Skip to content

Instantly share code, notes, and snippets.

@maptastik

maptastik/curl_osgeo4w_cert_workaround.md

Last active January 23, 2019 15:55
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save maptastik/4a18c319a9ea83807b5e03c1152a9bab to your computer and use it in GitHub Desktop.
Save maptastik/4a18c319a9ea83807b5e03c1152a9bab to your computer and use it in GitHub Desktop.
Download ZIP
Raw
curl_osgeo4w_cert_workaround.md

Problem

When trying to use cURL from the OSGEO4W shell, it throws the following error:

curl: (60) SSL certificate problem: unable to get local issuer certificate More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it. To learn more about this situation and how to fix it, please visit the web page mentioned above.

While this seems to be a chronic issue, I couldn't find any indication that cURL or GDAL devs thought this was their repsonsibility. So, off to try and find a workaround.

Workaround

From what I can ascertain, there is a missing certificate in the compilation of cURL that comes with OSGEO4W. Fortunately, someone was kind enough to share the steps they took to workaround this issue. They were having problems with cURL on Windows more generally, but the steps are more or less the same. I've adapted them for OSGEO4W shell:

  1. From http://curl.haxx.se/docs/caextract.html , Download the cacert.pem file.
  2. Navigate to the location of cURL in your OSGEO4W installation. For me this was C:\OSGeo4W64\bin. Place cacert.pem in this directory.
  3. Rename cacert.pem file to curl-ca-bundle.crt

At this point you should be able to run cURL from the the OSGEO4W shell.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment