8.6 to FMS via SSL

classic Classic list List threaded Threaded
14 messages Options
Reply | Threaded
Open this post in threaded view
|

8.6 to FMS via SSL

maxwellk2
Lasso 8.6 on CentOS 6 (virtualized)
FileMaker 12 on Mac OS X 10.8

Need to setup a Lasso 8.6 connector to FileMaker Server over a WAN. I know this isn’t ideal and take a performance hit, but the two LANs are just one hop from each other. There’s minimal risk with the one hop but ideally want the WAN connection to be secure.

I’ve tested this a couple of times with no luck, but wanted to confirm that Lasso 8.6 *cannot* talk to FileMaker Server via HTTPS/SSL on port 443. There was a Lasso 9.2.6 release that added "Filemaker datasource SSL support. It now checks for port 443 and will do https in that case.” Is there a way to add this functionality to 8.6?

If HTTPS/SSL isn’t possible, should I be looking into OpenVPN or something else to run on the CentOS machine? The Mac FileMaker Server is already running an L2TP VPN.

Much appreciated,
Max

#############################################################
This message is sent to you because you are subscribed to
  the mailing list Lasso [hidden email]
Official list archives available at http://www.lassotalk.com
To unsubscribe, E-mail to: <[hidden email]>
Send administrative queries to  <[hidden email]>
Reply | Threaded
Open this post in threaded view
|

Re: 8.6 to FMS via SSL

stevepiercy
Have you tried either using -host=array(connection stuff with -port=443) in your inline?

Instead of the Lasso's FMS connector, have you tried ODBC as the connector?

--steve


On 4/26/14 at 1:39 PM, [hidden email] (Maxwell Klein) pronounced:

> Lasso 8.6 on CentOS 6 (virtualized)
> FileMaker 12 on Mac OS X 10.8
>
> Need to setup a Lasso 8.6 connector to FileMaker Server over a WAN. I know this
> isn’t ideal and take a performance hit, but the two LANs are just one hop from each
> other. There’s minimal risk with the one hop but ideally want the WAN connection to
> be secure.
>
> I’ve tested this a couple of times with no luck, but wanted to confirm that Lasso
> 8.6 *cannot* talk to FileMaker Server via HTTPS/SSL on port 443. There was a Lasso
> 9.2.6 release that added "Filemaker datasource SSL support. It now checks for port
> 443 and will do https in that case.” Is there a way to add this functionality to
> 8.6?
>
> If HTTPS/SSL isn’t possible, should I be looking into OpenVPN or something else to
> run on the CentOS machine? The Mac FileMaker Server is already running an L2TP VPN.
>
> Much appreciated,
> Max
>
> #############################################################
> This message is sent to you because you are subscribed to
>   the mailing list Lasso [hidden email]
> Official list archives available at http://www.lassotalk.com
> To unsubscribe, E-mail to: <[hidden email]>
> Send administrative queries to  <[hidden email]>

-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
Steve Piercy               Web Site Builder               Soquel, CA
<[hidden email]>                  <http://www.StevePiercy.com/>

#############################################################
This message is sent to you because you are subscribed to
  the mailing list Lasso [hidden email]
Official list archives available at http://www.lassotalk.com
To unsubscribe, E-mail to: <[hidden email]>
Send administrative queries to  <[hidden email]>
Reply | Threaded
Open this post in threaded view
|

Re: 8.6 to FMS via SSL

maxwellk2
Good ideas Steve, will give them a try. Really don’t want to resort to a VPN, have a feeling that will become a point of failure if either side randomly disconnects, the connection needs to be 100% stable 24/7/365.

Thanks,
Max




On Apr 26, 2014, at 2:30 PM, Steve Piercy - Web Site Builder <[hidden email]> wrote:

> Have you tried either using -host=array(connection stuff with -port=443) in your inline?
>
> Instead of the Lasso's FMS connector, have you tried ODBC as the connector?
>
> --steve
>
>
> On 4/26/14 at 1:39 PM, [hidden email] (Maxwell Klein) pronounced:
>
>> Lasso 8.6 on CentOS 6 (virtualized)
>> FileMaker 12 on Mac OS X 10.8
>>
>> Need to setup a Lasso 8.6 connector to FileMaker Server over a WAN. I know this
>> isn’t ideal and take a performance hit, but the two LANs are just one hop from each
>> other. There’s minimal risk with the one hop but ideally want the WAN connection to
>> be secure.
>>
>> I’ve tested this a couple of times with no luck, but wanted to confirm that Lasso
>> 8.6 *cannot* talk to FileMaker Server via HTTPS/SSL on port 443. There was a Lasso
>> 9.2.6 release that added "Filemaker datasource SSL support. It now checks for port
>> 443 and will do https in that case.” Is there a way to add this functionality to
>> 8.6?
>>
>> If HTTPS/SSL isn’t possible, should I be looking into OpenVPN or something else to
>> run on the CentOS machine? The Mac FileMaker Server is already running an L2TP VPN.
>>
>> Much appreciated,
>> Max
>>
>> #############################################################
>> This message is sent to you because you are subscribed to
>>  the mailing list Lasso [hidden email]
>> Official list archives available at http://www.lassotalk.com
>> To unsubscribe, E-mail to: <[hidden email]>
>> Send administrative queries to  <[hidden email]>
>
> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
> Steve Piercy               Web Site Builder               Soquel, CA
> <[hidden email]>                  <http://www.StevePiercy.com/>
>
> #############################################################
> This message is sent to you because you are subscribed to
>  the mailing list Lasso [hidden email]
> Official list archives available at http://www.lassotalk.com
> To unsubscribe, E-mail to: <[hidden email]>
> Send administrative queries to  <[hidden email]>

#############################################################
This message is sent to you because you are subscribed to
  the mailing list Lasso [hidden email]
Official list archives available at http://www.lassotalk.com
To unsubscribe, E-mail to: <[hidden email]>
Send administrative queries to  <[hidden email]>
Reply | Threaded
Open this post in threaded view
|

Re: 8.6 to FMS via SSL

maxwellk2
In reply to this post by stevepiercy
No luck. Got -Host working with -port=80 just fine, but switching to -port=443 gives:

        Error_Msg: Error while performing FileMaker database -search action. Find criteria are empty.
        Error_Code: 400

No amount of tweaking the inline params seemed to make a difference.

Will try the ODBC connector next, but switching to Lasso 9 could be in the cards as well.

Thanks,
Max


On Apr 26, 2014, at 2:30 PM, Steve Piercy - Web Site Builder <[hidden email]> wrote:

> Have you tried either using -host=array(connection stuff with -port=443) in your inline?
>
> Instead of the Lasso's FMS connector, have you tried ODBC as the connector?
>
> --steve
>
>
> On 4/26/14 at 1:39 PM, [hidden email] (Maxwell Klein) pronounced:
>
>> Lasso 8.6 on CentOS 6 (virtualized)
>> FileMaker 12 on Mac OS X 10.8
>>
>> Need to setup a Lasso 8.6 connector to FileMaker Server over a WAN. I know this
>> isn’t ideal and take a performance hit, but the two LANs are just one hop from each
>> other. There’s minimal risk with the one hop but ideally want the WAN connection to
>> be secure.
>>
>> I’ve tested this a couple of times with no luck, but wanted to confirm that Lasso
>> 8.6 *cannot* talk to FileMaker Server via HTTPS/SSL on port 443. There was a Lasso
>> 9.2.6 release that added "Filemaker datasource SSL support. It now checks for port
>> 443 and will do https in that case.” Is there a way to add this functionality to
>> 8.6?
>>
>> If HTTPS/SSL isn’t possible, should I be looking into OpenVPN or something else to
>> run on the CentOS machine? The Mac FileMaker Server is already running an L2TP VPN.
>>
>> Much appreciated,
>> Max
>>
>> #############################################################
>> This message is sent to you because you are subscribed to
>>  the mailing list Lasso [hidden email]
>> Official list archives available at http://www.lassotalk.com
>> To unsubscribe, E-mail to: <[hidden email]>
>> Send administrative queries to  <[hidden email]>
>
> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
> Steve Piercy               Web Site Builder               Soquel, CA
> <[hidden email]>                  <http://www.StevePiercy.com/>
>
> #############################################################
> This message is sent to you because you are subscribed to
>  the mailing list Lasso [hidden email]
> Official list archives available at http://www.lassotalk.com
> To unsubscribe, E-mail to: <[hidden email]>
> Send administrative queries to  <[hidden email]>

#############################################################
This message is sent to you because you are subscribed to
  the mailing list Lasso [hidden email]
Official list archives available at http://www.lassotalk.com
To unsubscribe, E-mail to: <[hidden email]>
Send administrative queries to  <[hidden email]>
Reply | Threaded
Open this post in threaded view
|

Re: 8.6 to FMS via SSL

stevepiercy
Make sure that the FMS server accepts connections over 443, or
whatever port is configured on that server to accept HTTPS.  Do
so by manually constructing the request URL from XML query
string that you get from action_param and the host.  In other
words, bypass Lasso and go directly to the FMS.

--steve


On 4/27/14 at 1:18 AM, [hidden email] (Maxwell Klein) pronounced:

>No luck. Got -Host working with -port=80 just fine, but
>switching to -port=443 gives:
>
>Error_Msg: Error while performing FileMaker database -search
>action. Find criteria are empty.
>Error_Code: 400
>
>No amount of tweaking the inline params seemed to make a difference.
>
>Will try the ODBC connector next, but switching to Lasso 9
>could be in the cards as well.
>
>Thanks,
>Max
>
>
>On Apr 26, 2014, at 2:30 PM, Steve Piercy - Web Site Builder
><[hidden email]> wrote:
>
>>Have you tried either using -host=array(connection stuff with -port=443) in your
>inline?
>>
>>Instead of the Lasso's FMS connector, have you tried ODBC as the connector?
>>
>>--steve
>>
>>
>>On 4/26/14 at 1:39 PM, [hidden email] (Maxwell Klein) pronounced:
>>
>>> Lasso 8.6 on CentOS 6 (virtualized)
>>> FileMaker 12 on Mac OS X 10.8
>>>   Need to setup a Lasso 8.6 connector to FileMaker Server
>>>over a WAN. I know this  isn’t ideal and take a performance
>>>hit, but the two LANs are just one hop from
>each
>>> other. There’s minimal risk with the one hop but ideally want the WAN connection
>to
>>> be secure.
>>>   I’ve tested this a couple of times with no luck, but
>>>wanted to confirm that
>Lasso
>>> 8.6 *cannot* talk to FileMaker Server via HTTPS/SSL on port 443. There was a
>Lasso
>>> 9.2.6 release that added "Filemaker datasource SSL support. It now checks for
>port
>>>  443 and will do https in that case.” Is there a way to
>>>add this functionality to  8.6?
>>>   If HTTPS/SSL isn’t possible, should I be looking into
>>>OpenVPN or something else
>to
>>> run on the CentOS machine? The Mac FileMaker Server is already running an L2TP
>VPN.
>>>   Much appreciated,
>>> Max
>>>   #############################################################
>>> This message is sent to you because you are subscribed to
>>>  the mailing list Lasso [hidden email]
>>> Official list archives available at http://www.lassotalk.com
>>> To unsubscribe, E-mail to: <[hidden email]>
>>> Send administrative queries to  <[hidden email]>
>>
>>-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
>>Steve Piercy               Web Site Builder               Soquel, CA
>><[hidden email]>                  <http://www.StevePiercy.com/>
>>
>>#############################################################
>>This message is sent to you because you are subscribed to
>>the mailing list Lasso [hidden email]
>>Official list archives available at http://www.lassotalk.com
>>To unsubscribe, E-mail to: <[hidden email]>
>>Send administrative queries to  <[hidden email]>
>
>#############################################################
>This message is sent to you because you are subscribed to
>the mailing list Lasso [hidden email]
>Official list archives available at http://www.lassotalk.com
>To unsubscribe, E-mail to: <[hidden email]>
>Send administrative queries to  <[hidden email]>

-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
-- --
Steve Piercy               Web Site Builder              
Soquel, CA
<[hidden email]>                  <http://www.StevePiercy.com/>

#############################################################
This message is sent to you because you are subscribed to
  the mailing list Lasso [hidden email]
Official list archives available at http://www.lassotalk.com
To unsubscribe, E-mail to: <[hidden email]>
Send administrative queries to  <[hidden email]>
Reply | Threaded
Open this post in threaded view
|

Re: 8.6 to FMS via SSL

maxwellk2
Yep, construct the manual URL often for monitoring systems to ensure certain databases are open, and always with HTTPS  - works fine there and manually in browsers, just not via Lasso 8.6 connector.

