On 2020-09-29 2:27 p.m., Weisbender, Eric wrote:
Thanks Kobben. I think it might be more than a file naming issue.
Below is the response from ogrinfo but I can find anything related
online. Any ideas?
/usr/local/bin/ogrinfo
http://opendata.arcgis.com/datasets/5da472c6d27b4b67970acc7b5044c862_0.geojson
ERROR 1: Peer's certificate has an invalid signature.
My guess is that there is a problem between your local CA (certificate
authority) file and the remote server's certificate.
Try this at the commandline:
curl -k
https://opendata.arcgis.com/dataset/5da472c6d27b4b67970acc7b5044c862_0.geojson
|more
That should work for you as the '-k' switch ignores HTTPS and uses an
insecure connection.
Now try on your local machine:
curl --verbose
https://opendata.arcgis.com/datasets/5da472c6d27b4b67970acc7b5044c862_0.geojson
|more
You should see at the beginning of that output, a section on your local
CA file, as:
* successfully set certificate verify locations:
* CAfile: \ms4w\Apache\conf\ca-bundle\cacert.pem
Then after that in the output you can see the 'handshake' as it tries to
connect to the remote server, and hopefully you see a message such as:
* Server certificate:
* subject: C=US; ST=California; L=Redlands; O=Environmental
Systems Research Institute, Inc.; CN=*.opendata.arcgis.com
* start date: Apr 24 00:00:00 2020 GMT
* expire date: Apr 28 12:00:00 2021 GMT
* subjectAltName: host "opendata.arcgis.com" matched cert's
"opendata.arcgis.com"
* issuer: C=US; O=DigiCert Inc; OU=www.digicert.com; CN=DigiCert SHA2
High Assurance Server CA
* SSL certificate verify ok.
In terms of MapServer, you can follow the similar steps to confirm your
CA file is setup etc through this document:
https://mapserver.org/ogc/wxs_secure.html
/me sends you down another deep rabbit hole, ha!
-jeff
--
Jeff McKenna
MapServer Consulting and Training Services
co-founder of FOSS4G
http://gatewaygeo.com/
_______________________________________________
mapserver-users mailing list
mapserver-users@lists.osgeo.org
https://lists.osgeo.org/mailman/listinfo/mapserver-users
