Re: [mapserver-users] WFS layer and https

2009-04-09 Thread Michael Smith
Brian,

You need the servers certificate in your cURL certificate directory. Where
to put it, I think, depends on your OS. The default in the Unix OS¹s is
/usr/share/ssl/certs.

Mike


-- 
Michael Smith
RSGIS Center
ERDC - CRREL
US Army Corps of Engineers





On 4/9/09  10:09 AM, Fischer, Brian bfisc...@houstoneng.com wrote:

 I¹m trying to use a WFS that is coming from a SSL (https) server.  Is it
 possible to use a WFS from an https connection?  Here is the error I am
 getting.
  
 HTML
 HEADTITLEMapServer Message/TITLE/HEAD
 !-- MapServer version 5.0.2 OUTPUT=GIF OUTPUT=PNG OUTPUT=JPEG OUTPUT=WBMP
 OUTPUT=PDF OUTPUT=SWF OUTPUT=SVG SUPPORTS=PROJ SUPPORTS=AGG SUPPORTS=FREETYPE
 SUPPORTS=WMS_SERVER SUPPORTS=WMS_CLIENT SUPPORTS=WFS_SERVER
 SUPPORTS=WFS_CLIENT SUPPORTS=WCS_SERVER SUPPORTS=SOS_SERVER SUPPORTS=FASTCGI
 SUPPORTS=THREADS SUPPORTS=GEOS INPUT=JPEG INPUT=POSTGIS INPUT=OGR INPUT=GDAL
 INPUT=SHAPEFILE --
 BODY BGCOLOR=#FF
 msDrawMap(): Image handling error. Failed to draw layer named #39;obs#39;.
 msWFSLayerWhichShapes(): WFS connection error. Got HTTP status -60 downloading
 WFS layer obs
 msHTTPExecuteRequests(): HTTP request error. HTTP: request failed with curl
 error code 60 (SSL certificate problem, verify that the CA cert is OK.
 Details:
 error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify
 failed) for 
 https://www.sharedgeo.org/datasets/RRV/maps/noaa/noaa.map?mode=owsamp;amp;RE
 QUEST=GetFeatureamp;VERSION=1.0.0amp;SERVICE=WFSamp;TYPENAME=obsamp;BBOX=3
 46334.183773962,5034450.028,903297.375226037,5434570.553
 /BODY/HTML
  
 Thanks,
 Brian
  
 Brian Fischer, CFM
 GIS Project Manager
 Houston Engineering, Inc. | Leave Nothing to ChanceTM
 6901 East Fish Lake Road, Suite 140
 Maple Grove, MN 55369
 Phone:  763.493.4522 / Fax:  763.493.5572
 Email:  bfisc...@houstoneng.com mailto:bfisc...@houstonengineeringinc.com
 Website: www.houstoneng.com http://www.houstonengineeringinc.com/
  
 
 
 ___
 mapserver-users mailing list
 mapserver-users@lists.osgeo.org
 http://lists.osgeo.org/mailman/listinfo/mapserver-users

___
mapserver-users mailing list
mapserver-users@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/mapserver-users


RE: [mapserver-users] WFS layer and https

2009-04-09 Thread Fischer, Brian
Thanks Mike.  We actually narrowed it down to a problem with MS4W.  It
appears that MS4W's libcurl does not include the root certificate
authority bundle.  I'll need to file a bug with MS4W.

 

Thanks again for your help.

 

Brian Fischer

Houston Engineering, Inc.

Maple Grove, MN

(763) 493-4522

 

From: Michael Smith [mailto:michael.sm...@usace.army.mil] 
Sent: Thursday, April 09, 2009 9:31 AM
To: Fischer, Brian; mapserver-users@lists.osgeo.org
Subject: Re: [mapserver-users] WFS layer and https

 

Brian,

You need the servers certificate in your cURL certificate directory.
Where to put it, I think, depends on your OS. The default in the Unix
OS's is /usr/share/ssl/certs.

Mike


-- 
Michael Smith
RSGIS Center
ERDC - CRREL
US Army Corps of Engineers





On 4/9/09  10:09 AM, Fischer, Brian bfisc...@houstoneng.com wrote:

I'm trying to use a WFS that is coming from a SSL (https) server.  Is it
possible to use a WFS from an https connection?  Here is the error I am
getting.
 
HTML
HEADTITLEMapServer Message/TITLE/HEAD
!-- MapServer version 5.0.2 OUTPUT=GIF OUTPUT=PNG OUTPUT=JPEG
OUTPUT=WBMP OUTPUT=PDF OUTPUT=SWF OUTPUT=SVG SUPPORTS=PROJ SUPPORTS=AGG
SUPPORTS=FREETYPE SUPPORTS=WMS_SERVER SUPPORTS=WMS_CLIENT
SUPPORTS=WFS_SERVER SUPPORTS=WFS_CLIENT SUPPORTS=WCS_SERVER
SUPPORTS=SOS_SERVER SUPPORTS=FASTCGI SUPPORTS=THREADS SUPPORTS=GEOS
INPUT=JPEG INPUT=POSTGIS INPUT=OGR INPUT=GDAL INPUT=SHAPEFILE --
BODY BGCOLOR=#FF
msDrawMap(): Image handling error. Failed to draw layer named
#39;obs#39;.
msWFSLayerWhichShapes(): WFS connection error. Got HTTP status -60
downloading WFS layer obs
msHTTPExecuteRequests(): HTTP request error. HTTP: request failed with
curl error code 60 (SSL certificate problem, verify that the CA cert is
OK. Details:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate
verify failed) for
https://www.sharedgeo.org/datasets/RRV/maps/noaa/noaa.map?mode=owsamp;;
amp;REQUEST=GetFeatureamp;VERSION=1.0.0amp;SERVICE=WFSamp;TYPENAME=ob
samp;BBOX=346334.183773962,5034450.028,903297.375226037,5434570.553
/BODY/HTML
 
Thanks,
Brian
 
Brian Fischer, CFM
GIS Project Manager
Houston Engineering, Inc. | Leave Nothing to ChanceTM
6901 East Fish Lake Road, Suite 140
Maple Grove, MN 55369
Phone:  763.493.4522 / Fax:  763.493.5572
Email: bfisc...@houstoneng.com
mailto:bfisc...@houstonengineeringinc.com 
Website: www.houstoneng.com http://www.houstonengineeringinc.com/  
 



___
mapserver-users mailing list
mapserver-users@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/mapserver-users

___
mapserver-users mailing list
mapserver-users@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/mapserver-users