Hi John,
There is a long-standing issue on Windows systems where environment
variables are not able to be accessed, by the FOSS4G software stack. To
work around this for MS4W users, I set that CURL_CA_BUNDLE manually all
throughout the MS4W stack, instead of through an environment variable.
(the upcoming MapServer 8 release will include a config file where we
can also set this instead) I also set CURL_CA_BUNDLE in MS4W's Apache
http server. All of those manual sets have basically eliminated the
hundreds of reports I'd get weekly of that variable not being read, from
MS4W users.
Hope that helps (this issue is not discussed often publicly, but trust
me, it unfortunately exists).
-jeff
--
Jeff McKenna
GatewayGeo: Developers of MS4W, MapServer Consulting and Training
co-founder of FOSS4G
http://gatewaygeo.com/
On 2022-06-08 7:07 p.m., John Huotari via MapServer-users wrote:
I'm having trouble hitting a WMS referenced from within my .map file. Instead of the image from the WMS
being drawn as a layer in my map, I instead get an error logged of "request failed with curl error
code 60 (SSL certificate problem: unable to get local issuer certificate) for
https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WmsServer?LAYERS=0&REQUEST=GetMap&SERVICE=WMS&;...<remainder
omitted for brevity>"
The confusing thing to me is that the exact same .map file works just fine to produce a map image
containing the referenced layer when I run mapserver -nh at a command prompt. i.e. mapserv -nh
"QUERY_STRING=map=test.map&...<remainder omitted for brevity>" > test.png
I've configured a CURL_CA_BUNDLE environment variable pointing to a
curl-ca-bundle.crt file and I think the fact that I can reach that external WMS
when running the mapserv command at a command prompt would indicate it's
configured correctly. Any thoughts on what could cause the failure I'm seeing
though MapServer running on Windows though IIS as a FastCGI app while
succeeding when running the same .map file at a command prompt? Or any
thoughts on what I might try to troubleshoot further?
.map file contents are below
MAP
NAME "MAP"
CONFIG "MS_ERRORFILE" "e:/LogFiles/ms_error3.txt"
CONFIG "PROJ_LIB" "E:/ms/projlib/"
DEBUG 5
EXTENT -20037508.342789244 -20037508.342789244 20037508.342789244
20037508.342789244
SIZE 256 256
SYMBOLSET "E:\ms\basedata\symbols.txt"
FONTSET "E:\ms\basedata\fonts.txt"
IMAGECOLOR 255 255 255
TRANSPARENT ON
DEFRESOLUTION 72
RESOLUTION 72
UNITS meters
PROJECTION "init=epsg:3857" END
WEB
METADATA
"wms_enable_request" "*"
END
END
LAYER
STATUS DEFAULT TYPE RASTER NAME "WMS_DRG"
DEBUG 5
CONNECTIONTYPE WMS CONNECTION
"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WmsServer?";
PROJECTION "init=epsg:3857" END
METADATA
"wms_srs" "EPSG:3857"
"wms_name" "0"
"wms_server_version" "1.1.1"
"wms_format" "image/png"
END
END
END
******************* PLEASE NOTE *******************
This message, along with any attachments, is for the designated recipient(s)
only and may contain privileged, proprietary, or otherwise confidential
information. If this message has reached you in error, kindly destroy it
without review and notify the sender immediately. Any other use of such
misdirected e-mail by you is prohibited. Where allowed by local law, electronic
communications with Zurich and its affiliates, including e-mail and instant
messaging (including content), may be scanned for the purposes of information
security and assessment of internal compliance with company policy.
_______________________________________________
MapServer-users mailing list
MapServer-users@lists.osgeo.org
https://lists.osgeo.org/mailman/listinfo/mapserver-users
_______________________________________________
MapServer-users mailing list
MapServer-users@lists.osgeo.org
https://lists.osgeo.org/mailman/listinfo/mapserver-users
