The WMS service that you mention redirects all requests to HTTPS:
https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WmsServer?
-jeff
--
Jeff McKenna
MapServer Consulting and Training Services
co-founder of FOSS4G
http://gatewaygeo.com/
On 2020-06-09 2:46 a.m., John Huotari wrote:
I’m attempting to hit a WMS using HTTP, not HTTPS, but I run into the
following SSL error
HTTP: request failed with curl error code 60 (SSL certificate problem:
unable to get local issuer certificate)
I can get around this error by downloading a CA bundle file and setting
the CURL_CA_BUNDLE environment variable to point to it, but why is a CA
bundle file necessary when not even using SSL (hitting a WMS using HTTP,
not HTTPS)? Does anyone know a workaround that wouldn’t require
deploying a CA bundle file to my servers and setting an environment
variable to point to it?
I’m currently using the stable release of MSVC 2017 x64 package
downloaded from GISInternals - http://www.gisinternals.com/release.php
A sample mapfile looks like this
MAP
NAME USA1
STATUS ON
IMAGETYPE PNG8
RESOLUTION 72
IMAGECOLOR 255 255 255
UNITS METERS
PROJECTION "proj=lcc" "lat_1=20" "lat_2=60" "lat_0=40"
"lon_0=-112.52116185" "x_0=0" "y_0=0" "ellps=GRS80" "units=m"
"datum=NAD83" END
SIZE 1500 1500
EXTENT -45292.7219576058 780481.616003812 45290.5126012127
871065.05991903
LAYER
NAME "WMS_DRG"
TYPE RASTER
STATUS ON
PROJECTION "proj=longlat" "ellps=GRS80" "datum=NAD83" "no_defs" END
CONNECTION
"http://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WmsServer?"
CONNECTIONTYPE WMS
METADATA
"wms_srs" "EPSG:4326"
"wms_name" "0"
"wms_server_version" "1.1.1"
"wms_format" "image/png"
END
END
END
_______________________________________________
mapserver-users mailing list
mapserver-users@lists.osgeo.org
https://lists.osgeo.org/mailman/listinfo/mapserver-users