Re: [LKC] Need help trying to get Lasso 8.5 to talk to FileMaker 14 Server via HTTPS / Port 443
- 1 Messages
- Collapse All
- Expand All
- Subscribe
Dec 07
Tami Williams Re: [LKC] Need help trying to get Lasso 8.5 to talk to FileMaker 14 Server via HTTPS / Port 443
Dec 07, 2017; 11:11
Tami Williams
Re: [LKC] Need help trying to get Lasso 8.5 to talk to FileMaker 14 Server via HTTPS / Port 443
Thanks for the info - I will pass it on to the security department at my client.
On another note I have the SAME problem using FileMaker 16 Server and Lasso 8.5, turning on FMS 16’s SSL I can open the databases but Lasso can not see the databases if in Lasso Site Admin Database Host connection I use the IP of the FMS16 server with port 443 or IP:443, Lasso can only see the databases if I use host address = IP and port = 80.
Has anyone gotten FMS16 default SSL to work with Lasso so that Lasso’s talking to FM via SSL?
Thanks in advance.
> On Dec 7, 2017, at 10:39 AM, Brian Loomis <brian@customated.com> wrote:
>
> What is the vintage of the server running Filemaker? OS and Version?
>
> I am not up to speed on Filemaker but I can tell you in Mac on Ruby I have to update the certificates in the OS often enough because API calls over SSL stop working. I do this using brew to update openssl.
>
> in this part of your email:
>
> _________________
>
> If I go to https://127.0.0.1/fmi/xml/FMPXMLRESULT.xml?-dbnames
>
> I get a message about the "FMI Default Certificate” and “invalid certificate, host name mismatch” but if I say continue anyway I see the list of database names.
>
> _________________
>
> Are you able to tell what the hostname is? If the hostname of the FMSA server is routable on your network you might try that in Lasso instead of the IP.
>
> https://community.filemaker.com/thread/84454
>
> If you do have to install a new certificate to get FMS to work I suggest using let’s_encrypt.
>
> Alternatively, you could use something like stunnel on the FMSA server to proxy all your SSL for you and just send it to the FMSA server as plain http once it gets on the local machine. This would keep you form having to do any janky FMSA certificate changes. IMHO messing with the Tomcat stuff on FMSA is a recipe for trouble unless you totally know what you are doing.
>
> https://www.stunnel.org/index.html
>
>
> Brian
> <3FBA85FB-7278-4E74-880D-AA8E068544F8>
> Brian Loomis
> Customated
> 910 Main Street Suite 337
> Boise, ID 83702
> (208) 841-0337
> http://www.customated.com
>
> On December 6, 2017 at 11:30:01 PM, Tami Williams (tami@asktami.com) wrote:
>
>> On the FileMaker 14 Server machine if I do
>> http://localhost/fmi/xml/FMPXMLRESULT.xml?-dbnames
>> or
>> http://127.0.0.1/fmi/xml/FMPXMLRESULT.xml?-dbnames
>>
>> I get a list of database names
>>
>> BUT if I do
>>
>> http://localhost:443/fmi/xml/FMPXMLRESULT.xml?-dbnames
>> or
>> http://127.0.0.1:443/fmi/xml/FMPXMLRESULT.xml?-dbnames
>>
>> I get
>>
>> "Your browser (or proxy) sent a request that this server could not understand.”
>>
>>
>> If I go to https://127.0.0.1/fmi/xml/FMPXMLRESULT.xml?-dbnames
>>
>> I get a message about the "FMI Default Certificate” and “invalid certificate, host name mismatch” but if I say continue anyway I see the list of database names.
>>
>> The same happens if I hit the FMS machine from another machine using the IP of the FMS machine - https://10.211.55.4/fmi/xml/FMPXMLRESULT.xml?-dbnames
>>
>> But no matter what I can’t get the Lasso machine to see the FIleMaker databases once I turn on use SSL for database connections.
>>
>> Any other suggestions?
>>
>> Thanks in advance.
>>
>>
>> > On Dec 6, 2017, at 11:31 PM, Brian Loomis <brianloomis1@me.com> wrote:
>> >
>> > Have you tried adding :443 to the end of the IP address to see what it does?
>> >
>> > Can you call the /fmi/ api on port :443 on that machine outside of lasso and apache with curl or another tool? Does it work local to the FMP server on 127.0.0.1:443 or 0.0.0.0:443 ? What about via the private IP? Can you curl SSL on it to the FMI API?
>> >
>> > Working out from localhost could help you identify the spot it doesn’t work.
>> >
>> >
>> > Brian
>> > <F12426AB-B450-4068-AFCB-0938302BCA5B>
>> > Brian Loomis
>> > Customated
>> > 910 Main Street Suite 337
>> > Boise, ID 83702
>> > (208) 841-0337
>> > http://www.customated.com
>> >
>> > On December 6, 2017 at 9:16:59 PM, Tami Williams (tami@asktami.com) wrote:
>> >
>> >> When FileMaker Server 14 Admin Database->Security, use SSL for database connections is turned on, if I use the IP address of the FM Server and Port 443 in the Lasso Site Admin FileMaker host database connection I can NOT see any of my FIleMaker databases.
>> >>
>> >> Lasso 8.5 + Apache are on one machine, FileMaker 14 Server is on another.
>> >>
>> >> How do I get my Lasso Apache web machine to talk to my FileMaker 14 Server machine via port 443/SSL?
>> >>
>> >>
>> >> Thanks in advance.
>> >>
>> >>
>> >>
>> >>
>> >>
>> >> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>> >> "It's better to burn out than to fade away."
>> >>
>> >> Tami Williams
>> >> Creative Computing
>> >> Let us help you make frustrating, costly, and inefficient processes more efficient, less costly and scalable.
>> >> FileMaker, Lasso and MySQL specialists.
>> >>
>> >> Tel/Fax: 770.457.3221
>> >> E-Mail: info@asktami.com
>> >> Web: http://www.asktami.com/
>> >> LinkedIn: http://www.linkedin.com/in/asktami
>> >> Twitter: http://twitter.com/asktami
>> >> Skype: tamiwilliamsusa
>> >>
>> >> FileMaker Pro 11-16 Certified Developer | FileMaker Reseller | FileMaker Business Alliance Member | Certified Lasso Developer | Lasso Professional Alliance Member
>> >>
>> >> ------
>> >>
>> >> Start collecting data in minutes and cut your inspection times in half with ccAudits, our FileMaker checklist template creation app available at www.ccAudits.com. Create audit and inspection checklists, surveys and other mobile forms for use on or offline, edit your forms, file reports, and add skip logic without writing any code.
>> >>
>> >> ------
>> >>
>> >> If you want to receive sporadic email from Creative Computing regarding news at the company and announcements about upcoming Lasso webinars and online classes, please opt-in at http://tinyurl.com/yj7eqlg
>>
>>
>> _______________________________________________
>> LKC mailing list
>> LKC@lassoexpert.com
>> http://lassoexpert.com/mailman/listinfo/lkc
> _______________________________________________
> LKC mailing list
> LKC@lassoexpert.com
> http://lassoexpert.com/mailman/listinfo/lkc
#############################################################
This message is sent to you because you are subscribed to
the mailing list Lasso Lasso@lists.lassosoft.com
Official list archives available at http://www.lassotalk.com
To unsubscribe, E-mail to: <Lasso-unsubscribe@lists.lassosoft.com>
Send administrative queries to <Lasso-request@lists.lassosoft.com>
On another note I have the SAME problem using FileMaker 16 Server and Lasso 8.5, turning on FMS 16’s SSL I can open the databases but Lasso can not see the databases if in Lasso Site Admin Database Host connection I use the IP of the FMS16 server with port 443 or IP:443, Lasso can only see the databases if I use host address = IP and port = 80.
Has anyone gotten FMS16 default SSL to work with Lasso so that Lasso’s talking to FM via SSL?
Thanks in advance.
> On Dec 7, 2017, at 10:39 AM, Brian Loomis <brian@customated.com> wrote:
>
> What is the vintage of the server running Filemaker? OS and Version?
>
> I am not up to speed on Filemaker but I can tell you in Mac on Ruby I have to update the certificates in the OS often enough because API calls over SSL stop working. I do this using brew to update openssl.
>
> in this part of your email:
>
> _________________
>
> If I go to https://127.0.0.1/fmi/xml/FMPXMLRESULT.xml?-dbnames
>
> I get a message about the "FMI Default Certificate” and “invalid certificate, host name mismatch” but if I say continue anyway I see the list of database names.
>
> _________________
>
> Are you able to tell what the hostname is? If the hostname of the FMSA server is routable on your network you might try that in Lasso instead of the IP.
>
> https://community.filemaker.com/thread/84454
>
> If you do have to install a new certificate to get FMS to work I suggest using let’s_encrypt.
>
> Alternatively, you could use something like stunnel on the FMSA server to proxy all your SSL for you and just send it to the FMSA server as plain http once it gets on the local machine. This would keep you form having to do any janky FMSA certificate changes. IMHO messing with the Tomcat stuff on FMSA is a recipe for trouble unless you totally know what you are doing.
>
> https://www.stunnel.org/index.html
>
>
> Brian
> <3FBA85FB-7278-4E74-880D-AA8E068544F8>
> Brian Loomis
> Customated
> 910 Main Street Suite 337
> Boise, ID 83702
> (208) 841-0337
> http://www.customated.com
>
> On December 6, 2017 at 11:30:01 PM, Tami Williams (tami@asktami.com) wrote:
>
>> On the FileMaker 14 Server machine if I do
>> http://localhost/fmi/xml/FMPXMLRESULT.xml?-dbnames
>> or
>> http://127.0.0.1/fmi/xml/FMPXMLRESULT.xml?-dbnames
>>
>> I get a list of database names
>>
>> BUT if I do
>>
>> http://localhost:443/fmi/xml/FMPXMLRESULT.xml?-dbnames
>> or
>> http://127.0.0.1:443/fmi/xml/FMPXMLRESULT.xml?-dbnames
>>
>> I get
>>
>> "Your browser (or proxy) sent a request that this server could not understand.”
>>
>>
>> If I go to https://127.0.0.1/fmi/xml/FMPXMLRESULT.xml?-dbnames
>>
>> I get a message about the "FMI Default Certificate” and “invalid certificate, host name mismatch” but if I say continue anyway I see the list of database names.
>>
>> The same happens if I hit the FMS machine from another machine using the IP of the FMS machine - https://10.211.55.4/fmi/xml/FMPXMLRESULT.xml?-dbnames
>>
>> But no matter what I can’t get the Lasso machine to see the FIleMaker databases once I turn on use SSL for database connections.
>>
>> Any other suggestions?
>>
>> Thanks in advance.
>>
>>
>> > On Dec 6, 2017, at 11:31 PM, Brian Loomis <brianloomis1@me.com> wrote:
>> >
>> > Have you tried adding :443 to the end of the IP address to see what it does?
>> >
>> > Can you call the /fmi/ api on port :443 on that machine outside of lasso and apache with curl or another tool? Does it work local to the FMP server on 127.0.0.1:443 or 0.0.0.0:443 ? What about via the private IP? Can you curl SSL on it to the FMI API?
>> >
>> > Working out from localhost could help you identify the spot it doesn’t work.
>> >
>> >
>> > Brian
>> > <F12426AB-B450-4068-AFCB-0938302BCA5B>
>> > Brian Loomis
>> > Customated
>> > 910 Main Street Suite 337
>> > Boise, ID 83702
>> > (208) 841-0337
>> > http://www.customated.com
>> >
>> > On December 6, 2017 at 9:16:59 PM, Tami Williams (tami@asktami.com) wrote:
>> >
>> >> When FileMaker Server 14 Admin Database->Security, use SSL for database connections is turned on, if I use the IP address of the FM Server and Port 443 in the Lasso Site Admin FileMaker host database connection I can NOT see any of my FIleMaker databases.
>> >>
>> >> Lasso 8.5 + Apache are on one machine, FileMaker 14 Server is on another.
>> >>
>> >> How do I get my Lasso Apache web machine to talk to my FileMaker 14 Server machine via port 443/SSL?
>> >>
>> >>
>> >> Thanks in advance.
>> >>
>> >>
>> >>
>> >>
>> >>
>> >> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>> >> "It's better to burn out than to fade away."
>> >>
>> >> Tami Williams
>> >> Creative Computing
>> >> Let us help you make frustrating, costly, and inefficient processes more efficient, less costly and scalable.
>> >> FileMaker, Lasso and MySQL specialists.
>> >>
>> >> Tel/Fax: 770.457.3221
>> >> E-Mail: info@asktami.com
>> >> Web: http://www.asktami.com/
>> >> LinkedIn: http://www.linkedin.com/in/asktami
>> >> Twitter: http://twitter.com/asktami
>> >> Skype: tamiwilliamsusa
>> >>
>> >> FileMaker Pro 11-16 Certified Developer | FileMaker Reseller | FileMaker Business Alliance Member | Certified Lasso Developer | Lasso Professional Alliance Member
>> >>
>> >> ------
>> >>
>> >> Start collecting data in minutes and cut your inspection times in half with ccAudits, our FileMaker checklist template creation app available at www.ccAudits.com. Create audit and inspection checklists, surveys and other mobile forms for use on or offline, edit your forms, file reports, and add skip logic without writing any code.
>> >>
>> >> ------
>> >>
>> >> If you want to receive sporadic email from Creative Computing regarding news at the company and announcements about upcoming Lasso webinars and online classes, please opt-in at http://tinyurl.com/yj7eqlg
>>
>>
>> _______________________________________________
>> LKC mailing list
>> LKC@lassoexpert.com
>> http://lassoexpert.com/mailman/listinfo/lkc
> _______________________________________________
> LKC mailing list
> LKC@lassoexpert.com
> http://lassoexpert.com/mailman/listinfo/lkc
#############################################################
This message is sent to you because you are subscribed to
the mailing list Lasso Lasso@lists.lassosoft.com
Official list archives available at http://www.lassotalk.com
To unsubscribe, E-mail to: <Lasso-unsubscribe@lists.lassosoft.com>
Send administrative queries to <Lasso-request@lists.lassosoft.com>
Search
Thread Keywords
No keywords defined. Log in to define appropriate keywords
Lasso Programming
This site manages and broadcasts several email lists pertaining to Lasso Programming and technologies related and used by Lasso developers. Sign up today!