May just put in a call to LassoSoft support on Monday and see if they have any suggestions.

Thanks,
Max

On Apr 27, 2014, at 11:04 AM, Steve Piercy - Web Site Builder <[hidden email]> wrote:

> Make sure that the FMS server accepts connections over 443, or whatever port is configured on that server to accept HTTPS.  Do so by manually constructing the request URL from XML query string that you get from action_param and the host.  In other words, bypass Lasso and go directly to the FMS.
>
> --steve
>
>
> On 4/27/14 at 1:18 AM, [hidden email] (Maxwell Klein) pronounced:
>
>> No luck. Got -Host working with -port=80 just fine, but switching to -port=443 gives:
>>
>> Error_Msg: Error while performing FileMaker database -search action. Find criteria are empty.
>> Error_Code: 400
>>
>> No amount of tweaking the inline params seemed to make a difference.
>>
>> Will try the ODBC connector next, but switching to Lasso 9 could be in the cards as well.
>>
>> Thanks,
>> Max
>>
>>
>> On Apr 26, 2014, at 2:30 PM, Steve Piercy - Web Site Builder <[hidden email]> wrote:
>>
>>> Have you tried either using -host=array(connection stuff with -port=443) in your
>> inline?
>>>
>>> Instead of the Lasso's FMS connector, have you tried ODBC as the connector?
>>>
>>> --steve
>>>
>>>
>>> On 4/26/14 at 1:39 PM, [hidden email] (Maxwell Klein) pronounced:
>>>
>>>> Lasso 8.6 on CentOS 6 (virtualized)
>>>> FileMaker 12 on Mac OS X 10.8
>>>>  Need to setup a Lasso 8.6 connector to FileMaker Server over a WAN. I know this  isn’t ideal and take a performance hit, but the two LANs are just one hop from
>> each
>>>> other. There’s minimal risk with the one hop but ideally want the WAN connection
>> to
>>>> be secure.
>>>>  I’ve tested this a couple of times with no luck, but wanted to confirm that
>> Lasso
>>>> 8.6 *cannot* talk to FileMaker Server via HTTPS/SSL on port 443. There was a
>> Lasso
>>>> 9.2.6 release that added "Filemaker datasource SSL support. It now checks for
>> port
>>>> 443 and will do https in that case.” Is there a way to add this functionality to  8.6?
>>>>  If HTTPS/SSL isn’t possible, should I be looking into OpenVPN or something else
>> to
>>>> run on the CentOS machine? The Mac FileMaker Server is already running an L2TP
>> VPN.
>>>>  Much appreciated,
>>>> Max
>>>>  #############################################################
>>>> This message is sent to you because you are subscribed to
>>>> the mailing list Lasso [hidden email]
>>>> Official list archives available at http://www.lassotalk.com
>>>> To unsubscribe, E-mail to: <[hidden email]>
>>>> Send administrative queries to  <[hidden email]>
>>>
>>> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
>>> Steve Piercy               Web Site Builder               Soquel, CA
>>> <[hidden email]>                  <http://www.StevePiercy.com/>
>>>
>>> #############################################################
>>> This message is sent to you because you are subscribed to
>>> the mailing list Lasso [hidden email]
>>> Official list archives available at http://www.lassotalk.com
>>> To unsubscribe, E-mail to: <[hidden email]>
>>> Send administrative queries to  <[hidden email]>
>>
>> #############################################################
>> This message is sent to you because you are subscribed to
>> the mailing list Lasso [hidden email]
>> Official list archives available at http://www.lassotalk.com
>> To unsubscribe, E-mail to: <[hidden email]>
>> Send administrative queries to  <[hidden email]>
>
> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
> Steve Piercy               Web Site Builder               Soquel, CA
> <[hidden email]>                  <http://www.StevePiercy.com/>
>
> #############################################################
> This message is sent to you because you are subscribed to
> the mailing list Lasso [hidden email]
> Official list archives available at http://www.lassotalk.com
> To unsubscribe, E-mail to: <[hidden email]>
> Send administrative queries to  <[hidden email]>

#############################################################
This message is sent to you because you are subscribed to
  the mailing list Lasso [hidden email]
Official list archives available at http://www.lassotalk.com
To unsubscribe, E-mail to: <[hidden email]>
Send administrative queries to  <[hidden email]>
Reply | Threaded
Open this post in threaded view
|

Re: 8.6 to FMS via SSL

stevepiercy
Instead of the FM connector, have you tried the ODBC connector?

--steve


On 4/27/14 at 1:10 PM, [hidden email] (Maxwell Klein) pronounced:

> Yep, construct the manual URL often for monitoring systems to ensure certain
> databases are open, and always with HTTPS  - works fine there and manually in
> browsers, just not via Lasso 8.6 connector.
>
> May just put in a call to LassoSoft support on Monday and see if they have any
> suggestions.
>
> Thanks,
> Max
>
> On Apr 27, 2014, at 11:04 AM, Steve Piercy - Web Site Builder <[hidden email]>
> wrote:
>
> > Make sure that the FMS server accepts connections over 443, or whatever port is
> configured on that server to accept HTTPS.  Do so by manually constructing the
> request URL from XML query string that you get from action_param and the host.  In
> other words, bypass Lasso and go directly to the FMS.
> >
> > --steve
> >
> >
> > On 4/27/14 at 1:18 AM, [hidden email] (Maxwell Klein) pronounced:
> >
> >> No luck. Got -Host working with -port=80 just fine, but switching to -port=443
> gives:
> >>
> >> Error_Msg: Error while performing FileMaker database -search action. Find
> criteria are empty.
> >> Error_Code: 400
> >>
> >> No amount of tweaking the inline params seemed to make a difference.
> >>
> >> Will try the ODBC connector next, but switching to Lasso 9 could be in the cards
> as well.
> >>
> >> Thanks,
> >> Max
> >>
> >>
> >> On Apr 26, 2014, at 2:30 PM, Steve Piercy - Web Site Builder
> <[hidden email]> wrote:
> >>
> >>> Have you tried either using -host=array(connection stuff with -port=443) in
> your
> >> inline?
> >>>
> >>> Instead of the Lasso's FMS connector, have you tried ODBC as the connector?
> >>>
> >>> --steve
> >>>
> >>>
> >>> On 4/26/14 at 1:39 PM, [hidden email] (Maxwell Klein) pronounced:
> >>>
> >>>> Lasso 8.6 on CentOS 6 (virtualized)
> >>>> FileMaker 12 on Mac OS X 10.8
> >>>>  Need to setup a Lasso 8.6 connector to FileMaker Server over a WAN. I know
> this  isn’t ideal and take a performance hit, but the two LANs are just one hop
> from
> >> each
> >>>> other. There’s minimal risk with the one hop but ideally want the WAN
> connection
> >> to
> >>>> be secure.
> >>>>  I’ve tested this a couple of times with no luck, but wanted to confirm that
> >> Lasso
> >>>> 8.6 *cannot* talk to FileMaker Server via HTTPS/SSL on port 443. There was a
> >> Lasso
> >>>> 9.2.6 release that added "Filemaker datasource SSL support. It now checks for
> >> port
> >>>> 443 and will do https in that case.” Is there a way to add this functionality
> to  8.6?
> >>>>  If HTTPS/SSL isn’t possible, should I be looking into OpenVPN or something
> else
> >> to
> >>>> run on the CentOS machine? The Mac FileMaker Server is already running an L2TP
> >> VPN.
> >>>>  Much appreciated,
> >>>> Max
> >>>>  #############################################################
> >>>> This message is sent to you because you are subscribed to
> >>>> the mailing list Lasso [hidden email]
> >>>> Official list archives available at http://www.lassotalk.com
> >>>> To unsubscribe, E-mail to: <[hidden email]>
> >>>> Send administrative queries to  <[hidden email]>
> >>>
> >>> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
> >>> Steve Piercy               Web Site Builder               Soquel, CA
> >>> <[hidden email]>                  <http://www.StevePiercy.com/>
> >>>
> >>> #############################################################
> >>> This message is sent to you because you are subscribed to
> >>> the mailing list Lasso [hidden email]
> >>> Official list archives available at http://www.lassotalk.com
> >>> To unsubscribe, E-mail to: <[hidden email]>
> >>> Send administrative queries to  <[hidden email]>
> >>
> >> #############################################################
> >> This message is sent to you because you are subscribed to
> >> the mailing list Lasso [hidden email]
> >> Official list archives available at http://www.lassotalk.com
> >> To unsubscribe, E-mail to: <[hidden email]>
> >> Send administrative queries to  <[hidden email]>
> >
> > -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
> > Steve Piercy               Web Site Builder               Soquel, CA
> > <[hidden email]>                  <http://www.StevePiercy.com/>
> >
> > #############################################################
> > This message is sent to you because you are subscribed to
> > the mailing list Lasso [hidden email]
> > Official list archives available at http://www.lassotalk.com
> > To unsubscribe, E-mail to: <[hidden email]>
> > Send administrative queries to  <[hidden email]>
>
> #############################################################
> This message is sent to you because you are subscribed to
>   the mailing list Lasso [hidden email]
> Official list archives available at http://www.lassotalk.com
> To unsubscribe, E-mail to: <[hidden email]>
> Send administrative queries to  <[hidden email]>

-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
Steve Piercy               Web Site Builder               Soquel, CA
<[hidden email]>                  <http://www.StevePiercy.com/>

#############################################################
This message is sent to you because you are subscribed to
  the mailing list Lasso [hidden email]
Official list archives available at http://www.lassotalk.com
To unsubscribe, E-mail to: <[hidden email]>
Send administrative queries to  <[hidden email]>
Reply | Threaded
Open this post in threaded view
|

Re: 8.6 to FMS via SSL

Johan Solve
An SSH tunnel might be easier to setup and keep up than VPN. We use that
for FMS connections over WAN in a few cases, works excellent.
A local reverse proxy might also be workable, although I haven't tried
that.


