Need help trying to get Lasso 8.5 to talk to FileMaker 14 Server via HTTPS / Port 443

classic Classic list List threaded Threaded
6 messages Options
Reply | Threaded
Open this post in threaded view
|

Need help trying to get Lasso 8.5 to talk to FileMaker 14 Server via HTTPS / Port 443

Tami Williams-3
When FileMaker Server 14 Admin Database->Security, use SSL for database connections is turned on, if I use the IP address of the FM Server and Port 443 in the Lasso Site Admin FileMaker host database connection I can NOT see any of my FIleMaker databases.

Lasso 8.5 + Apache are on one machine, FileMaker 14 Server is on another.

How do I get my Lasso Apache web machine to talk to my FileMaker 14 Server machine via port 443/SSL?


Thanks in advance.





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"It's better to burn out than to fade away."

Tami Williams
Creative Computing
Let us help you make frustrating, costly, and inefficient processes more efficient, less costly and scalable.
FileMaker, Lasso and MySQL specialists.

Tel/Fax: 770.457.3221
E-Mail: [hidden email]
Web: http://www.asktami.com/
LinkedIn: http://www.linkedin.com/in/asktami
Twitter: http://twitter.com/asktami
Skype: tamiwilliamsusa

FileMaker Pro 11-16 Certified Developer | FileMaker Reseller | FileMaker Business Alliance Member | Certified Lasso Developer | Lasso Professional Alliance Member

------

Start collecting data in minutes and cut your inspection times in half with ccAudits, our FileMaker checklist template creation app available at www.ccAudits.com. Create audit and inspection checklists, surveys and other mobile forms for use on or offline, edit your forms, file reports, and add skip logic without writing any code.

------

If you want to receive sporadic email from Creative Computing regarding news at the company and announcements about upcoming Lasso webinars and online classes, please opt-in at http://tinyurl.com/yj7eqlg


#############################################################

This message is sent to you because you are subscribed to
  the mailing list Lasso [hidden email]
Official list archives available at http://www.lassotalk.com
To unsubscribe, E-mail to: <[hidden email]>
Send administrative queries to  <[hidden email]>
Reply | Threaded
Open this post in threaded view
|

Re: Need help trying to get Lasso 8.5 to talk to FileMaker 14 Server via HTTPS / Port 443

Tami Williams
On the FileMaker 14 Server machine if I do
http://localhost/fmi/xml/FMPXMLRESULT.xml?-dbnames
or
http://127.0.0.1/fmi/xml/FMPXMLRESULT.xml?-dbnames

I get a list of database names

BUT if I do

http://localhost:443/fmi/xml/FMPXMLRESULT.xml?-dbnames
or
http://127.0.0.1:443/fmi/xml/FMPXMLRESULT.xml?-dbnames

I get

"Your browser (or proxy) sent a request that this server could not understand.”


If I go to https://127.0.0.1/fmi/xml/FMPXMLRESULT.xml?-dbnames

I get a message about the "FMI Default Certificate” and “invalid certificate, host name mismatch” but if I say continue anyway I see the list of database names.

The same happens if I hit the FMS machine from another machine using the IP of the FMS machine - https://10.211.55.4/fmi/xml/FMPXMLRESULT.xml?-dbnames

But no matter what I can’t get the Lasso machine to see the FIleMaker databases once I turn on  use SSL for database connections.

Any other suggestions?

Thanks in advance.


