Crash at SSL error using some WFS

[Lorchi74]

What is the bug or the crash?

User Feedback

I was trying to use the following WFS: https://www.gds.hessen.de/wfs2/aaa-suite/cgi-bin/alkis/vereinf/wfs?
(Germany Hesse state)

Report Details

Python Stack Trace

Windows fatal exception: access violation

Thread 0x00003164 (most recent call first):
  <no Python frame>

Stack Trace

QBasicMutex::lockInternal :
QWaitCondition::wakeAll :
multipleProviderMetadataFactory :
QObject::qt_static_metacall :
QgsNetworkAccessManager::sslErrorsOccurred :
QgsNetworkAccessManager::onReplySslErrors :
QObject::qt_static_metacall :
QNetworkReply::sslErrors :
QTcpServer::proxy :
QObject::event :
QApplicationPrivate::notify_helper :
QApplication::notify :
QgsApplication::notify :
QCoreApplication::notifyInternal2 :
QCoreApplicationPrivate::sendPostedEvents :
QEventDispatcherWin32::processEvents :
QEventLoop::exec :
multipleProviderMetadataFactory :
multipleProviderMetadataFactory :
multipleProviderMetadataFactory :
multipleProviderMetadataFactory :
multipleProviderMetadataFactory :
multipleProviderMetadataFactory :
QgsDataItem::runCreateChildren :
QgsDataItem::runCreateChildren :
QgsDataItem::removeChildItem :
QThreadPoolPrivate::reset :
QThread::start :
BaseThreadInitThunk :
RtlUserThreadStart :

System Info
CPU Type: x86_64
Kernel Type: winnt
Kernel Version: 10.0.19045

Steps to reproduce the issue

create a new WFS connection to: https://www.gds.hessen.de/wfs2/aaa-suite/cgi-bin/alkis/vereinf/wfs?
open the connection

Versions

QGIS Info
QGIS Version: 3.34.7-Prizren
QGIS code revision: 6f7d735
Compiled against Qt: 5.15.13
Running against Qt: 5.15.13
Compiled against GDAL: 3.9.0
Running against GDAL: 3.9.0

Supported QGIS version

• I'm running a supported QGIS version according to the roadmap.

New profile

• I tried with a new QGIS profile

Additional context

No response

[agiudiceandrea]

@Lorchi74, thanks for reporting. I cannot replicate the issue following the provided step and WFS URL using QGIS 3.34.7 (3.34.7-2 OSGeo4W) on Windows 10. Does the issue occur also using a new QGIS user profile? If it does, please provide more detailed steps to replicate the issue.

[github-actions]

The QGIS project highly values your report and would love to see it addressed. However, this issue has been left in feedback mode for the last 14 days and is being automatically marked as "stale".
If you would like to continue with this issue, please provide any missing information or answer any open questions. If you could resolve the issue yourself meanwhile, please leave a note for future readers with the same problem and close the issue.
In case you should have any uncertainty, please leave a comment and we will be happy to help you proceed with this issue.
If there is no further activity on this issue, it will be closed in a week.

[Lorchi74]

Thank you for replying and sorry for the delay.
Yes, the error also occurs with a new user profile. These are the steps I followed (additional information see below):

1. create a new user profile, restart QGIS, select the new profile
2. create a new project
3. in the browser, on "WFS / OGC API - Features" - right click - "New Connection..."
4. Connection Details: Name "foo", URL "https://www.gds.hessen.de/wfs2/aaa-suite/cgi-bin/alkis/vereinf/wfs", leaving the rest unchanged (no authentication, Version maximum detect, enable feature paging yes)
5. expand the browser tree
6. double click on the new connection --> crash notification appears ("QGIS ended unexpectedly")

Additional information:

• I updated QGIS to version 3.34.8, the problem persists.
• In Connection Details (when creating a new WFS connection), when I click on Version "Detect", the following message appears: "Server Exception: Download of capabilities failed, SSL handshake failed"
• I looked up the public information of the service again, and it also provides a full URL to the service: "https://www.gds.hessen.de/wfs2/aaa-suite/cgi-bin/alkis/vereinf/wfs?REQUEST=GetCapabilities&SERVICE=WFS&VERSION=2.0.0". When I enter this URL into a normal web browser (Firefox, Chrome), it successfully loads the capabilities file. When I enter the same link into GGIS, it is still crashing like before.

[agiudiceandrea]

@Lorchi74, thanks for providing more detailed steps.
The issue doesn't occur on my Windows 10 system using QGIS 3.34.8 (OSGeo4W):

Video_2024-07-05_124139.mp4

You can check the net connections using the "Debugging/Development Tools" panel.
Does your computer accesses the Internet through a Proxy? Is QGIS properly configured to connect to Internet?
Does QGIS have issue connecting to any WFS/WMS/WCS/XYZ/... Internet server or only to https://www.gds.hessen.de/wfs2/aaa-suite/cgi-bin/alkis/vereinf/wfs?
Does the issue occur on your system also using the Data Source Manager?

[Lorchi74]

Thanks for your quick reply.

• The "Debugging / Development Tools" panel shows:
  SSL errors Error: The issuer certificate of a locally looked up certificate could not be found
• There is no proxy configured.
• QGIS does complain about missing certificates, however it loads some WMS from the same server fine after storing the SSL exception, some don't load with the same error message about a failed SSL handshake. XYZ Tiles work fine (e.g. Google, OSM).
• Only WFS connections make QGIS crash completely.
• Using the Data Source Manager allows for creating the connection, while trying to connect produces the same SSL error. However, it does not produce a crash.
• Trying to open the created connection from the Browser panel produces the crash.
  So the issue is twofold, a) some SSL configuration problem, and b) the crash when encountering SSL errors for WFS connections (but not WMS etc.).