2014-04-27 22:40 GMT+02:00 Steve Piercy - Web Site Builder <
[hidden email]>:

> Instead of the FM connector, have you tried the ODBC connector?
>
> --steve
>
>
> On 4/27/14 at 1:10 PM, [hidden email] (Maxwell Klein) pronounced:
>
> > Yep, construct the manual URL often for monitoring systems to ensure
> certain
> > databases are open, and always with HTTPS  - works fine there and
> manually in
> > browsers, just not via Lasso 8.6 connector.
> >
> > May just put in a call to LassoSoft support on Monday and see if they
> have any
> > suggestions.
> >
> > Thanks,
> > Max
> >
> > On Apr 27, 2014, at 11:04 AM, Steve Piercy - Web Site Builder
> <[hidden email]>
> > wrote:
> >
> > > Make sure that the FMS server accepts connections over 443, or
> whatever port is
> > configured on that server to accept HTTPS.  Do so by manually
> constructing the
> > request URL from XML query string that you get from action_param and the
> host.  In
> > other words, bypass Lasso and go directly to the FMS.
> > >
> > > --steve
> > >
> > >
> > > On 4/27/14 at 1:18 AM, [hidden email] (Maxwell Klein) pronounced:
> > >
> > >> No luck. Got -Host working with -port=80 just fine, but switching to
> -port=443
> > gives:
> > >>
> > >> Error_Msg: Error while performing FileMaker database -search action.
> Find
> > criteria are empty.
> > >> Error_Code: 400
> > >>
> > >> No amount of tweaking the inline params seemed to make a difference.
> > >>
> > >> Will try the ODBC connector next, but switching to Lasso 9 could be
> in the cards
> > as well.
> > >>
> > >> Thanks,
> > >> Max
> > >>
> > >>
> > >> On Apr 26, 2014, at 2:30 PM, Steve Piercy - Web Site Builder
> > <[hidden email]> wrote:
> > >>
> > >>> Have you tried either using -host=array(connection stuff with
> -port=443) in
> > your
> > >> inline?
> > >>>
> > >>> Instead of the Lasso's FMS connector, have you tried ODBC as the
> connector?
> > >>>
> > >>> --steve
> > >>>
> > >>>
> > >>> On 4/26/14 at 1:39 PM, [hidden email] (Maxwell Klein) pronounced:
> > >>>
> > >>>> Lasso 8.6 on CentOS 6 (virtualized)
> > >>>> FileMaker 12 on Mac OS X 10.8
> > >>>>  Need to setup a Lasso 8.6 connector to FileMaker Server over a
> WAN. I know
> > this  isn’t ideal and take a performance hit, but the two LANs are just
> one hop
> > from
> > >> each
> > >>>> other. There’s minimal risk with the one hop but ideally want the
> WAN
> > connection
> > >> to
> > >>>> be secure.
> > >>>>  I’ve tested this a couple of times with no luck, but wanted to
> confirm that
> > >> Lasso
> > >>>> 8.6 *cannot* talk to FileMaker Server via HTTPS/SSL on port 443.
> There was a
> > >> Lasso
> > >>>> 9.2.6 release that added "Filemaker datasource SSL support. It now
> checks for
> > >> port
> > >>>> 443 and will do https in that case.” Is there a way to add this
> functionality
> > to  8.6?
> > >>>>  If HTTPS/SSL isn’t possible, should I be looking into OpenVPN or
> something
> > else
> > >> to
> > >>>> run on the CentOS machine? The Mac FileMaker Server is already
> running an L2TP
> > >> VPN.
> > >>>>  Much appreciated,
> > >>>> Max
> > >>>>  #############################################################
> > >>>> This message is sent to you because you are subscribed to
> > >>>> the mailing list Lasso [hidden email]
> > >>>> Official list archives available at http://www.lassotalk.com
> > >>>> To unsubscribe, E-mail to: <[hidden email]>
> > >>>> Send administrative queries to  <[hidden email]>
> > >>>
> > >>> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
> > >>> Steve Piercy               Web Site Builder               Soquel, CA
> > >>> <[hidden email]>                  <http://www.StevePiercy.com/>
> > >>>
> > >>> #############################################################
> > >>> This message is sent to you because you are subscribed to
> > >>> the mailing list Lasso [hidden email]
> > >>> Official list archives available at http://www.lassotalk.com
> > >>> To unsubscribe, E-mail to: <[hidden email]>
> > >>> Send administrative queries to  <[hidden email]>
> > >>
> > >> #############################################################
> > >> This message is sent to you because you are subscribed to
> > >> the mailing list Lasso [hidden email]
> > >> Official list archives available at http://www.lassotalk.com
> > >> To unsubscribe, E-mail to: <[hidden email]>
> > >> Send administrative queries to  <[hidden email]>
> > >
> > > -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
> > > Steve Piercy               Web Site Builder               Soquel, CA
> > > <[hidden email]>                  <http://www.StevePiercy.com/>
> > >
> > > #############################################################
> > > This message is sent to you because you are subscribed to
> > > the mailing list Lasso [hidden email]
> > > Official list archives available at http://www.lassotalk.com
> > > To unsubscribe, E-mail to: <[hidden email]>
> > > Send administrative queries to  <[hidden email]>
> >
> > #############################################################
> > This message is sent to you because you are subscribed to
> >   the mailing list Lasso [hidden email]
> > Official list archives available at http://www.lassotalk.com
> > To unsubscribe, E-mail to: <[hidden email]>
> > Send administrative queries to  <[hidden email]>
>
> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
> Steve Piercy               Web Site Builder               Soquel, CA
> <[hidden email]>                  <http://www.StevePiercy.com/>
>
> #############################################################
> This message is sent to you because you are subscribed to
>   the mailing list Lasso [hidden email]
> Official list archives available at http://www.lassotalk.com
> To unsubscribe, E-mail to: <[hidden email]>
> Send administrative queries to  <[hidden email]>
>



--
Mvh
Johan Sölve
____________________________________
Montania System AB
Halmstad   Stockholm
http://www.montania.se

Johan Sölve
Mobil +46 709-51 55 70
[hidden email]

Kristinebergsvägen 17, S-302 41 Halmstad, Sweden
Telefon +46 35-136800 |  Fax +46 35-136801
#############################################################
This message is sent to you because you are subscribed to
  the mailing list Lasso [hidden email]
Official list archives available at http://www.lassotalk.com
To unsubscribe, E-mail to: <[hidden email]>
Send administrative queries to  <[hidden email]>
Reply | Threaded
Open this post in threaded view
|

Re: 8.6 to FMS via SSL

maxwellk2
Hi Johan,

A local reverse proxy is an interesting idea, I’ve set one up only once before.

For the SSH connection, how exactly do you have that set up? I’ve established SSH connections from a Mac to Linux for ODBC to MySQL. Used to do it via Terminal, but then found this handy app:

        https://itunes.apple.com/us/app/ssh-tunnel/id734418810?mt=12

But I’ve not setup an SSH connection from Linux to a Mac. What does the SSH command look like and is there anything I need to do on the FMS side? And how do you make sure it’s always open?

Thanks,
Max



On Apr 29, 2014, at 11:18 PM, Johan Solve <[hidden email]> wrote:

> An SSH tunnel might be easier to setup and keep up than VPN. We use that
> for FMS connections over WAN in a few cases, works excellent.
> A local reverse proxy might also be workable, although I haven't tried
> that.
>
>
> 2014-04-27 22:40 GMT+02:00 Steve Piercy - Web Site Builder <
> [hidden email]>:
>
>> Instead of the FM connector, have you tried the ODBC connector?
>>
>> --steve
>>
>>
>> On 4/27/14 at 1:10 PM, [hidden email] (Maxwell Klein) pronounced:
>>
>>> Yep, construct the manual URL often for monitoring systems to ensure
>> certain
>>> databases are open, and always with HTTPS  - works fine there and
>> manually in
>>> browsers, just not via Lasso 8.6 connector.
>>>
>>> May just put in a call to LassoSoft support on Monday and see if they
>> have any
>>> suggestions.
>>>
>>> Thanks,
>>> Max
>>>
>>> On Apr 27, 2014, at 11:04 AM, Steve Piercy - Web Site Builder
>> <[hidden email]>
>>> wrote:
>>>
>>>> Make sure that the FMS server accepts connections over 443, or
>> whatever port is
>>> configured on that server to accept HTTPS.  Do so by manually
>> constructing the
>>> request URL from XML query string that you get from action_param and the
>> host.  In
>>> other words, bypass Lasso and go directly to the FMS.
>>>>
>>>> --steve
>>>>
>>>>
>>>> On 4/27/14 at 1:18 AM, [hidden email] (Maxwell Klein) pronounced:
>>>>
>>>>> No luck. Got -Host working with -port=80 just fine, but switching to
>> -port=443
>>> gives:
>>>>>
>>>>> Error_Msg: Error while performing FileMaker database -search action.
>> Find
>>> criteria are empty.
>>>>> Error_Code: 400
>>>>>
>>>>> No amount of tweaking the inline params seemed to make a difference.
>>>>>
>>>>> Will try the ODBC connector next, but switching to Lasso 9 could be
>> in the cards
>>> as well.
>>>>>
>>>>> Thanks,
>>>>> Max
>>>>>
>>>>>
>>>>> On Apr 26, 2014, at 2:30 PM, Steve Piercy - Web Site Builder
>>> <[hidden email]> wrote:
>>>>>
>>>>>> Have you tried either using -host=array(connection stuff with
>> -port=443) in
>>> your
>>>>> inline?
>>>>>>
>>>>>> Instead of the Lasso's FMS connector, have you tried ODBC as the
>> connector?
>>>>>>
>>>>>> --steve
>>>>>>
>>>>>>
>>>>>> On 4/26/14 at 1:39 PM, [hidden email] (Maxwell Klein) pronounced:
>>>>>>
>>>>>>> Lasso 8.6 on CentOS 6 (virtualized)
>>>>>>> FileMaker 12 on Mac OS X 10.8
>>>>>>> Need to setup a Lasso 8.6 connector to FileMaker Server over a
>> WAN. I know
>>> this  isn’t ideal and take a performance hit, but the two LANs are just
>> one hop
>>> from
>>>>> each
>>>>>>> other. There’s minimal risk with the one hop but ideally want the
>> WAN
>>> connection
>>>>> to
>>>>>>> be secure.
>>>>>>> I’ve tested this a couple of times with no luck, but wanted to
>> confirm that
>>>>> Lasso
>>>>>>> 8.6 *cannot* talk to FileMaker Server via HTTPS/SSL on port 443.
>> There was a
>>>>> Lasso
>>>>>>> 9.2.6 release that added "Filemaker datasource SSL support. It now
>> checks for
>>>>> port
>>>>>>> 443 and will do https in that case.” Is there a way to add this
>> functionality
>>> to  8.6?
>>>>>>> If HTTPS/SSL isn’t possible, should I be looking into OpenVPN or
>> something
>>> else
>>>>> to
>>>>>>> run on the CentOS machine? The Mac FileMaker Server is already
>> running an L2TP
>>>>> VPN.
>>>>>>> Much appreciated,
>>>>>>> Max
>>>>>>> #############################################################
>>>>>>> This message is sent to you because you are subscribed to
>>>>>>> the mailing list Lasso [hidden email]
>>>>>>> Official list archives available at http://www.lassotalk.com
>>>>>>> To unsubscribe, E-mail to: <[hidden email]>
>>>>>>> Send administrative queries to  <[hidden email]>
>>>>>>
>>>>>> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
>>>>>> Steve Piercy               Web Site Builder               Soquel, CA
>>>>>> <[hidden email]>                  <http://www.StevePiercy.com/>
>>>>>>
>>>>>> #############################################################
>>>>>> This message is sent to you because you are subscribed to
>>>>>> the mailing list Lasso [hidden email]
>>>>>> Official list archives available at http://www.lassotalk.com
>>>>>> To unsubscribe, E-mail to: <[hidden email]>
>>>>>> Send administrative queries to  <[hidden email]>
>>>>>
>>>>> #############################################################
>>>>> This message is sent to you because you are subscribed to
>>>>> the mailing list Lasso [hidden email]
>>>>> Official list archives available at http://www.lassotalk.com
>>>>> To unsubscribe, E-mail to: <[hidden email]>
>>>>> Send administrative queries to  <[hidden email]>
>>>>
>>>> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
>>>> Steve Piercy               Web Site Builder               Soquel, CA
>>>> <[hidden email]>                  <http://www.StevePiercy.com/>
>>>>
>>>> #############################################################
>>>> This message is sent to you because you are subscribed to
>>>> the mailing list Lasso [hidden email]
>>>> Official list archives available at http://www.lassotalk.com
>>>> To unsubscribe, E-mail to: <[hidden email]>
>>>> Send administrative queries to  <[hidden email]>
>>>
>>> #############################################################
>>> This message is sent to you because you are subscribed to
>>>  the mailing list Lasso [hidden email]
>>> Official list archives available at http://www.lassotalk.com
>>> To unsubscribe, E-mail to: <[hidden email]>
>>> Send administrative queries to  <[hidden email]>
>>
>> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
>> Steve Piercy               Web Site Builder               Soquel, CA
>> <[hidden email]>                  <http://www.StevePiercy.com/>
>>
>> #############################################################
>> This message is sent to you because you are subscribed to
>>  the mailing list Lasso [hidden email]
>> Official list archives available at http://www.lassotalk.com
>> To unsubscribe, E-mail to: <[hidden email]>
>> Send administrative queries to  <[hidden email]>
>>
>
>
>
> --
> Mvh
> Johan Sölve
> ____________________________________
> Montania System AB
> Halmstad   Stockholm
> http://www.montania.se
>
> Johan Sölve
> Mobil +46 709-51 55 70
> [hidden email]
>
> Kristinebergsvägen 17, S-302 41 Halmstad, Sweden
> Telefon +46 35-136800 |  Fax +46 35-136801
> #############################################################
> This message is sent to you because you are subscribed to
>  the mailing list Lasso [hidden email]
> Official list archives available at http://www.lassotalk.com
> To unsubscribe, E-mail to: <[hidden email]>
> Send administrative queries to  <[hidden email]>