> On Dec 6, 2017, at 11:31 PM, Brian Loomis <[hidden email]> wrote:
>
> Have you tried adding :443 to the end of the IP address to see what it does?
>
> Can you call the /fmi/ api on port :443 on that machine outside of lasso and apache with curl or another tool? Does it work local to the FMP server on 127.0.0.1:443 or 0.0.0.0:443 ? What about via the private IP? Can you curl SSL on it to the FMI API?
>
> Working out from localhost could help you identify the spot it doesn’t work.
>
>
> Brian
> <F12426AB-B450-4068-AFCB-0938302BCA5B>
> Brian Loomis
> Customated
> 910 Main Street Suite 337
> Boise, ID  83702
> (208) 841-0337
> http://www.customated.com
>
> On December 6, 2017 at 9:16:59 PM, Tami Williams ([hidden email]) wrote:
>
>> When FileMaker Server 14 Admin Database->Security, use SSL for database connections is turned on, if I use the IP address of the FM Server and Port 443 in the Lasso Site Admin FileMaker host database connection I can NOT see any of my FIleMaker databases.
>>
>> Lasso 8.5 + Apache are on one machine, FileMaker 14 Server is on another.
>>
>> How do I get my Lasso Apache web machine to talk to my FileMaker 14 Server machine via port 443/SSL?
>>
>>
>> Thanks in advance.
>>
>>
>>
>>
>>
>> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>> "It's better to burn out than to fade away."
>>
>> Tami Williams
>> Creative Computing
>> Let us help you make frustrating, costly, and inefficient processes more efficient, less costly and scalable.
>> FileMaker, Lasso and MySQL specialists.
>>
>> Tel/Fax: 770.457.3221
>> E-Mail: [hidden email]
>> Web: http://www.asktami.com/ 
>> LinkedIn: http://www.linkedin.com/in/asktami 
>> Twitter: http://twitter.com/asktami 
>> Skype: tamiwilliamsusa
>>
>> FileMaker Pro 11-16 Certified Developer | FileMaker Reseller | FileMaker Business Alliance Member | Certified Lasso Developer | Lasso Professional Alliance Member
>>
>> ------
>>
>> Start collecting data in minutes and cut your inspection times in half with ccAudits, our FileMaker checklist template creation app available at www.ccAudits.com. Create audit and inspection checklists, surveys and other mobile forms for use on or offline, edit your forms, file reports, and add skip logic without writing any code.
>>
>> ------
>>
>> If you want to receive sporadic email from Creative Computing regarding news at the company and announcements about upcoming Lasso webinars and online classes, please opt-in at http://tinyurl.com/yj7eqlg 


#############################################################

This message is sent to you because you are subscribed to
  the mailing list Lasso [hidden email]
Official list archives available at http://www.lassotalk.com
To unsubscribe, E-mail to: <[hidden email]>
Send administrative queries to  <[hidden email]>
Reply | Threaded
Open this post in threaded view
|

Re: Need help trying to get Lasso 8.5 to talk to FileMaker 14 Server via HTTPS / Port 443

Tami Williams-3
In reply to this post by Tami Williams-3
On the FileMaker 14 Server machine if I do
http://localhost/fmi/xml/FMPXMLRESULT.xml?-dbnames
or
http://127.0.0.1/fmi/xml/FMPXMLRESULT.xml?-dbnames

I get a list of database names

BUT if I do

http://localhost:443/fmi/xml/FMPXMLRESULT.xml?-dbnames
or
http://127.0.0.1:443/fmi/xml/FMPXMLRESULT.xml?-dbnames

I get

"Your browser (or proxy) sent a request that this server could not understand.”


If I go to https://127.0.0.1/fmi/xml/FMPXMLRESULT.xml?-dbnames

I get a message about the "FMI Default Certificate” and “invalid certificate, host name mismatch” but if I say continue anyway I see the list of database names.

The same happens if I hit the FMS machine from another machine using the IP of the FMS machine - https://10.211.55.4/fmi/xml/FMPXMLRESULT.xml?-dbnames

But no matter what I can’t get the Lasso machine to see the FIleMaker databases once I turn on  use SSL for database connections.

Any other suggestions?

Thanks in advance.


