[prev in list] [next in list] [prev in thread] [next in thread]
List: qgis-developer
Subject: [Qgis-developer] OSX/OpenSSL SSL handshake error
From: Bruce Crevensten <becrevensten () alaska ! edu>
Date: 2016-07-21 17:50:04
Message-ID: CA+7ktcu1stF=qhjKxP9B3nnisq8WjR8HRWg=TK5epqDBw8XqrA () mail ! gmail ! com
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
Hi, I'm running OS X 10.11.5, QGis 2.14.2-Essen (binary from KyngChaos).
I'm trying to connect to this WMS service:
https://firms.modaps.eosdis.nasa.gov/wms/viirs/?VERSION=1.1.1&
I receive a message, "Failed to download capabilities: Download of
capabilities failed: SSL handshake failed."
To troubleshoot, I tried using the system openssl command like this:
/usr/bin/openssl s_client -connect firms.modaps.eosdis.nasa.gov:443
CONNECTED(00000003)
44549:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert
handshake
failure:/BuildRoot/Library/Caches/com.apple.xbs/Sources/OpenSSL098/OpenSSL098-59.40.2/src/ssl/s23_clnt.c:593:
The system version of OpenSSL is OpenSSL 0.9.8zh 14 Jan 2016.
After installing a newer OpenSSL via brew, I could run the same s_client
command and the connection worked, so it appears that QGis is linked
against the system libraries and is unable to communicate with a server
with SSLv3 disabled.
Is there a remedy for this? Can I provide additional information for
debugging?
Sincerely,
- Bruce
--
*Bruce Crevensten*
*Senior Software Engineer*
(SNAP) Scenarios Network for Alaska & Arctic Planning
www.snap.uaf.edu
[Attachment #5 (text/html)]
<div dir="ltr">Hi, I'm running OS X 10.11.5, QGis 2.14.2-Essen (binary from \
KyngChaos). I'm trying to connect to this WMS service:<div><br></div><div><a \
href="https://firms.modaps.eosdis.nasa.gov/wms/viirs/?VERSION=1.1.1&">https://firm \
s.modaps.eosdis.nasa.gov/wms/viirs/?VERSION=1.1.1&</a></div><div><br></div><div>I \
receive a message, "Failed to download capabilities: Download of capabilities \
failed: SSL handshake failed."</div><div><br></div><div>To troubleshoot, I tried \
using the system openssl command like \
this:</div><div><br></div><div><div>/usr/bin/openssl s_client -connect <a \
href="http://firms.modaps.eosdis.nasa.gov:443">firms.modaps.eosdis.nasa.gov:443</a></div><div>CONNECTED(00000003)</div><div>44549:error:14077410:SSL \
routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake \
failure:/BuildRoot/Library/Caches/com.apple.xbs/Sources/OpenSSL098/OpenSSL098-59.40.2/src/ssl/s23_clnt.c:593:</div><div><br></div><div>The \
system version of OpenSSL is OpenSSL 0.9.8zh 14 Jan \
2016.</div><div><br></div><div>After installing a newer OpenSSL via brew, I could run \
the same s_client command and the connection worked, so it appears that QGis is \
linked against the system libraries and is unable to communicate with a server with \
SSLv3 disabled.</div><div><br></div><div>Is there a remedy for this? Can I provide \
additional information for debugging?</div><div><br></div><div>Sincerely,</div><div>- \
Bruce</div><div><br></div>-- <br><div class="gmail_signature" \
data-smartmail="gmail_signature"><div dir="ltr"><div><b>Bruce \
Crevensten</b></div><div><b><br></b></div><div><b>Senior Software \
Engineer<br></b></div><div><div>(SNAP) Scenarios Network for Alaska & Arctic \
Planning<br></div></div><div><div><a href="http://www.snap.uaf.edu/" \
target="_blank">www.snap.uaf.edu</a></div>
</div></div></div>
</div></div>
[Attachment #6 (text/plain)]
_______________________________________________
Qgis-developer mailing list
Qgis-developer@lists.osgeo.org
List info: http://lists.osgeo.org/mailman/listinfo/qgis-developer
Unsubscribe: http://lists.osgeo.org/mailman/listinfo/qgis-developer
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic