Smef

How to Use Let's Encrypt to get free SSL certificates for FileMaker Server

8 posts in this topic

Hello Everyone,

 

I've written a PowerShell script to allow you to get a free SSL certificate from Let's Encrypt to use with FileMaker Server. You can schedule this to run every few months and renew your certificate automatically. Now there's no reason to keep using that default certificate. Check out the post for instructions!

 

How to Use Let’s Encrypt SSL Certificates with FileMaker Server | Blue Feather - FileMaker Developer, Android, Web 


EDIT: One compatibility note for everyone - While it looks like it's all compatible with FileMaker Pro 13-15, only FileMaker Go 15 is compatible. FileMaker Go 14 is unable to connect with these certificates installed. I'd recommend using FM Go 15 anyway, but it's something to be aware of if you're still using FM Go 14.

Edited by Smef
Added note about FM Go 14 compatibility.
2 people like this

Share this post


Link to post
Share on other sites

You make it clear in your article but I want to repeat it here: those certificates are NOT supported by FMI so I would not deploy this to production...

Share this post


Link to post
Share on other sites

The warning FMI gives about using non-supported SSL certificates is that FileMaker Pro and Go clients won't be able to verify the SSL certificate. I believe we've solved this issue with this solution, and FileMaker clients as early as 13 are able to successfully verify the SSL certificate. There could be other issues lurking somewhere, but we've got this deployed in a number of live servers with no issues so far. It's definitely a good idea to do some testing after deploying this, all the same.

If anyone does encounter any issues, please post them here, on the article's comment section, or send a private message or email to me.

Edited by Smef

Share this post


Link to post
Share on other sites

Any Mac solution?

Share this post


Link to post
Share on other sites

It's definitely doable in a similar fashion, I just haven't gotten to doing it yet. I may have a Mac server available soon I can do testing on, and will definitely post when I get a script available for Mac.

Share this post


Link to post
Share on other sites

Great job @Smef! I've been wanting to use Let's Encrypt, but didn't think it was compatible with FileMaker.

When I schedule tasks on a FileMaker Server, I prefer to schedule them from within FileMaker Server itself. Since FMS can't run powershell scripts directly, I send this bash script the name of a powershell script to run and any parameters to send to the powershell script, if needed:

:: file name: run_powershell_script.cmd
:: Created by: Daniel Smith http://scr.im/fmconsulting

:: change current directory to script location
@PUSHD %~dp0

:: this is the old method that I disabled because of a bug in powershell.exe
:: powershell.exe -file %*

:: calling powershell.exe with -file option causes exceptions to NOT return an error code to this script
:: I implemented a work-around linked to from here: http://stackoverflow.com/a/15779295
:: I am replacing " with ' because, when using the -command option, " does not group data into a single value
:: FMS reads an errorlevel of 1 as "aborted by user" and only set's the log level to information,
:: I am trapping for uncaught errors and returning 100 so the log level is set as error in FMS
:: Since the actual error returned by the powershell script is lost, I'm sending it to a file.

SET params=%*
SET params=%params:"='%
PowerShell.exe -ExecutionPolicy unrestricted -command "& {trap{Out-File -FilePath "..\Documents\run_powershell_script_errors.log" -Append -InputObject $_ ; exit 100} .\%params%}"

@POPD

EXIT /B %ERRORLEVEL%

 

Share this post


Link to post
Share on other sites

Will this Run as Administrator? I don't think FileMaker Server normally has permission to edit the CStore folder, which is why "Run as Administrator" is required.

Share this post


Link to post
Share on other sites

Probably not; I hadn't thought of that. I usually don't run scheduled scripts as Administrator, so that hasn't come up.

In that case, I would use a script to create the scheduled task. Here's an example: (the options would need to be changed to get it to run as Administrator)

# https://technet.microsoft.com/en-us/library/jj649816(v=wps.630).aspx

$Action = New-ScheduledTaskAction `
	-Execute powershell.exe `
	-Argument "-ExecutionPolicy Bypass -File C:\GetSSL.ps1"

$Trigger = New-ScheduledTaskTrigger `
	-DaysInterval 85 `
	-At 1:00am

$Settings = New-ScheduledTaskSettingsSet `
	-AllowStartIfOnBatteries `
	-DontStopIfGoingOnBatteries `
	-ExecutionTimeLimit 00:05 `
	-StartWhenAvailable

$Principal = New-ScheduledTaskPrincipal `
	-UserId $([System.Security.Principal.WindowsIdentity]::GetCurrent().Name) `
	-LogonType S4U

$Task = New-ScheduledTask -Action $Action -Trigger $Trigger -Settings $Settings -Principal $Principal `
	-Description "TODO:explain what the task is for"


Register-ScheduledTask -TaskName "TODO:task-name" -TaskPath "TODO:optional-folder-name" -InputObject $Task -Force

 

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now

  • Similar Content

    • By Productive Computing, Inc.
      San Diego, CA - January 12, 2017 - Productive Computing, Inc., a Platinum member of the FileMaker® Business Alliance, is proud to announce the release of its first server-side plug-in - FM Books Connector Online Edition version 2.0.1.0.  This plug-in is now compatible with FileMaker Server 14 -15 for Mac and Windows. 
       
      The FM Books Connector Online Edition plug-in connects FileMaker with QuickBooks Online and enables users to push and pull contacts, invoices, and other sales transaction information. A FileMaker and QuickBooks integration eliminates double entry and provides financial data to staff without multiple people accessing sensitive QuickBooks company files.
       
      Version 2.0.1.0 includes an updated demo file to introduce and familiarize users and developers with the new server functionality, a new video for step-by-step instructions on how to install the plug-in on the server, and updated documentation for easier development and integration.

      "We embarked on a mission to create a QuickBooks Online server-side plug-in so that users could streamline deployment and explore truly mobile options. By utilizing the server-side plug-in to handle the processing, users on FileMaker Pro, iPad, iPhone or WebDirect have the ability to shuffle data back and forth to QuickBooks Online without having to install a client-side plug-in." Marc Larochelle, Chief Executive Officer, Productive Computing, Inc. 

      With a Server license, multiple users can now post to QuickBooks Online from a desktop with FileMaker client, from a web browser using FileMaker WebDirect, and from an iPhone or iPad via FileMaker Go.  The server-side plug-in allows users to capitalize on the mobility of QuickBooks Online. Sales staff, bookkeepers, or any employee can push a transaction from FileMaker to QuickBooks from the office, on the road, or working remotely from home.
       
      Additional benefits of a Server license include:
      - Added convenience of only needing to install the Server plug-in on one machine
      - Unlimited users on one server
      - Ability to connect with multiple QuickBooks Online company files 
      - Faster processing times than client-side plug-ins
       
      The FM Books Connector Online Edition plug-in is available for an annual rate of $200 for a single user (client side) and $450 for a Server license. The Server license comes with a free copy of the single user (client) plug-in to allow for development and authentication with QuickBooks online. For more information on the FM Books Connector Online Edition plug-in and system requirements visit www.fmbooksconnectoronline.com or call 760-510-1200.

      FileMaker Pro Support and Plug-in Integration:

      Do you have database enhancements you would like to have programmed?  Want help getting a plug-in professionally installed into your FileMaker solution?  We can help!

      The process is easy - complete our online Request For Quote form (RFQ) or call us directly at (760) 510-1200 and one of our certified developers can work with you on improving your solution today.

      About Productive Computing, Inc.

      Since 1996, Productive Computing, Inc. has been helping its customers become more efficient and profitable by implementing custom software solutions using FileMaker Pro. Utilizing FileMaker Pro as a rapid application development tool, their certified FileMaker developers can create custom applications that a business can run on their Windows or Macintosh desktop computers, in a web browser, on an iPad or iPhone or shared simultaneously on all of these platforms.

      Productive Computing, Inc. also produces Core4 CRM and Core5 Starter Edition, two off-the-shelf productivity solutions designed to automate your workflow, as well as a suite of FileMaker Pro plug-ins that allow FileMaker Pro to integrate with third party applications including Outlook, QuickBooks, Apple Contacts and Calendar, PDF forms, digital signatures, and biometric fingerprint scanners.

      In addition, Productive Computing, Inc. is a full-service FileMaker Pro hosting company. FileMaker hosting services allow customers to host their own FileMaker Pro solutions on Productive Computing servers in the cloud instead of purchasing and supporting the necessary server infrastructure themselves. These same servers also provide the infrastructure for customers who would prefer to subscribe to Productive Computing's Core4, Core5, or Vessel Service Solutions under a SaaS (Software as a Service) pricing model.

      Productive Computing, Inc. is one of only a few companies in the United States to have earned the highly respected Platinum level membership within the FileMaker Business Alliance and recently won the exclusive FileMaker Business Alliance Partner of the Year award.

      Productive Computing, Inc.
      950 Boardwalk, Suite 205
      San Marcos, CA 92078
      www.ProductiveComputing.com
      sales@productivecomputing.com
      (760) 510-1200

      Press Contacts:
      Productive Computing, Inc.
      Keith Larochelle
      (760) 510-1200

      # # #

      ---------------------------------------------------
    • By Richard Carlton
      FileMaker Cloud SSL Certificate Renewals | FileMaker Cloud | FileMaker 15 Training
       
       
      LINK TO SSL CERTIFICATE TOOL: http://thebrainbasket.com/?p=499
      Covering renewing your Cloud SSL Certificate with Claus Lavendt
      Get up to speed with the FileMaker Pro 15 Video Training Course! 
      Top Rated Course by FileMaker Expert, Richard Carlton.  
      http://learningfilemaker.com/fmpro15.php
      Experience Richard's dynamic and exciting teaching format, while learning both basic, intermediate, and advanced FileMaker development skills. With 26 years of FileMaker experience and a long time speaker at FileMaker's Developer Conference, Richard will teach you all the ins and outs of building FileMaker Solutions.  The course is 40 hours of video content!
      Richard has been involved with the FileMaker platform since 1990 and has grown RCC into one of the largest top tier FileMaker consultancies worldwide. 
      Richard works closely with RCC's staff: a team of 28 FileMaker 
      developers and supporting web designers. He has offices in California, Nevada, and Texas.