> On Dec 6, 2017, at 11:31 PM, Brian Loomis <[hidden email]> wrote:
>
> Have you tried adding :443 to the end of the IP address to see what it does?
>
> Can you call the /fmi/ api on port :443 on that machine outside of lasso and apache with curl or another tool? Does it work local to the FMP server on 127.0.0.1:443 or 0.0.0.0:443 ? What about via the private IP? Can you curl SSL on it to the FMI API?
>
> Working out from localhost could help you identify the spot it doesn’t work.
>
>
> Brian
> <F12426AB-B450-4068-AFCB-0938302BCA5B>
> Brian Loomis
> Customated
> 910 Main Street Suite 337
> Boise, ID  83702
> (208) 841-0337
> http://www.customated.com
>
> On December 6, 2017 at 9:16:59 PM, Tami Williams ([hidden email]) wrote:
>
>> When FileMaker Server 14 Admin Database->Security, use SSL for database connections is turned on, if I use the IP address of the FM Server and Port 443 in the Lasso Site Admin FileMaker host database connection I can NOT see any of my FIleMaker databases.
>>
>> Lasso 8.5 + Apache are on one machine, FileMaker 14 Server is on another.
>>
>> How do I get my Lasso Apache web machine to talk to my FileMaker 14 Server machine via port 443/SSL?
>>
>>
>> Thanks in advance.
>>
>>
>>
>>
>>
>> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>> "It's better to burn out than to fade away."
>>
>> Tami Williams
>> Creative Computing
>> Let us help you make frustrating, costly, and inefficient processes more efficient, less costly and scalable.
>> FileMaker, Lasso and MySQL specialists.
>>
>> Tel/Fax: 770.457.3221
>> E-Mail: [hidden email]
>> Web: http://www.asktami.com/ 
>> LinkedIn: http://www.linkedin.com/in/asktami 
>> Twitter: http://twitter.com/asktami 
>> Skype: tamiwilliamsusa
>>
>> FileMaker Pro 11-16 Certified Developer | FileMaker Reseller | FileMaker Business Alliance Member | Certified Lasso Developer | Lasso Professional Alliance Member
>>
>> ------
>>
>> Start collecting data in minutes and cut your inspection times in half with ccAudits, our FileMaker checklist template creation app available at www.ccAudits.com. Create audit and inspection checklists, surveys and other mobile forms for use on or offline, edit your forms, file reports, and add skip logic without writing any code.
>>
>> ------
>>
>> If you want to receive sporadic email from Creative Computing regarding news at the company and announcements about upcoming Lasso webinars and online classes, please opt-in at http://tinyurl.com/yj7eqlg 


#############################################################

This message is sent to you because you are subscribed to
  the mailing list Lasso [hidden email]
Official list archives available at http://www.lassotalk.com
To unsubscribe, E-mail to: <[hidden email]>
Send administrative queries to  <[hidden email]>
Reply | Threaded
Open this post in threaded view
|

Re: [LKC] Need help trying to get Lasso 8.5 to talk to FileMaker 14 Server via HTTPS / Port 443

Tami Williams-3
Thanks for the info - I will pass it on to the security department at my client.

On another note I have the SAME problem using FileMaker 16 Server and Lasso 8.5, turning on FMS 16’s SSL I can open the databases but Lasso can not see the databases if in Lasso Site Admin Database Host connection I use the IP of the FMS16 server with port 443 or IP:443, Lasso can only see the databases if I use host address = IP and port = 80.

Has anyone gotten FMS16 default SSL to work with Lasso so that Lasso’s talking to FM via SSL?

Thanks in advance.