#############################################################
This message is sent to you because you are subscribed to
  the mailing list Lasso [hidden email]
Official list archives available at http://www.lassotalk.com
To unsubscribe, E-mail to: <[hidden email]>
Send administrative queries to  <[hidden email]>
Reply | Threaded
Open this post in threaded view
|

Re: 8.6 to FMS via SSL

Ke Carlton-3
Flavour of linux doesn't really matter for this:

http://www.brandonchecketts.com/archives/creating-a-permanent-ssh-tunnel-between-linux-servers



On 1 May 2014 04:41, Maxwell Klein <[hidden email]> wrote:

> Hi Johan,
>
> A local reverse proxy is an interesting idea, I’ve set one up only once
> before.
>
> For the SSH connection, how exactly do you have that set up? I’ve
> established SSH connections from a Mac to Linux for ODBC to MySQL. Used to
> do it via Terminal, but then found this handy app:
>
>         https://itunes.apple.com/us/app/ssh-tunnel/id734418810?mt=12
>
> But I’ve not setup an SSH connection from Linux to a Mac. What does the
> SSH command look like and is there anything I need to do on the FMS side?
> And how do you make sure it’s always open?
>
> Thanks,
> Max
>
>
>
> On Apr 29, 2014, at 11:18 PM, Johan Solve <[hidden email]> wrote:
>
> > An SSH tunnel might be easier to setup and keep up than VPN. We use that
> > for FMS connections over WAN in a few cases, works excellent.
> > A local reverse proxy might also be workable, although I haven't tried
> > that.
> >
> >
> > 2014-04-27 22:40 GMT+02:00 Steve Piercy - Web Site Builder <
> > [hidden email]>:
> >
> >> Instead of the FM connector, have you tried the ODBC connector?
> >>
> >> --steve
> >>
> >>
> >> On 4/27/14 at 1:10 PM, [hidden email] (Maxwell Klein) pronounced:
> >>
> >>> Yep, construct the manual URL often for monitoring systems to ensure
> >> certain
> >>> databases are open, and always with HTTPS  - works fine there and
> >> manually in
> >>> browsers, just not via Lasso 8.6 connector.
> >>>
> >>> May just put in a call to LassoSoft support on Monday and see if they
> >> have any
> >>> suggestions.
> >>>
> >>> Thanks,
> >>> Max
> >>>
> >>> On Apr 27, 2014, at 11:04 AM, Steve Piercy - Web Site Builder
> >> <[hidden email]>
> >>> wrote:
> >>>
> >>>> Make sure that the FMS server accepts connections over 443, or
> >> whatever port is
> >>> configured on that server to accept HTTPS.  Do so by manually
> >> constructing the
> >>> request URL from XML query string that you get from action_param and
> the
> >> host.  In
> >>> other words, bypass Lasso and go directly to the FMS.
> >>>>
> >>>> --steve
> >>>>
> >>>>
> >>>> On 4/27/14 at 1:18 AM, [hidden email] (Maxwell Klein) pronounced:
> >>>>
> >>>>> No luck. Got -Host working with -port=80 just fine, but switching to
> >> -port=443
> >>> gives:
> >>>>>
> >>>>> Error_Msg: Error while performing FileMaker database -search action.
> >> Find
> >>> criteria are empty.
> >>>>> Error_Code: 400
> >>>>>
> >>>>> No amount of tweaking the inline params seemed to make a difference.
> >>>>>
> >>>>> Will try the ODBC connector next, but switching to Lasso 9 could be
> >> in the cards
> >>> as well.
> >>>>>
> >>>>> Thanks,
> >>>>> Max
> >>>>>
> >>>>>
> >>>>> On Apr 26, 2014, at 2:30 PM, Steve Piercy - Web Site Builder
> >>> <[hidden email]> wrote:
> >>>>>
> >>>>>> Have you tried either using -host=array(connection stuff with
> >> -port=443) in
> >>> your
> >>>>> inline?
> >>>>>>
> >>>>>> Instead of the Lasso's FMS connector, have you tried ODBC as the
> >> connector?
> >>>>>>
> >>>>>> --steve
> >>>>>>
> >>>>>>
> >>>>>> On 4/26/14 at 1:39 PM, [hidden email] (Maxwell Klein)
> pronounced:
> >>>>>>
> >>>>>>> Lasso 8.6 on CentOS 6 (virtualized)
> >>>>>>> FileMaker 12 on Mac OS X 10.8
> >>>>>>> Need to setup a Lasso 8.6 connector to FileMaker Server over a
> >> WAN. I know
> >>> this  isn’t ideal and take a performance hit, but the two LANs are just
> >> one hop
> >>> from
> >>>>> each
> >>>>>>> other. There’s minimal risk with the one hop but ideally want the
> >> WAN
> >>> connection
> >>>>> to
> >>>>>>> be secure.
> >>>>>>> I’ve tested this a couple of times with no luck, but wanted to
> >> confirm that
> >>>>> Lasso
> >>>>>>> 8.6 *cannot* talk to FileMaker Server via HTTPS/SSL on port 443.
> >> There was a
> >>>>> Lasso
> >>>>>>> 9.2.6 release that added "Filemaker datasource SSL support. It now
> >> checks for
> >>>>> port
> >>>>>>> 443 and will do https in that case.” Is there a way to add this
> >> functionality
> >>> to  8.6?
> >>>>>>> If HTTPS/SSL isn’t possible, should I be looking into OpenVPN or
> >> something
> >>> else
> >>>>> to
> >>>>>>> run on the CentOS machine? The Mac FileMaker Server is already
> >> running an L2TP
> >>>>> VPN.
> >>>>>>> Much appreciated,
> >>>>>>> Max
> >>>>>>> #############################################################
> >>>>>>> This message is sent to you because you are subscribed to
> >>>>>>> the mailing list Lasso [hidden email]
> >>>>>>> Official list archives available at http://www.lassotalk.com
> >>>>>>> To unsubscribe, E-mail to: <[hidden email]>
> >>>>>>> Send administrative queries to  <[hidden email]
> >
> >>>>>>
> >>>>>> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
> >>>>>> Steve Piercy               Web Site Builder               Soquel, CA
> >>>>>> <[hidden email]>                  <http://www.StevePiercy.com/
> >
> >>>>>>
> >>>>>> #############################################################
> >>>>>> This message is sent to you because you are subscribed to
> >>>>>> the mailing list Lasso [hidden email]
> >>>>>> Official list archives available at http://www.lassotalk.com
> >>>>>> To unsubscribe, E-mail to: <[hidden email]>
> >>>>>> Send administrative queries to  <[hidden email]>
> >>>>>
> >>>>> #############################################################
> >>>>> This message is sent to you because you are subscribed to
> >>>>> the mailing list Lasso [hidden email]
> >>>>> Official list archives available at http://www.lassotalk.com
> >>>>> To unsubscribe, E-mail to: <[hidden email]>
> >>>>> Send administrative queries to  <[hidden email]>
> >>>>
> >>>> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
> >>>> Steve Piercy               Web Site Builder               Soquel, CA
> >>>> <[hidden email]>                  <http://www.StevePiercy.com/>
> >>>>
> >>>> #############################################################
> >>>> This message is sent to you because you are subscribed to
> >>>> the mailing list Lasso [hidden email]
> >>>> Official list archives available at http://www.lassotalk.com
> >>>> To unsubscribe, E-mail to: <[hidden email]>
> >>>> Send administrative queries to  <[hidden email]>
> >>>
> >>> #############################################################
> >>> This message is sent to you because you are subscribed to
> >>>  the mailing list Lasso [hidden email]
> >>> Official list archives available at http://www.lassotalk.com
> >>> To unsubscribe, E-mail to: <[hidden email]>
> >>> Send administrative queries to  <[hidden email]>
> >>
> >> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
> >> Steve Piercy               Web Site Builder               Soquel, CA
> >> <[hidden email]>                  <http://www.StevePiercy.com/>
> >>
> >> #############################################################
> >> This message is sent to you because you are subscribed to
> >>  the mailing list Lasso [hidden email]
> >> Official list archives available at http://www.lassotalk.com
> >> To unsubscribe, E-mail to: <[hidden email]>
> >> Send administrative queries to  <[hidden email]>
> >>
> >
> >
> >
> > --
> > Mvh
> > Johan Sölve
> > ____________________________________
> > Montania System AB
> > Halmstad   Stockholm
> > http://www.montania.se
> >
> > Johan Sölve
> > Mobil +46 709-51 55 70
> > [hidden email]
> >
> > Kristinebergsvägen 17, S-302 41 Halmstad, Sweden
> > Telefon +46 35-136800 |  Fax +46 35-136801
> > #############################################################
> > This message is sent to you because you are subscribed to
> >  the mailing list Lasso [hidden email]
> > Official list archives available at http://www.lassotalk.com
> > To unsubscribe, E-mail to: <[hidden email]>
> > Send administrative queries to  <[hidden email]>
>
> #############################################################
> This message is sent to you because you are subscribed to
>   the mailing list Lasso [hidden email]
> Official list archives available at http://www.lassotalk.com
> To unsubscribe, E-mail to: <[hidden email]>
> Send administrative queries to  <[hidden email]>
>
#############################################################
This message is sent to you because you are subscribed to
  the mailing list Lasso [hidden email]
Official list archives available at http://www.lassotalk.com
To unsubscribe, E-mail to: <[hidden email]>
Send administrative queries to  <[hidden email]>
Reply | Threaded
Open this post in threaded view
|

Re: 8.6 to FMS via SSL [SOLVED]

maxwellk2
Hot dam, thanks Ke (and Johan). I’ve now got a Lasso 8.6 FileMaker connector working via localhost on port 8080 that’s tunneling to the remote Mac FileMaker 12 Server’s port 80.

