Opened 5 years ago

Closed 5 years ago

#189 closed defect (fixed)

MapCache problem with HTTPS sources

Reported by: Jeff McKenna Owned by: Jeff McKenna
Priority: blocker Milestone: 4.0 release
Component: MS4W - MapCache Version: 3.3.0
Keywords: Cc: TC Haddad
Blocked By: Blocking:

Description

  • any HTTPS source in mapcache.xml will throw errors
  • seems to only affect 64bit systems
  • example source: 
             <source name="gatewaygeo" type="wms">
          <getmap>
             <params>
                <FORMAT>image/png</FORMAT>
                <LAYERS>prov_bound</LAYERS>
             </params>
          </getmap>
          <http>
             <url>https://demo.gatewaygeomatics.com/cgi-bin/wms_gateway?</url>
          </http>
        </source>
  • typical error recorded in Apache's error logs: 
    curl failed to request url https://... 
    : SSL certificate problem: unable to get local issuer certificate

Change History (2)

comment:1 by Jeff McKenna, 5 years ago

This has been fixed in today's MS4W 4.0.0 (and MS4W 3.3.1) releases. Essentially:

    MS4W's MapCache module will check for this CURL_CA_BUNDLE value set in
    Apache's httpd.conf, and in the instances that it cannot find the value
    (which occurs on some x64 systems) it will check for the following hardcoded paths,
    in this order:
    
    ::
    
      "D:/ms4w/Apache/conf/ca-bundle/cacert.pem"
      
        or
      
      "C:/ms4w/Apache/conf/ca-bundle/cacert.pem"

comment:2 by Jeff McKenna, 5 years ago

Resolution: → fixed
Status: new → closed
Note: See TracTickets for help on using tickets.