> On Dec 7, 2017, at 10:39 AM, Brian Loomis <[hidden email]> wrote:
>
> What is the vintage of the server running Filemaker? OS and Version?
>
> I am not up to speed on Filemaker but I can tell you in Mac on Ruby I have to update the certificates in the OS often enough because API calls over SSL stop working. I do this using brew to update openssl.
>
> in this part of your email:
>
> _________________
>
> If I go to https://127.0.0.1/fmi/xml/FMPXMLRESULT.xml?-dbnames
>
> I get a message about the "FMI Default Certificate” and “invalid certificate, host name mismatch” but if I say continue anyway I see the list of database names.
>
> _________________
>
> Are you able to tell what the hostname is? If the hostname of the FMSA server is routable on your network you might try that in Lasso instead of the IP.
>
> https://community.filemaker.com/thread/84454
>
> If you do have to install a new certificate to get FMS to work I suggest using let’s_encrypt.
>
> Alternatively, you could use something like stunnel on the FMSA server to proxy all your SSL for you and just send it to the FMSA server as plain http once it gets on the local machine. This would keep you form having to do any janky FMSA certificate changes. IMHO messing with the Tomcat stuff on FMSA is a recipe for trouble unless you totally know what you are doing.
>
> https://www.stunnel.org/index.html
>
>
> Brian
> <3FBA85FB-7278-4E74-880D-AA8E068544F8>
> Brian Loomis
> Customated
> 910 Main Street Suite 337
> Boise, ID  83702
> (208) 841-0337
> http://www.customated.com
>
> On December 6, 2017 at 11:30:01 PM, Tami Williams ([hidden email]) wrote:
>
>> On the FileMaker 14 Server machine if I do
>> http://localhost/fmi/xml/FMPXMLRESULT.xml?-dbnames
>> or
>> http://127.0.0.1/fmi/xml/FMPXMLRESULT.xml?-dbnames
>>
>> I get a list of database names
>>
>> BUT if I do
>>
>> http://localhost:443/fmi/xml/FMPXMLRESULT.xml?-dbnames
>> or
>> http://127.0.0.1:443/fmi/xml/FMPXMLRESULT.xml?-dbnames
>>
>> I get
>>
>> "Your browser (or proxy) sent a request that this server could not understand.”
>>
>>
>> If I go to https://127.0.0.1/fmi/xml/FMPXMLRESULT.xml?-dbnames
>>
>> I get a message about the "FMI Default Certificate” and “invalid certificate, host name mismatch” but if I say continue anyway I see the list of database names.
>>
>> The same happens if I hit the FMS machine from another machine using the IP of the FMS machine - https://10.211.55.4/fmi/xml/FMPXMLRESULT.xml?-dbnames
>>
>> But no matter what I can’t get the Lasso machine to see the FIleMaker databases once I turn on use SSL for database connections.
>>
>> Any other suggestions?
>>
>> Thanks in advance.
>>
>>
>> > On Dec 6, 2017, at 11:31 PM, Brian Loomis <[hidden email]> wrote:
>> >
>> > Have you tried adding :443 to the end of the IP address to see what it does?
>> >
>> > Can you call the /fmi/ api on port :443 on that machine outside of lasso and apache with curl or another tool? Does it work local to the FMP server on 127.0.0.1:443 or 0.0.0.0:443 ? What about via the private IP? Can you curl SSL on it to the FMI API?
>> >
>> > Working out from localhost could help you identify the spot it doesn’t work.
>> >
>> >
>> > Brian
>> > <F12426AB-B450-4068-AFCB-0938302BCA5B>
>> > Brian Loomis
>> > Customated
>> > 910 Main Street Suite 337
>> > Boise, ID 83702
>> > (208) 841-0337
>> > http://www.customated.com
>> >
>> > On December 6, 2017 at 9:16:59 PM, Tami Williams ([hidden email]) wrote:
>> >
>> >> When FileMaker Server 14 Admin Database->Security, use SSL for database connections is turned on, if I use the IP address of the FM Server and Port 443 in the Lasso Site Admin FileMaker host database connection I can NOT see any of my FIleMaker databases.
>> >>
>> >> Lasso 8.5 + Apache are on one machine, FileMaker 14 Server is on another.
>> >>
>> >> How do I get my Lasso Apache web machine to talk to my FileMaker 14 Server machine via port 443/SSL?
>> >>
>> >>
>> >> Thanks in advance.
>> >>
>> >>
>> >>
>> >>
>> >>
>> >> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>> >> "It's better to burn out than to fade away."
>> >>
>> >> Tami Williams
>> >> Creative Computing
>> >> Let us help you make frustrating, costly, and inefficient processes more efficient, less costly and scalable.
>> >> FileMaker, Lasso and MySQL specialists.
>> >>
>> >> Tel/Fax: 770.457.3221
>> >> E-Mail: [hidden email]
>> >> Web: http://www.asktami.com/ 
>> >> LinkedIn: http://www.linkedin.com/in/asktami 
>> >> Twitter: http://twitter.com/asktami 
>> >> Skype: tamiwilliamsusa
>> >>
>> >> FileMaker Pro 11-16 Certified Developer | FileMaker Reseller | FileMaker Business Alliance Member | Certified Lasso Developer | Lasso Professional Alliance Member
>> >>
>> >> ------
>> >>
>> >> Start collecting data in minutes and cut your inspection times in half with ccAudits, our FileMaker checklist template creation app available at www.ccAudits.com. Create audit and inspection checklists, surveys and other mobile forms for use on or offline, edit your forms, file reports, and add skip logic without writing any code.
>> >>
>> >> ------
>> >>
>> >> If you want to receive sporadic email from Creative Computing regarding news at the company and announcements about upcoming Lasso webinars and online classes, please opt-in at http://tinyurl.com/yj7eqlg 
>>
>>
>> _______________________________________________
>> LKC mailing list
>> [hidden email]
>> http://lassoexpert.com/mailman/listinfo/lkc
> _______________________________________________
> LKC mailing list
> [hidden email]
> http://lassoexpert.com/mailman/listinfo/lkc


#############################################################

This message is sent to you because you are subscribed to
  the mailing list Lasso [hidden email]
Official list archives available at http://www.lassotalk.com
To unsubscribe, E-mail to: <[hidden email]>
Send administrative queries to  <[hidden email]>
Reply | Threaded
Open this post in threaded view
|

Re: Need help trying to get Lasso 8.5 to talk to FileMaker 14 Server via HTTPS / Port 443

maxwellk2
In reply to this post by Tami Williams-3
Tami, have a look at this thread…

        http://lasso.2283332.n4.nabble.com/8-6-to-FMS-via-SSL-td4641231.html <http://lasso.2283332.n4.nabble.com/8-6-to-FMS-via-SSL-td4641231.html>

Ultimately we decided to stick with HTTP instead of the VPN for Lasso 8, and migrated part of the code base to Lasso 9 that needed to be secured.