Thanks again,
Max


On Apr 30, 2014, at 3:30 PM, Ke Carlton <[hidden email]> wrote:

> Flavour of linux doesn't really matter for this:
>
> http://www.brandonchecketts.com/archives/creating-a-permanent-ssh-tunnel-between-linux-servers
>
>
>
> On 1 May 2014 04:41, Maxwell Klein <[hidden email]> wrote:
>
>> Hi Johan,
>>
>> A local reverse proxy is an interesting idea, I’ve set one up only once
>> before.
>>
>> For the SSH connection, how exactly do you have that set up? I’ve
>> established SSH connections from a Mac to Linux for ODBC to MySQL. Used to
>> do it via Terminal, but then found this handy app:
>>
>>        https://itunes.apple.com/us/app/ssh-tunnel/id734418810?mt=12
>>
>> But I’ve not setup an SSH connection from Linux to a Mac. What does the
>> SSH command look like and is there anything I need to do on the FMS side?
>> And how do you make sure it’s always open?
>>
>> Thanks,
>> Max
>>
>>
>>
>> On Apr 29, 2014, at 11:18 PM, Johan Solve <[hidden email]> wrote:
>>
>>> An SSH tunnel might be easier to setup and keep up than VPN. We use that
>>> for FMS connections over WAN in a few cases, works excellent.
>>> A local reverse proxy might also be workable, although I haven't tried
>>> that.
>>>
>>>
>>> 2014-04-27 22:40 GMT+02:00 Steve Piercy - Web Site Builder <
>>> [hidden email]>:
>>>
>>>> Instead of the FM connector, have you tried the ODBC connector?
>>>>
>>>> --steve
>>>>
>>>>
>>>> On 4/27/14 at 1:10 PM, [hidden email] (Maxwell Klein) pronounced:
>>>>
>>>>> Yep, construct the manual URL often for monitoring systems to ensure
>>>> certain
>>>>> databases are open, and always with HTTPS  - works fine there and
>>>> manually in
>>>>> browsers, just not via Lasso 8.6 connector.
>>>>>
>>>>> May just put in a call to LassoSoft support on Monday and see if they
>>>> have any
>>>>> suggestions.
>>>>>
>>>>> Thanks,
>>>>> Max
>>>>>
>>>>> On Apr 27, 2014, at 11:04 AM, Steve Piercy - Web Site Builder
>>>> <[hidden email]>
>>>>> wrote:
>>>>>
>>>>>> Make sure that the FMS server accepts connections over 443, or
>>>> whatever port is
>>>>> configured on that server to accept HTTPS.  Do so by manually
>>>> constructing the
>>>>> request URL from XML query string that you get from action_param and
>> the
>>>> host.  In
>>>>> other words, bypass Lasso and go directly to the FMS.
>>>>>>
>>>>>> --steve
>>>>>>
>>>>>>
>>>>>> On 4/27/14 at 1:18 AM, [hidden email] (Maxwell Klein) pronounced:
>>>>>>
>>>>>>> No luck. Got -Host working with -port=80 just fine, but switching to
>>>> -port=443
>>>>> gives:
>>>>>>>
>>>>>>> Error_Msg: Error while performing FileMaker database -search action.
>>>> Find
>>>>> criteria are empty.
>>>>>>> Error_Code: 400
>>>>>>>
>>>>>>> No amount of tweaking the inline params seemed to make a difference.
>>>>>>>
>>>>>>> Will try the ODBC connector next, but switching to Lasso 9 could be
>>>> in the cards
>>>>> as well.
>>>>>>>
>>>>>>> Thanks,
>>>>>>> Max
>>>>>>>
>>>>>>>
>>>>>>> On Apr 26, 2014, at 2:30 PM, Steve Piercy - Web Site Builder
>>>>> <[hidden email]> wrote:
>>>>>>>
>>>>>>>> Have you tried either using -host=array(connection stuff with
>>>> -port=443) in
>>>>> your
>>>>>>> inline?
>>>>>>>>
>>>>>>>> Instead of the Lasso's FMS connector, have you tried ODBC as the
>>>> connector?
>>>>>>>>
>>>>>>>> --steve
>>>>>>>>
>>>>>>>>
>>>>>>>> On 4/26/14 at 1:39 PM, [hidden email] (Maxwell Klein)
>> pronounced:
>>>>>>>>
>>>>>>>>> Lasso 8.6 on CentOS 6 (virtualized)
>>>>>>>>> FileMaker 12 on Mac OS X 10.8
>>>>>>>>> Need to setup a Lasso 8.6 connector to FileMaker Server over a
>>>> WAN. I know
>>>>> this  isn’t ideal and take a performance hit, but the two LANs are just
>>>> one hop
>>>>> from
>>>>>>> each
>>>>>>>>> other. There’s minimal risk with the one hop but ideally want the
>>>> WAN
>>>>> connection
>>>>>>> to
>>>>>>>>> be secure.
>>>>>>>>> I’ve tested this a couple of times with no luck, but wanted to
>>>> confirm that
>>>>>>> Lasso
>>>>>>>>> 8.6 *cannot* talk to FileMaker Server via HTTPS/SSL on port 443.
>>>> There was a
>>>>>>> Lasso
>>>>>>>>> 9.2.6 release that added "Filemaker datasource SSL support. It now
>>>> checks for
>>>>>>> port
>>>>>>>>> 443 and will do https in that case.” Is there a way to add this
>>>> functionality
>>>>> to  8.6?
>>>>>>>>> If HTTPS/SSL isn’t possible, should I be looking into OpenVPN or
>>>> something
>>>>> else
>>>>>>> to
>>>>>>>>> run on the CentOS machine? The Mac FileMaker Server is already
>>>> running an L2TP
>>>>>>> VPN.
>>>>>>>>> Much appreciated,
>>>>>>>>> Max
>>>>>>>>> #############################################################
>>>>>>>>> This message is sent to you because you are subscribed to
>>>>>>>>> the mailing list Lasso [hidden email]
>>>>>>>>> Official list archives available at http://www.lassotalk.com
>>>>>>>>> To unsubscribe, E-mail to: <[hidden email]>
>>>>>>>>> Send administrative queries to  <[hidden email]
>>>
>>>>>>>>
>>>>>>>> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
>>>>>>>> Steve Piercy               Web Site Builder               Soquel, CA
>>>>>>>> <[hidden email]>                  <http://www.StevePiercy.com/
>>>
>>>>>>>>
>>>>>>>> #############################################################
>>>>>>>> This message is sent to you because you are subscribed to
>>>>>>>> the mailing list Lasso [hidden email]
>>>>>>>> Official list archives available at http://www.lassotalk.com
>>>>>>>> To unsubscribe, E-mail to: <[hidden email]>
>>>>>>>> Send administrative queries to  <[hidden email]>
>>>>>>>
>>>>>>> #############################################################
>>>>>>> This message is sent to you because you are subscribed to
>>>>>>> the mailing list Lasso [hidden email]
>>>>>>> Official list archives available at http://www.lassotalk.com
>>>>>>> To unsubscribe, E-mail to: <[hidden email]>
>>>>>>> Send administrative queries to  <[hidden email]>
>>>>>>
>>>>>> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
>>>>>> Steve Piercy               Web Site Builder               Soquel, CA
>>>>>> <[hidden email]>                  <http://www.StevePiercy.com/>
>>>>>>
>>>>>> #############################################################
>>>>>> This message is sent to you because you are subscribed to
>>>>>> the mailing list Lasso [hidden email]
>>>>>> Official list archives available at http://www.lassotalk.com
>>>>>> To unsubscribe, E-mail to: <[hidden email]>
>>>>>> Send administrative queries to  <[hidden email]>
>>>>>
>>>>> #############################################################
>>>>> This message is sent to you because you are subscribed to
>>>>> the mailing list Lasso [hidden email]
>>>>> Official list archives available at http://www.lassotalk.com
>>>>> To unsubscribe, E-mail to: <[hidden email]>
>>>>> Send administrative queries to  <[hidden email]>
>>>>
>>>> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
>>>> Steve Piercy               Web Site Builder               Soquel, CA
>>>> <[hidden email]>                  <http://www.StevePiercy.com/>
>>>>
>>>> #############################################################
>>>> This message is sent to you because you are subscribed to
>>>> the mailing list Lasso [hidden email]
>>>> Official list archives available at http://www.lassotalk.com
>>>> To unsubscribe, E-mail to: <[hidden email]>
>>>> Send administrative queries to  <[hidden email]>
>>>>
>>>
>>>
>>>
>>> --
>>> Mvh
>>> Johan Sölve
>>> ____________________________________
>>> Montania System AB
>>> Halmstad   Stockholm
>>> http://www.montania.se
>>>
>>> Johan Sölve
>>> Mobil +46 709-51 55 70
>>> [hidden email]
>>>
>>> Kristinebergsvägen 17, S-302 41 Halmstad, Sweden
>>> Telefon +46 35-136800 |  Fax +46 35-136801
>>> #############################################################
>>> This message is sent to you because you are subscribed to
>>> the mailing list Lasso [hidden email]
>>> Official list archives available at http://www.lassotalk.com
>>> To unsubscribe, E-mail to: <[hidden email]>
>>> Send administrative queries to  <[hidden email]>
>>
>> #############################################################
>> This message is sent to you because you are subscribed to
>>  the mailing list Lasso [hidden email]
>> Official list archives available at http://www.lassotalk.com
>> To unsubscribe, E-mail to: <[hidden email]>
>> Send administrative queries to  <[hidden email]>
>>
> #############################################################
> This message is sent to you because you are subscribed to
>  the mailing list Lasso [hidden email]
> Official list archives available at http://www.lassotalk.com
> To unsubscribe, E-mail to: <[hidden email]>
> Send administrative queries to  <[hidden email]>

#############################################################
This message is sent to you because you are subscribed to
  the mailing list Lasso [hidden email]
Official list archives available at http://www.lassotalk.com
To unsubscribe, E-mail to: <[hidden email]>
Send administrative queries to  <[hidden email]>
Reply | Threaded
Open this post in threaded view
|

Re: 8.6 to FMS via SSL

Johan Solve
In reply to this post by Ke Carlton-3
I usually include the C flag for compression. Can be useful since it will
probably reduce xml overhead a bit.



