendata.arcgis.com" matched cert's 
"opendata.arcgis.com"
      *  issuer: C=US; O=DigiCert Inc; OU=www.digicert.com; CN=DigiCert SHA2
  High Assurance Server CA
      *  SSL certificate verify ok.



In terms of MapServer, you can follow the similar steps to confirm your 
CA file is setup etc through this document: 
https://mapserver.org/ogc/wxs_secure.html


/me sends you down another deep rabbit hole, ha!

-jeff



-- 
Jeff McKenna
MapServer Consulting and Training Services
co-founder of FOSS4G
http://gatewaygeo.com/