      Richard has been a frequent speaker at the FileMaker Developers Conference on a variety of topics involving 
      FileMaker for Startups and Entrepreneurs, and client server integration.

      Richard is the Product Manager for FM Starting Point, the popular and most downloaded free FileMaker CRM Starter Solution.

      Richard won 2015 Excellence Award from FileMaker Inc (Apple Inc) for outstanding video and product creation, leading to business development.

      RCC and LearningFileMaker.com are headquartered in Santa Clara, CA.

      http://www.rcconsulting.com/
      Please feel free to contact us at support@rcconsulting.com
      If you want to explore building I.O.S apps for I Phone or I Pad and deploying those out to the Apple App Store.
       
      Here is a video introduction to our iOS App Training https://www.youtube.com/watch?v=cVxQe_yAshw
      Looking for FM Starting Point free software download: http://www.fmstartingpoint.com
      For More Free FileMaker Videos Check out Http://www.filemakerfree.com
      Visit http://www.learningfilemaker.com for all facets of FileMaker Award Winning Video Training.
      Please Visit Our Channel: https://www.youtube.com/user/FileMakerVideos Please Subscribe While There.

      Please Comment, Like & Share All of Our Videos.

      Feel Free to Embed any of Our Videos on Your Blog or Website.
      Follow Us on Your Favorite Social Media
      https://www.facebook.com/FileMakerVideos
      https://twitter.com/filemakervideos
      https://plus.google.com/+FileMakerVideos/videos

      Filemaker Pro 15 Training Videos
      FileMaker 15 Videos
      Filemaker Pro 15 Video Course
      #FileMakerVideos
      #FileMakerTrainingVideos
      #WhatisFilemaker15
      #FilemakerPro15Training
      #Filemaker15VideoTutorial
      #FilemakerPro15Videos
    • By scrumpto
      I'm unsure where exactly to post this so I'll try it here. If there's a better place please move this but it seems to be the correct category.
      I'm looking to setup hosting for a 15 member team who will be primarily accessing the database via WebDirect. However, I'd like to connect the solution to MySQL and open up parts of the database to 50 other users via Custom Web Publishing (php).
      I'd appreciate any feedback on hosting companies who can handle some or all of the following: licensing, WebDirect, Custom Web Publishing and ODBC. I looked into FileMaker Cloud but it doesn't seem to be able to handle CWP. Someone mentioned today that you can go with AWS apart from Cloud and I'd love to hear feedback on that as well. Anything you guys can share on good and less than desirable solutions would be most appreciated.
      Feel free to recommend your own company or PM me and tell me why I'll like working with you.
      Thanks!
    • By Mark Stuller
      Hi all
      We have discovered a possible issue with the Admin/Config app. We'd appreciate your thoughts.
      We turned on SSL by checking the SSL box in the enclosed screenshot. When attempting a sync the client received "The MirrorSync URL returned an unexpected response. Check your URL, verify that the server is running properly, and try again. Address: https://mirrorsync3.oda.state.or.us/MirrorSync/sync". So we went thru the config again and found the SSL box unchecked. We cannot get the SSL checkbox to stay checked.
      We did modify the MirrorSync Customization script to set the $$MIRRORSYNC_URL with https and that worked. We are however, wondering if there is something awry with our install or this specific Configuration.
      We are running MirrorSync 3.1.
      Thanks, Mark

    • By DanS
      We have need for a filemaker developer/consultant to make modifications to an existing Filemaker 12 database. The database makes use of a number of scripts to "synchronise" records with a second Filemaker database hosted on a windows web server.
      Changes to be made to the database include debugging the existing scripts and fixing bad design in the table relationships.
      The primary database is hosted in north queensland, Australia. However due to the remoteness of the location we are expecting that it will be necessary to work remotely with a developer. Access can be provided via VNC or LogMeIn. Ideally we'd like someone in a time-zone close to the East coast of Australia (and ideally within Australia), but we are willing to consider offshore developers as well.
      I am an experienced web and database developer with other technologies, and I would feel most comfortable with a Filemaker developer who also had experience with SQL databases (I don't mind which ones: SQL Server, Postgres, MySQL, Oracle etc) and other programming or scripting languages in addition to Filemaker.
      In addition to a series of one-off changes to the database, we would be interested in someone who can provide ongoing support.
      If you are interested, please leave your contact details here, or send me a private message for more details.