2014-05-01 0:30 GMT+02:00 Ke Carlton <[hidden email]>:

> Flavour of linux doesn't really matter for this:
>
>
> http://www.brandonchecketts.com/archives/creating-a-permanent-ssh-tunnel-between-linux-servers
>
>
>
> On 1 May 2014 04:41, Maxwell Klein <[hidden email]> wrote:
>
> > Hi Johan,
> >
> > A local reverse proxy is an interesting idea, I’ve set one up only once
> > before.
> >
> > For the SSH connection, how exactly do you have that set up? I’ve
> > established SSH connections from a Mac to Linux for ODBC to MySQL. Used
> to
> > do it via Terminal, but then found this handy app:
> >
> >         https://itunes.apple.com/us/app/ssh-tunnel/id734418810?mt=12
> >
> > But I’ve not setup an SSH connection from Linux to a Mac. What does the
> > SSH command look like and is there anything I need to do on the FMS side?
> > And how do you make sure it’s always open?
> >
> > Thanks,
> > Max
> >
> >
> >
> > On Apr 29, 2014, at 11:18 PM, Johan Solve <[hidden email]> wrote:
> >
> > > An SSH tunnel might be easier to setup and keep up than VPN. We use
> that
> > > for FMS connections over WAN in a few cases, works excellent.
> > > A local reverse proxy might also be workable, although I haven't tried
> > > that.
> > >
> > >
> > > 2014-04-27 22:40 GMT+02:00 Steve Piercy - Web Site Builder <
> > > [hidden email]>:
> > >
> > >> Instead of the FM connector, have you tried the ODBC connector?
> > >>
> > >> --steve
> > >>
> > >>
> > >> On 4/27/14 at 1:10 PM, [hidden email] (Maxwell Klein) pronounced:
> > >>
> > >>> Yep, construct the manual URL often for monitoring systems to ensure
> > >> certain
> > >>> databases are open, and always with HTTPS  - works fine there and
> > >> manually in
> > >>> browsers, just not via Lasso 8.6 connector.
> > >>>
> > >>> May just put in a call to LassoSoft support on Monday and see if they
> > >> have any
> > >>> suggestions.
> > >>>
> > >>> Thanks,
> > >>> Max
> > >>>
> > >>> On Apr 27, 2014, at 11:04 AM, Steve Piercy - Web Site Builder
> > >> <[hidden email]>
> > >>> wrote:
> > >>>
> > >>>> Make sure that the FMS server accepts connections over 443, or
> > >> whatever port is
> > >>> configured on that server to accept HTTPS.  Do so by manually
> > >> constructing the
> > >>> request URL from XML query string that you get from action_param and
> > the
> > >> host.  In
> > >>> other words, bypass Lasso and go directly to the FMS.
> > >>>>
> > >>>> --steve
> > >>>>
> > >>>>
> > >>>> On 4/27/14 at 1:18 AM, [hidden email] (Maxwell Klein)
> pronounced:
> > >>>>
> > >>>>> No luck. Got -Host working with -port=80 just fine, but switching
> to
> > >> -port=443
> > >>> gives:
> > >>>>>
> > >>>>> Error_Msg: Error while performing FileMaker database -search
> action.
> > >> Find
> > >>> criteria are empty.
> > >>>>> Error_Code: 400
> > >>>>>
> > >>>>> No amount of tweaking the inline params seemed to make a
> difference.
> > >>>>>
> > >>>>> Will try the ODBC connector next, but switching to Lasso 9 could be
> > >> in the cards
> > >>> as well.
> > >>>>>
> > >>>>> Thanks,
> > >>>>> Max
> > >>>>>
> > >>>>>
> > >>>>> On Apr 26, 2014, at 2:30 PM, Steve Piercy - Web Site Builder
> > >>> <[hidden email]> wrote:
> > >>>>>
> > >>>>>> Have you tried either using -host=array(connection stuff with
> > >> -port=443) in
> > >>> your
> > >>>>> inline?
> > >>>>>>
> > >>>>>> Instead of the Lasso's FMS connector, have you tried ODBC as the
> > >> connector?
> > >>>>>>
> > >>>>>> --steve
> > >>>>>>
> > >>>>>>
> > >>>>>> On 4/26/14 at 1:39 PM, [hidden email] (Maxwell Klein)
> > pronounced:
> > >>>>>>
> > >>>>>>> Lasso 8.6 on CentOS 6 (virtualized)
> > >>>>>>> FileMaker 12 on Mac OS X 10.8
> > >>>>>>> Need to setup a Lasso 8.6 connector to FileMaker Server over a
> > >> WAN. I know
> > >>> this  isn’t ideal and take a performance hit, but the two LANs are
> just
> > >> one hop
> > >>> from
> > >>>>> each
> > >>>>>>> other. There’s minimal risk with the one hop but ideally want the
> > >> WAN
> > >>> connection
> > >>>>> to
> > >>>>>>> be secure.
> > >>>>>>> I’ve tested this a couple of times with no luck, but wanted to
> > >> confirm that
> > >>>>> Lasso
> > >>>>>>> 8.6 *cannot* talk to FileMaker Server via HTTPS/SSL on port 443.
> > >> There was a
> > >>>>> Lasso
> > >>>>>>> 9.2.6 release that added "Filemaker datasource SSL support. It
> now
> > >> checks for
> > >>>>> port
> > >>>>>>> 443 and will do https in that case.” Is there a way to add this
> > >> functionality
> > >>> to  8.6?
> > >>>>>>> If HTTPS/SSL isn’t possible, should I be looking into OpenVPN or
> > >> something
> > >>> else
> > >>>>> to
> > >>>>>>> run on the CentOS machine? The Mac FileMaker Server is already
> > >> running an L2TP
> > >>>>> VPN.
> > >>>>>>> Much appreciated,
> > >>>>>>> Max
> > >>>>>>> #############################################################
> > >>>>>>> This message is sent to you because you are subscribed to
> > >>>>>>> the mailing list Lasso [hidden email]
> > >>>>>>> Official list archives available at http://www.lassotalk.com
> > >>>>>>> To unsubscribe, E-mail to: <
> [hidden email]>
> > >>>>>>> Send administrative queries to  <
> [hidden email]
> > >
> > >>>>>>
> > >>>>>> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
> --
> > >>>>>> Steve Piercy               Web Site Builder               Soquel,
> CA
> > >>>>>> <[hidden email]>                  <
> http://www.StevePiercy.com/
> > >
> > >>>>>>
> > >>>>>> #############################################################
> > >>>>>> This message is sent to you because you are subscribed to
> > >>>>>> the mailing list Lasso [hidden email]
> > >>>>>> Official list archives available at http://www.lassotalk.com
> > >>>>>> To unsubscribe, E-mail to: <[hidden email]
> >
> > >>>>>> Send administrative queries to  <
> [hidden email]>
> > >>>>>
> > >>>>> #############################################################
> > >>>>> This message is sent to you because you are subscribed to
> > >>>>> the mailing list Lasso [hidden email]
> > >>>>> Official list archives available at http://www.lassotalk.com
> > >>>>> To unsubscribe, E-mail to: <[hidden email]>
> > >>>>> Send administrative queries to  <[hidden email]
> >
> > >>>>
> > >>>> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
> > >>>> Steve Piercy               Web Site Builder               Soquel, CA
> > >>>> <[hidden email]>                  <http://www.StevePiercy.com/
> >
> > >>>>
> > >>>> #############################################################
> > >>>> This message is sent to you because you are subscribed to
> > >>>> the mailing list Lasso [hidden email]
> > >>>> Official list archives available at http://www.lassotalk.com
> > >>>> To unsubscribe, E-mail to: <[hidden email]>
> > >>>> Send administrative queries to  <[hidden email]>
> > >>>
> > >>> #############################################################
> > >>> This message is sent to you because you are subscribed to
> > >>>  the mailing list Lasso [hidden email]
> > >>> Official list archives available at http://www.lassotalk.com
> > >>> To unsubscribe, E-mail to: <[hidden email]>
> > >>> Send administrative queries to  <[hidden email]>
> > >>
> > >> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
> > >> Steve Piercy               Web Site Builder               Soquel, CA
> > >> <[hidden email]>                  <http://www.StevePiercy.com/>
> > >>
> > >> #############################################################
> > >> This message is sent to you because you are subscribed to
> > >>  the mailing list Lasso [hidden email]
> > >> Official list archives available at http://www.lassotalk.com
> > >> To unsubscribe, E-mail to: <[hidden email]>
> > >> Send administrative queries to  <[hidden email]>
> > >>
> > >
> > >
> > >
> > > --
> > > Mvh
> > > Johan Sölve
> > > ____________________________________
> > > Montania System AB
> > > Halmstad   Stockholm
> > > http://www.montania.se
> > >
> > > Johan Sölve
> > > Mobil +46 709-51 55 70
> > > [hidden email]
> > >
> > > Kristinebergsvägen 17, S-302 41 Halmstad, Sweden
> > > Telefon +46 35-136800 |  Fax +46 35-136801
> > > #############################################################
> > > This message is sent to you because you are subscribed to
> > >  the mailing list Lasso [hidden email]
> > > Official list archives available at http://www.lassotalk.com
> > > To unsubscribe, E-mail to: <[hidden email]>
> > > Send administrative queries to  <[hidden email]>
> >
> > #############################################################
> > This message is sent to you because you are subscribed to
> >   the mailing list Lasso [hidden email]
> > Official list archives available at http://www.lassotalk.com
> > To unsubscribe, E-mail to: <[hidden email]>
> > Send administrative queries to  <[hidden email]>
> >
> #############################################################
> This message is sent to you because you are subscribed to
>   the mailing list Lasso [hidden email]
> Official list archives available at http://www.lassotalk.com
> To unsubscribe, E-mail to: <[hidden email]>
> Send administrative queries to  <[hidden email]>
>



--
Mvh
Johan Sölve
____________________________________
Montania System AB
Halmstad   Stockholm
http://www.montania.se

Johan Sölve
Mobil +46 709-51 55 70
[hidden email]

Kristinebergsvägen 17, S-302 41 Halmstad, Sweden
Telefon +46 35-136800 |  Fax +46 35-136801
#############################################################
This message is sent to you because you are subscribed to
  the mailing list Lasso [hidden email]
Official list archives available at http://www.lassotalk.com
To unsubscribe, E-mail to: <[hidden email]>
Send administrative queries to  <[hidden email]>
Reply | Threaded
Open this post in threaded view
|

Re: 8.6 to FMS via SSL

maxwellk2
Totally agree XML should benefit from compression, thanks for the recommendation. I did a little benchmarking between -C or not and couldn’t determine a consistent improvement. Still, I’ll leave -C set as it should help with larger result sets and I was mainly testing small queries.

What I really found interesting in my benchmarking is that the SSH connection, compression or not, consistently shaved time off the request vs. a non-SSH connection to the remote FMS data source.

Thanks,
Max


On May 1, 2014, at 3:57 PM, Johan Solve <[hidden email]> wrote:

