Sudden Access denied for tiles of layer ch.swisstopo.pixelkarte-farbe from wmts.geo.admin.ch

193 views
Skip to first unread message

Nicola Fankhauser

unread,
Oct 21, 2014, 3:27:58 AM10/21/14
to geoadm...@googlegroups.com
Hi guys

Did you reconfigure your servers? We get suddenly "Access Denied" for tiles of all layers (e.g. 'ch.swisstopo.pixelkarte-farbe') from wmts.geo.admin.ch - however wms.geo.admin.ch still runs fine.

Thanks for any hints!

Nicola

Nicola Fankhauser

unread,
Oct 21, 2014, 3:29:07 AM10/21/14
to geoadm...@googlegroups.com
Hi

This is what we get:

GET http://wmts.geo.admin.ch/1.0.0/ch.swisstopo.pixelkarte-farbe/default/20140520/21781/15/1/2.jpeg HTTP/1.1
Accept: */*
Accept-Language: de-CH,fr-CH;q=0.7,en;q=0.3
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2; .NET4.0C; OfficeLiveConnector.1.5; OfficeLivePatch.1.3; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: wmts.geo.admin.ch
DNT: 1
Connection: Keep-Alive
Pragma: no-cache


HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=utf-8
Content-Length: 389
Connection: keep-alive
Accept-Ranges: bytes
Age: 0
Date: Tue, 21 Oct 2014 07:09:06 GMT
Retry-After: 5
Server: Varnish
Via: 1.1 varnish
X-Cache: MISS
X-Varnish: 1962544767


<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> [^]
<html>
  <head>
    <title>403 Forbidden</title>
  </head>
  <body>
    <h1>Error 403 Forbidden</h1>
    

Forbidden


    <h3>Guru Meditation:</h3>
    

XID: 1962544767


    <hr>
    

Varnish cache server


  </body>
</html>

Nicola

Marc Monnerat

unread,
Oct 21, 2014, 3:33:14 AM10/21/14
to geoadmin-api

You do not send any referer or I am mistaken ?

Marc

--
You received this message because you are subscribed to the Google Groups "GeoAdmin API" group.
To unsubscribe from this group and stop receiving emails from it, send an email to geoadmin-api...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.



--
-- Τα πάντα ῥεῖ καὶ οὐδὲν μένει

Nicola Fankhauser

unread,
Oct 21, 2014, 4:12:51 AM10/21/14
to geoadm...@googlegroups.com
Hi

The fundamental problem seems to be that the WMTS capabilities document does not return HTTPS links for the WMTS tiles when accessed via HTTPS. We reverted to a locally saved and patched capabilities document with correct HTTPS links.

Nicola

Marc Monnerat

unread,
Oct 21, 2014, 4:52:01 AM10/21/14
to geoadmin-api
Hello,

OK, I see. I did fill an issue for this (https://github.com/geoadmin/mf-chsdi3/issues/1078)

Thank you for your input

Marc

Nicola Fankhauser

unread,
Oct 21, 2014, 7:45:43 AM10/21/14
to geoadm...@googlegroups.com
Hi

Thanks!

Nicola
Reply all
Reply to author
Forward
0 new messages