+Communication with an Ntrip Broadcaster over Secure Sockets Layer (SSL) as well as the download of RINEX skeleton files when available from HTTPS websites +requires the exchange of client and/or server certificates.
+Specify the path to a directory where you save CA certificates on your system. +BNC creates from *.crt and *.pem files a CA certificate database, which is used by the socket during the handshake phase to validate the peer's certificate.
++SSL communication may involve queries coming from the Ntrip Broadcaster or from a HTTPS website hosting RINEX skeletons. +Such a query could show up under BNC's 'Log' tab especially when self-signed SSL certificates are used. Example: +
-Queries should not be received by a client when a server uses official SSL certificates. - -SSL Error Server Certificate Issued by: @@ -1338,9 +1349,24 @@ No certificates could be verified
-Tick 'Ignore SSL authorization errors' if you generally trust the server and do not want to be bothered with this. Note that SSL communication is usually done over port 443. -
+ ++Queries should not be received by a client when a server uses official SSL certificates.
++You may also just try communication via SSL to check out whether this is supported by the involved Ntrip Broadcaster. +Note that SSL communication is usually done over port 443.
++Two-sided communication with an Ntrip Broadcaster over SSL requires in addition the exchange of client certificates. +Specify the full path to the client certificates on your system. The file naming convention for client certificates in BNC is as follows: +
+ <hostname>.<port>.crt for the certificate and + <hostname>.<port>.key for the private key, where <hostname> is without https://. ++ +
+If available, the client or personal authentication certificate is presented to the peer during the SSL handshake process. +Password protected key files are not supported. +Don't try communication via two sided SSL if you are not sure whether this is supported by the involved Ntrip Broadcaster.
++Tick 'Ignore SSL authorization errors' if you generally trust the server and do not want to be bothered with this.
Figure 7: BNC's 'Network' panel configured to ignore eventually occurring SSL error messages
@@ -1353,5 +1379,12 @@2.3.1 Logfile - optional
-Records of BNC's activities are shown in the 'Log' tab on the bottom of the main window. These logs can be saved into a file when a valid path is specified in the 'Logfile (full path)' field. The logfile name will automatically be extended by a string '_YYMMDD' for the current date. This leads to series of daily logfiles when running BNC continuously. Message logs cover the communication status between BNC and the Ntrip Broadcaster as well as problems that may occur in the communication link, stream availability, stream delay, stream conversion etc. The time stamps within the 'Log' tab are given in UTC. The time stamps within the logfile are given in GPS Time. The default value for 'Logfile (full path)' is an empty option field, meaning that BNC logs will not be saved into a file. +Records of BNC's activities are shown in the 'Log' tab on the bottom of the main window. +These logs can be saved into a file when a valid path is specified in the 'Logfile (full path)' field. +The logfile name will automatically be extended by a string '_YYMMDD' for the current date. +This leads to series of daily logfiles when running BNC continuously. +Message logs cover the communication status between BNC and the Ntrip Broadcaster as well as problems +that may occur in the communication link, stream availability, stream delay, stream conversion etc. +The time stamps within the 'Log' tab are given in UTC. The time stamps within the logfile are given in GPS Time. +The default value for 'Logfile (full path)' is an empty option field, meaning that BNC logs will not be saved into a file.
Index: trunk/BNC/src/bncwindow.cpp =================================================================== --- trunk/BNC/src/bncwindow.cpp (revision 10503) +++ trunk/BNC/src/bncwindow.cpp (revision 10509) @@ -1407,5 +1407,5 @@ _proxyHostLineEdit->setWhatsThis(tr("
If you are running BNC within a protected Local Area Network (LAN), you may need to use a proxy server to access the Internet. Enter your proxy server IP and port number in case one is operated in front of BNC. If you do not know the IP and port of your proxy server, check the proxy server settings in your Internet browser or ask your network administrator. Without any entry, BNC will try to use the system proxies.
Note that IP streaming is sometimes not allowed in a LAN. In this case you need to ask your network administrator for an appropriate modification of the local security policy or for the installation of a TCP relay to the Ntrip Broadcasters. If this is not possible, you may need to run BNC outside your LAN on a network that has unobstructed connection to the Internet. [key: proxyHost]
")); _proxyPortLineEdit->setWhatsThis(tr("Enter your proxy server port number in case a proxy is operated in front of BNC. [key: proxyPort]
")); - _sslCaCertPathLineEdit->setWhatsThis(tr("Communication with an Ntrip Broadcaster over SSL requires the exchange of server certificates. Specify the path to a directory where you save CA certificates on your system.
BNC creates from *.crt and *.pem files a CA certificate database, which is used by the socket during the handshake phase to validate the peer's certificate.
Don't try communication via SSL if you are not sure whether this is supported by the involved Ntrip Broadcaster.
Note that SSL communication is usually done over port 443. [key: sslCaCertPath]
")); + _sslCaCertPathLineEdit->setWhatsThis(tr("Communication with an Ntrip Broadcaster over SSL requires the exchange of server certificates. Specify the path to a directory where you save CA certificates on your system.
BNC creates from *.crt and *.pem files a CA certificate database, which is used by the socket during the handshake phase to validate the peer's certificate.
Note that SSL communication is usually done over port 443. [key: sslCaCertPath]
")); _sslClientCertPathLineEdit->setWhatsThis(tr("Two-sided communication with an Ntrip Broadcaster over SSL requires in addition the exchange of client certificates. Specify the full path to the client certificates on your system.
The file naming convention for client certificates in BNC is as follows: <hostname>.<port>.crt for the certificate and <hostname>.<port>.key for the private key, where <hostname> is without https://.
If available, the client or personal authentication certificate is presented to the peer during the SSL handshake process. Password protected key files are not supported.
Don't try communication via two sided SSL if you are not sure whether this is supported by the involved Ntrip Broadcaster.
Note that SSL communication is usually done over port 443. [key: sslClientCertPath]
")); _sslIgnoreErrorsCheckBox->setWhatsThis(tr("SSL communication may involve queries coming from the Ntrip Broadcaster. Tick 'Ignore SSL authorization errors' if you don't want to be bothered with this. [key: sslIgnoreErrors]
"));