> I usually include the C flag for compression. Can be useful since it will
> probably reduce xml overhead a bit.
>
>
>
> 2014-05-01 0:30 GMT+02:00 Ke Carlton <[hidden email]>:
>
>> Flavour of linux doesn't really matter for this:
>>
>>
>> http://www.brandonchecketts.com/archives/creating-a-permanent-ssh-tunnel-between-linux-servers
>>
>>
>>
>> On 1 May 2014 04:41, Maxwell Klein <[hidden email]> wrote:
>>
>>> Hi Johan,
>>>
>>> A local reverse proxy is an interesting idea, I’ve set one up only once
>>> before.
>>>
>>> For the SSH connection, how exactly do you have that set up? I’ve
>>> established SSH connections from a Mac to Linux for ODBC to MySQL. Used
>> to
>>> do it via Terminal, but then found this handy app:
>>>
>>>       https://itunes.apple.com/us/app/ssh-tunnel/id734418810?mt=12
>>>
>>> But I’ve not setup an SSH connection from Linux to a Mac. What does the
>>> SSH command look like and is there anything I need to do on the FMS side?
>>> And how do you make sure it’s always open?
>>>
>>> Thanks,
>>> Max
>>>
>>>
>>>
>>> On Apr 29, 2014, at 11:18 PM, Johan Solve <[hidden email]> wrote:
>>>
>>>> An SSH tunnel might be easier to setup and keep up than VPN. We use
>> that
>>>> for FMS connections over WAN in a few cases, works excellent.
>>>> A local reverse proxy might also be workable, although I haven't tried
>>>> that.
>>>>
>>>>
>>>> 2014-04-27 22:40 GMT+02:00 Steve Piercy - Web Site Builder <
>>>> [hidden email]>:
>>>>
>>>>> Instead of the FM connector, have you tried the ODBC connector?
>>>>>
>>>>> --steve
>>>>>
>>>>>
>>>>> On 4/27/14 at 1:10 PM, [hidden email] (Maxwell Klein) pronounced:
>>>>>
>>>>>> Yep, construct the manual URL often for monitoring systems to ensure
>>>>> certain
>>>>>> databases are open, and always with HTTPS  - works fine there and
>>>>> manually in
>>>>>> browsers, just not via Lasso 8.6 connector.
>>>>>>
>>>>>> May just put in a call to LassoSoft support on Monday and see if they
>>>>> have any
>>>>>> suggestions.
>>>>>>
>>>>>> Thanks,
>>>>>> Max
>>>>>>
>>>>>> On Apr 27, 2014, at 11:04 AM, Steve Piercy - Web Site Builder
>>>>> <[hidden email]>
>>>>>> wrote:
>>>>>>
>>>>>>> Make sure that the FMS server accepts connections over 443, or
>>>>> whatever port is
>>>>>> configured on that server to accept HTTPS.  Do so by manually
>>>>> constructing the
>>>>>> request URL from XML query string that you get from action_param and
>>> the
>>>>> host.  In
>>>>>> other words, bypass Lasso and go directly to the FMS.
>>>>>>>
>>>>>>> --steve
>>>>>>>
>>>>>>>
>>>>>>> On 4/27/14 at 1:18 AM, [hidden email] (Maxwell Klein)
>> pronounced:
>>>>>>>
>>>>>>>> No luck. Got -Host working with -port=80 just fine, but switching
>> to
>>>>> -port=443
>>>>>> gives:
>>>>>>>>
>>>>>>>> Error_Msg: Error while performing FileMaker database -search
>> action.
>>>>> Find
>>>>>> criteria are empty.
>>>>>>>> Error_Code: 400
>>>>>>>>
>>>>>>>> No amount of tweaking the inline params seemed to make a
>> difference.
>>>>>>>>
>>>>>>>> Will try the ODBC connector next, but switching to Lasso 9 could be
>>>>> in the cards
>>>>>> as well.
>>>>>>>>
>>>>>>>> Thanks,
>>>>>>>> Max
>>>>>>>>
>>>>>>>>
>>>>>>>> On Apr 26, 2014, at 2:30 PM, Steve Piercy - Web Site Builder
>>>>>> <[hidden email]> wrote:
>>>>>>>>
>>>>>>>>> Have you tried either using -host=array(connection stuff with
>>>>> -port=443) in
>>>>>> your
>>>>>>>> inline?
>>>>>>>>>
>>>>>>>>> Instead of the Lasso's FMS connector, have you tried ODBC as the
>>>>> connector?
>>>>>>>>>
>>>>>>>>> --steve
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> On 4/26/14 at 1:39 PM, [hidden email] (Maxwell Klein)
>>> pronounced:
>>>>>>>>>
>>>>>>>>>> Lasso 8.6 on CentOS 6 (virtualized)
>>>>>>>>>> FileMaker 12 on Mac OS X 10.8
>>>>>>>>>> Need to setup a Lasso 8.6 connector to FileMaker Server over a
>>>>> WAN. I know
>>>>>> this  isn’t ideal and take a performance hit, but the two LANs are
>> just
>>>>> one hop
>>>>>> from
>>>>>>>> each
>>>>>>>>>> other. There’s minimal risk with the one hop but ideally want the
>>>>> WAN
>>>>>> connection
>>>>>>>> to
>>>>>>>>>> be secure.
>>>>>>>>>> I’ve tested this a couple of times with no luck, but wanted to
>>>>> confirm that
>>>>>>>> Lasso
>>>>>>>>>> 8.6 *cannot* talk to FileMaker Server via HTTPS/SSL on port 443.
>>>>> There was a
>>>>>>>> Lasso
>>>>>>>>>> 9.2.6 release that added "Filemaker datasource SSL support. It
>> now
>>>>> checks for
>>>>>>>> port
>>>>>>>>>> 443 and will do https in that case.” Is there a way to add this
>>>>> functionality
>>>>>> to  8.6?
>>>>>>>>>> If HTTPS/SSL isn’t possible, should I be looking into OpenVPN or
>>>>> something
>>>>>> else
>>>>>>>> to
>>>>>>>>>> run on the CentOS machine? The Mac FileMaker Server is already
>>>>> running an L2TP
>>>>>>>> VPN.
>>>>>>>>>> Much appreciated,
>>>>>>>>>> Max
>>>>>>>>>> #############################################################
>>>>>>>>>> This message is sent to you because you are subscribed to
>>>>>>>>>> the mailing list Lasso [hidden email]
>>>>>>>>>> Official list archives available at http://www.lassotalk.com
>>>>>>>>>> To unsubscribe, E-mail to: <
>> [hidden email]>
>>>>>>>>>> Send administrative queries to  <
>> [hidden email]
>>>>
>>>>>>>>>
>>>>>>>>> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
>> --
>>>>>>>>> Steve Piercy               Web Site Builder               Soquel,
>> CA
>>>>>>>>> <[hidden email]>                  <
>> http://www.StevePiercy.com/
>>>>
>>>>>>>>>
>>>>>>>>> #############################################################
>>>>>>>>> This message is sent to you because you are subscribed to
>>>>>>>>> the mailing list Lasso [hidden email]
>>>>>>>>> Official list archives available at http://www.lassotalk.com
>>>>>>>>> To unsubscribe, E-mail to: <[hidden email]
>>>
>>>>>>>>> Send administrative queries to  <
>> [hidden email]>
>>>>>>>>
>>>>>>>> #############################################################
>>>>>>>> This message is sent to you because you are subscribed to
>>>>>>>> the mailing list Lasso [hidden email]
>>>>>>>> Official list archives available at http://www.lassotalk.com
>>>>>>>> To unsubscribe, E-mail to: <[hidden email]>
>>>>>>>> Send administrative queries to  <[hidden email]
>>>
>>>>>>>
>>>>>>> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
>>>>>>> Steve Piercy               Web Site Builder               Soquel, CA
>>>>>>> <[hidden email]>                  <http://www.StevePiercy.com/
>>>
>>>>>>>
>>>>>>> #############################################################
>>>>>>> This message is sent to you because you are subscribed to
>>>>>>> the mailing list Lasso [hidden email]
>>>>>>> Official list archives available at http://www.lassotalk.com
>>>>>>> To unsubscribe, E-mail to: <[hidden email]>
>>>>>>> Send administrative queries to  <[hidden email]>
>>>>>>
>>>>>> #############################################################
>>>>>> This message is sent to you because you are subscribed to
>>>>>> the mailing list Lasso [hidden email]
>>>>>> Official list archives available at http://www.lassotalk.com
>>>>>> To unsubscribe, E-mail to: <[hidden email]>
>>>>>> Send administrative queries to  <[hidden email]>
>>>>>
>>>>> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
>>>>> Steve Piercy               Web Site Builder               Soquel, CA
>>>>> <[hidden email]>                  <http://www.StevePiercy.com/>
>>>>>
>>>>> #############################################################
>>>>> This message is sent to you because you are subscribed to
>>>>> the mailing list Lasso [hidden email]
>>>>> Official list archives available at http://www.lassotalk.com
>>>>> To unsubscribe, E-mail to: <[hidden email]>
>>>>> Send administrative queries to  <[hidden email]>
>>>>>
>>>>
>>>>
>>>>
>>>> --
>>>> Mvh
>>>> Johan Sölve
>>>> ____________________________________
>>>> Montania System AB
>>>> Halmstad   Stockholm
>>>> http://www.montania.se
>>>>
>>>> Johan Sölve
>>>> Mobil +46 709-51 55 70
>>>> [hidden email]
>>>>
>>>> Kristinebergsvägen 17, S-302 41 Halmstad, Sweden
>>>> Telefon +46 35-136800 |  Fax +46 35-136801
>>>> #############################################################
>>>> This message is sent to you because you are subscribed to
>>>> the mailing list Lasso [hidden email]
>>>> Official list archives available at http://www.lassotalk.com
>>>> To unsubscribe, E-mail to: <[hidden email]>
>>>> Send administrative queries to  <[hidden email]>
>>>
>>> #############################################################
>>> This message is sent to you because you are subscribed to
>>> the mailing list Lasso [hidden email]
>>> Official list archives available at http://www.lassotalk.com
>>> To unsubscribe, E-mail to: <[hidden email]>
>>> Send administrative queries to  <[hidden email]>
>>>
>> #############################################################
>> This message is sent to you because you are subscribed to
>> the mailing list Lasso [hidden email]
>> Official list archives available at http://www.lassotalk.com
>> To unsubscribe, E-mail to: <[hidden email]>
>> Send administrative queries to  <[hidden email]>
>>
>
>
>
> --
> Mvh
> Johan Sölve
> ____________________________________
> Montania System AB
> Halmstad   Stockholm
> http://www.montania.se
>
> Johan Sölve
> Mobil +46 709-51 55 70
> [hidden email]
>
> Kristinebergsvägen 17, S-302 41 Halmstad, Sweden
> Telefon +46 35-136800 |  Fax +46 35-136801
> #############################################################
> This message is sent to you because you are subscribed to
> the mailing list Lasso [hidden email]
> Official list archives available at http://www.lassotalk.com
> To unsubscribe, E-mail to: <[hidden email]>
> Send administrative queries to  <[hidden email]>


Thanks,
Max

____________________________________________
Maxwell Klein Consulting, Inc.
Database Development & Web Integration




#############################################################
This message is sent to you because you are subscribed to
  the mailing list Lasso [hidden email]
Official list archives available at http://www.lassotalk.com
To unsubscribe, E-mail to: <[hidden email]>
Send administrative queries to  <[hidden email]>
Reply | Threaded
Open this post in threaded view
|

Re: 8.6 to FMS via SSL

Johan Solve
Thanks, interesting. I haven't benchmarked.


2014-05-03 19:52 GMT+02:00 Maxwell Klein <[hidden email]>:

