[Qgis-user] Problem installing QGIS on Ubuntu 20.04 - key authentification

[Andrea Giudiceandrea]

evaroben wrote
> So it's the combination of two brand new versions that creates the
> problem?

Hi Eva,
after some other research about your issue and thanks to Richard
Duivenvoorde that checked and confirmed the issue on his system using other
tools, is now clear that the problem is not related to QGIS but:

- to a misconfigured security connection protocol used by the WMS server at
gibs.earthdata.nasa.gov (it uses an insecure SHA-1 hash function in some
circumstances)

- to a default higher security level connection (SHA-1 is not allowed)
requested by the version of the openssl library (1.1.1f) shipped with Ubuntu
20.04

You can workaround the issue following the advice provided at
https://askubuntu.com/a/1233456

Although it's not recommended to lower the security level of https
connections, I've personally tested that solution and it works on my Ubuntu
20.04, allowing QGIS to connect via SSL with the WMS server at
gibs.earthdata.nasa.gov.


Hi Richard,
you can also confirm the source of the issue checking that

curl -v
"https://gibs.earthdata.nasa.gov/wms/epsg4326/best/wms.cgi?SERVICE=WMS&REQUEST=GetCapabilities"
--cipher "DEFAULT at SECLEVEL=1"

works.

And also directly using openssl to connect to the server, checking that

openssl s_client -connect gibs.earthdata.nasa.gov:443

do not works, while

openssl s_client -connect gibs.earthdata.nasa.gov:443 -cipher
DEFAULT at SECLEVEL=1

works.

For further reference, see
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1864689


Regards.

Andrea



--
Sent from: http://osgeo-org.1560.x6.nabble.com/QGIS-User-f4125267.html