Someone else might be able to confirm 100%, but I just don't think Lasso 8 supports HTTPS with FMS.

-Max







> On Dec 6, 2017, at 1:44 PM, Tami Williams <[hidden email]> wrote:
>
> When FileMaker Server 14 Admin Database->Security, use SSL for database connections is turned on, if I use the IP address of the FM Server and Port 443 in the Lasso Site Admin FileMaker host database connection I can NOT see any of my FIleMaker databases.
>
> Lasso 8.5 + Apache are on one machine, FileMaker 14 Server is on another.
>
> How do I get my Lasso Apache web machine to talk to my FileMaker 14 Server machine via port 443/SSL?
>
>
> Thanks in advance.
>
>
>
>
>
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> "It's better to burn out than to fade away."
>
> Tami Williams
> Creative Computing
> Let us help you make frustrating, costly, and inefficient processes more efficient, less costly and scalable.
> FileMaker, Lasso and MySQL specialists.
>
> Tel/Fax: 770.457.3221
> E-Mail: [hidden email]
> Web: http://www.asktami.com/
> LinkedIn: http://www.linkedin.com/in/asktami
> Twitter: http://twitter.com/asktami
> Skype: tamiwilliamsusa
>
> FileMaker Pro 11-16 Certified Developer | FileMaker Reseller | FileMaker Business Alliance Member | Certified Lasso Developer | Lasso Professional Alliance Member
>
> ------
>
> Start collecting data in minutes and cut your inspection times in half with ccAudits, our FileMaker checklist template creation app available at www.ccAudits.com. Create audit and inspection checklists, surveys and other mobile forms for use on or offline, edit your forms, file reports, and add skip logic without writing any code.
>
> ------
>
> If you want to receive sporadic email from Creative Computing regarding news at the company and announcements about upcoming Lasso webinars and online classes, please opt-in at http://tinyurl.com/yj7eqlg
>
>
> #############################################################
>
> This message is sent to you because you are subscribed to
>  the mailing list Lasso [hidden email]
> Official list archives available at http://www.lassotalk.com
> To unsubscribe, E-mail to: <[hidden email]>
> Send administrative queries to  <[hidden email]>


#############################################################

This message is sent to you because you are subscribed to
  the mailing list Lasso [hidden email]
Official list archives available at http://www.lassotalk.com
To unsubscribe, E-mail to: <[hidden email]>
Send administrative queries to  <[hidden email]>
Reply | Threaded
Open this post in threaded view
|

Re: Need help trying to get Lasso 8.5 to talk to FileMaker 14 Server via HTTPS / Port 443

stevepiercy
>If I go to https://127.0.0.1/fmi/xml/FMPXMLRESULT.xml?-dbnames
>
>I get a message about the "FMI Default Certificate” and
>“invalid certificate, host name mismatch” but if I say
>continue anyway I see the list of database names.
>The same happens if I hit the FMS machine from another machine using the IP of the FMS machine - https://10.211.55.4/fmi/xml/FMPXMLRESULT.xml?-dbnames

Don't do that in a web browser.  There's shenanigans afoot.  Do
that on the command line with curl.  What do you get?

You might also need to fiddle with some options for `--tls*`.
https://curl.haxx.se/docs/manpage.html

Also what are the OSs for the two servers?  There is a known
issue with macOS 10.12.6 and openssl.
https://github.com/curl/curl/issues/1703

--steve

-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
Steve Piercy              Website Builder              Eugene, OR
<[hidden email]>               <http://www.stevepiercy.com/>


#############################################################

This message is sent to you because you are subscribed to
  the mailing list Lasso [hidden email]
Official list archives available at http://www.lassotalk.com
To unsubscribe, E-mail to: <[hidden email]>
Send administrative queries to  <[hidden email]>