> Totally agree XML should benefit from compression, thanks for the
> recommendation. I did a little benchmarking between -C or not and couldn’t
> determine a consistent improvement. Still, I’ll leave -C set as it should
> help with larger result sets and I was mainly testing small queries.
>
> What I really found interesting in my benchmarking is that the SSH
> connection, compression or not, consistently shaved time off the request
> vs. a non-SSH connection to the remote FMS data source.
>
> Thanks,
> Max
>
>
> On May 1, 2014, at 3:57 PM, Johan Solve <[hidden email]> wrote:
>
> > I usually include the C flag for compression. Can be useful since it will
> > probably reduce xml overhead a bit.
> >
> >
> >
> > 2014-05-01 0:30 GMT+02:00 Ke Carlton <[hidden email]>:
> >
> >> Flavour of linux doesn't really matter for this:
> >>
> >>
> >>
> http://www.brandonchecketts.com/archives/creating-a-permanent-ssh-tunnel-between-linux-servers
> >>
> >>
> >>
> >> On 1 May 2014 04:41, Maxwell Klein <[hidden email]> wrote:
> >>
> >>> Hi Johan,
> >>>
> >>> A local reverse proxy is an interesting idea, I’ve set one up only once
> >>> before.
> >>>
> >>> For the SSH connection, how exactly do you have that set up? I’ve
> >>> established SSH connections from a Mac to Linux for ODBC to MySQL. Used
> >> to
> >>> do it via Terminal, but then found this handy app:
> >>>
> >>>       https://itunes.apple.com/us/app/ssh-tunnel/id734418810?mt=12
> >>>
> >>> But I’ve not setup an SSH connection from Linux to a Mac. What does the
> >>> SSH command look like and is there anything I need to do on the FMS
> side?
> >>> And how do you make sure it’s always open?
> >>>
> >>> Thanks,
> >>> Max
> >>>
> >>>
> >>>
> >>> On Apr 29, 2014, at 11:18 PM, Johan Solve <[hidden email]>
> wrote:
> >>>
> >>>> An SSH tunnel might be easier to setup and keep up than VPN. We use
> >> that
> >>>> for FMS connections over WAN in a few cases, works excellent.
> >>>> A local reverse proxy might also be workable, although I haven't tried
> >>>> that.
> >>>>
> >>>>
> >>>> 2014-04-27 22:40 GMT+02:00 Steve Piercy - Web Site Builder <
> >>>> [hidden email]>:
> >>>>
> >>>>> Instead of the FM connector, have you tried the ODBC connector?
> >>>>>
> >>>>> --steve
> >>>>>
> >>>>>
> >>>>> On 4/27/14 at 1:10 PM, [hidden email] (Maxwell Klein) pronounced:
> >>>>>
> >>>>>> Yep, construct the manual URL often for monitoring systems to ensure
> >>>>> certain
> >>>>>> databases are open, and always with HTTPS  - works fine there and
> >>>>> manually in
> >>>>>> browsers, just not via Lasso 8.6 connector.
> >>>>>>
> >>>>>> May just put in a call to LassoSoft support on Monday and see if
> they
> >>>>> have any
> >>>>>> suggestions.
> >>>>>>
> >>>>>> Thanks,
> >>>>>> Max
> >>>>>>
> >>>>>> On Apr 27, 2014, at 11:04 AM, Steve Piercy - Web Site Builder
> >>>>> <[hidden email]>
> >>>>>> wrote:
> >>>>>>
> >>>>>>> Make sure that the FMS server accepts connections over 443, or
> >>>>> whatever port is
> >>>>>> configured on that server to accept HTTPS.  Do so by manually
> >>>>> constructing the
> >>>>>> request URL from XML query string that you get from action_param and
> >>> the
> >>>>> host.  In
> >>>>>> other words, bypass Lasso and go directly to the FMS.
> >>>>>>>
> >>>>>>> --steve
> >>>>>>>
> >>>>>>>
> >>>>>>> On 4/27/14 at 1:18 AM, [hidden email] (Maxwell Klein)
> >> pronounced:
> >>>>>>>
> >>>>>>>> No luck. Got -Host working with -port=80 just fine, but switching
> >> to
> >>>>> -port=443
> >>>>>> gives:
> >>>>>>>>
> >>>>>>>> Error_Msg: Error while performing FileMaker database -search
> >> action.
> >>>>> Find
> >>>>>> criteria are empty.
> >>>>>>>> Error_Code: 400
> >>>>>>>>
> >>>>>>>> No amount of tweaking the inline params seemed to make a
> >> difference.
> >>>>>>>>
> >>>>>>>> Will try the ODBC connector next, but switching to Lasso 9 could
> be
> >>>>> in the cards
> >>>>>> as well.
> >>>>>>>>
> >>>>>>>> Thanks,
> >>>>>>>> Max
> >>>>>>>>
> >>>>>>>>
> >>>>>>>> On Apr 26, 2014, at 2:30 PM, Steve Piercy - Web Site Builder
> >>>>>> <[hidden email]> wrote:
> >>>>>>>>
> >>>>>>>>> Have you tried either using -host=array(connection stuff with
> >>>>> -port=443) in
> >>>>>> your
> >>>>>>>> inline?
> >>>>>>>>>
> >>>>>>>>> Instead of the Lasso's FMS connector, have you tried ODBC as the
> >>>>> connector?
> >>>>>>>>>
> >>>>>>>>> --steve
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>> On 4/26/14 at 1:39 PM, [hidden email] (Maxwell Klein)
> >>> pronounced:
> >>>>>>>>>
> >>>>>>>>>> Lasso 8.6 on CentOS 6 (virtualized)
> >>>>>>>>>> FileMaker 12 on Mac OS X 10.8
> >>>>>>>>>> Need to setup a Lasso 8.6 connector to FileMaker Server over a
> >>>>> WAN. I know
> >>>>>> this  isn’t ideal and take a performance hit, but the two LANs are
> >> just
> >>>>> one hop
> >>>>>> from
> >>>>>>>> each
> >>>>>>>>>> other. There’s minimal risk with the one hop but ideally want
> the
> >>>>> WAN
> >>>>>> connection
> >>>>>>>> to
> >>>>>>>>>> be secure.
> >>>>>>>>>> I’ve tested this a couple of times with no luck, but wanted to
> >>>>> confirm that
> >>>>>>>> Lasso
> >>>>>>>>>> 8.6 *cannot* talk to FileMaker Server via HTTPS/SSL on port 443.
> >>>>> There was a
> >>>>>>>> Lasso
> >>>>>>>>>> 9.2.6 release that added "Filemaker datasource SSL support. It
> >> now
> >>>>> checks for
> >>>>>>>> port
> >>>>>>>>>> 443 and will do https in that case.” Is there a way to add this
> >>>>> functionality
> >>>>>> to  8.6?
> >>>>>>>>>> If HTTPS/SSL isn’t possible, should I be looking into OpenVPN or
> >>>>> something
> >>>>>> else
> >>>>>>>> to
> >>>>>>>>>> run on the CentOS machine? The Mac FileMaker Server is already
> >>>>> running an L2TP
> >>>>>>>> VPN.
> >>>>>>>>>> Much appreciated,
> >>>>>>>>>> Max
> >>>>>>>>>> #############################################################
> >>>>>>>>>> This message is sent to you because you are subscribed to
> >>>>>>>>>> the mailing list Lasso [hidden email]
> >>>>>>>>>> Official list archives available at http://www.lassotalk.com
> >>>>>>>>>> To unsubscribe, E-mail to: <
> >> [hidden email]>
> >>>>>>>>>> Send administrative queries to  <
> >> [hidden email]
> >>>>
> >>>>>>>>>
> >>>>>>>>> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
> >> --
> >>>>>>>>> Steve Piercy               Web Site Builder               Soquel,
> >> CA
> >>>>>>>>> <[hidden email]>                  <
> >> http://www.StevePiercy.com/
> >>>>
> >>>>>>>>>
> >>>>>>>>> #############################################################
> >>>>>>>>> This message is sent to you because you are subscribed to
> >>>>>>>>> the mailing list Lasso [hidden email]
> >>>>>>>>> Official list archives available at http://www.lassotalk.com
> >>>>>>>>> To unsubscribe, E-mail to: <
> [hidden email]
> >>>
> >>>>>>>>> Send administrative queries to  <
> >> [hidden email]>
> >>>>>>>>
> >>>>>>>> #############################################################
> >>>>>>>> This message is sent to you because you are subscribed to
> >>>>>>>> the mailing list Lasso [hidden email]
> >>>>>>>> Official list archives available at http://www.lassotalk.com
> >>>>>>>> To unsubscribe, E-mail to: <[hidden email]
> >
> >>>>>>>> Send administrative queries to  <
> [hidden email]
> >>>
> >>>>>>>
> >>>>>>> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
> --
> >>>>>>> Steve Piercy               Web Site Builder               Soquel,
> CA
> >>>>>>> <[hidden email]>                  <
> http://www.StevePiercy.com/
> >>>
> >>>>>>>
> >>>>>>> #############################################################
> >>>>>>> This message is sent to you because you are subscribed to
> >>>>>>> the mailing list Lasso [hidden email]
> >>>>>>> Official list archives available at http://www.lassotalk.com
> >>>>>>> To unsubscribe, E-mail to: <[hidden email]>
> >>>>>>> Send administrative queries to  <[hidden email]
> >
> >>>>>>
> >>>>>> #############################################################
> >>>>>> This message is sent to you because you are subscribed to
> >>>>>> the mailing list Lasso [hidden email]
> >>>>>> Official list archives available at http://www.lassotalk.com
> >>>>>> To unsubscribe, E-mail to: <[hidden email]>
> >>>>>> Send administrative queries to  <[hidden email]>
> >>>>>
> >>>>> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
> >>>>> Steve Piercy               Web Site Builder               Soquel, CA
> >>>>> <[hidden email]>                  <http://www.StevePiercy.com/>
> >>>>>
> >>>>> #############################################################
> >>>>> This message is sent to you because you are subscribed to
> >>>>> the mailing list Lasso [hidden email]
> >>>>> Official list archives available at http://www.lassotalk.com
> >>>>> To unsubscribe, E-mail to: <[hidden email]>
> >>>>> Send administrative queries to  <[hidden email]>
> >>>>>
> >>>>
> >>>>
> >>>>
> >>>> --
> >>>> Mvh
> >>>> Johan Sölve
> >>>> ____________________________________
> >>>> Montania System AB
> >>>> Halmstad   Stockholm
> >>>> http://www.montania.se
> >>>>
> >>>> Johan Sölve
> >>>> Mobil +46 709-51 55 70
> >>>> [hidden email]
> >>>>
> >>>> Kristinebergsvägen 17, S-302 41 Halmstad, Sweden
> >>>> Telefon +46 35-136800 |  Fax +46 35-136801
> >>>> #############################################################
> >>>> This message is sent to you because you are subscribed to
> >>>> the mailing list Lasso [hidden email]
> >>>> Official list archives available at http://www.lassotalk.com
> >>>> To unsubscribe, E-mail to: <[hidden email]>
> >>>> Send administrative queries to  <[hidden email]>
> >>>
> >>> #############################################################
> >>> This message is sent to you because you are subscribed to
> >>> the mailing list Lasso [hidden email]
> >>> Official list archives available at http://www.lassotalk.com
> >>> To unsubscribe, E-mail to: <[hidden email]>
> >>> Send administrative queries to  <[hidden email]>
> >>>
> >> #############################################################
> >> This message is sent to you because you are subscribed to
> >> the mailing list Lasso [hidden email]
> >> Official list archives available at http://www.lassotalk.com
> >> To unsubscribe, E-mail to: <[hidden email]>
> >> Send administrative queries to  <[hidden email]>
> >>
> >
> >
> >
> > --
> > Mvh
> > Johan Sölve
> > ____________________________________
> > Montania System AB
> > Halmstad   Stockholm
> > http://www.montania.se
> >
> > Johan Sölve
> > Mobil +46 709-51 55 70
> > [hidden email]
> >
> > Kristinebergsvägen 17, S-302 41 Halmstad, Sweden
> > Telefon +46 35-136800 |  Fax +46 35-136801
> > #############################################################
> > This message is sent to you because you are subscribed to
> > the mailing list Lasso [hidden email]
> > Official list archives available at http://www.lassotalk.com
> > To unsubscribe, E-mail to: <[hidden email]>
> > Send administrative queries to  <[hidden email]>
>
>
> Thanks,
> Max
>
> ____________________________________________
> Maxwell Klein Consulting, Inc.
> Database Development & Web Integration
>
>
>
>
> #############################################################
> This message is sent to you because you are subscribed to
>   the mailing list Lasso [hidden email]
> Official list archives available at http://www.lassotalk.com
> To unsubscribe, E-mail to: <[hidden email]>
> Send administrative queries to  <[hidden email]>
>



--
Mvh
Johan Sölve
____________________________________
Montania System AB
Halmstad   Stockholm
http://www.montania.se

Johan Sölve
Mobil +46 709-51 55 70
[hidden email]

Kristinebergsvägen 17, S-302 41 Halmstad, Sweden
Telefon +46 35-136800 |  Fax +46 35-136801
#############################################################
This message is sent to you because you are subscribed to
  the mailing list Lasso [hidden email]
Official list archives available at http://www.lassotalk.com
To unsubscribe, E-mail to: <[hidden email]>
Send administrative queries to  <[hidden email]>