Jump to content
Dr. Zathras

Update Apache while retaining FMS custom web publishing

Recommended Posts

I'm running FMS on OS X 10.9.5. It's serving forty databases, one of which is served to the web via custom web publishing. Everything is running smoothly but the campus security auditor is picking up a vulnerability with the old version of OpenSSL running on OS X 10.9.5's Apache. I addressed this on a different, non-FMS Mac by disabling Apple's bundled Apache and using MacPorts to install Apache2.

How to do this on my FMS 11 Mac? Just getting MacPorts to install Apache2 is the first problem as port install apache2 fails with a conflicting ports message. I assume this is because the existing Apache is blocking installation of the new version but how to stop the existing one? I tried turning off web publishing in the FMS admin console but port install still fails with the familiar conflicting ports message. Even stopping the web server with Mark Banks' FMSControl didn't help.

I therefore have a couple of questions:

  1. How do I stop the existing Apache so MacPorts will install Apache2?
  2. Once I have Apache2, how do I get FMS11 to use it instead of Apple's bundled Apache1?



Edited by Colin Hunter

Share this post

Link to post
Share on other sites

Answers to your questions

1) sudo apachectl stop

2) There should be instructions inside, at least brew tells you have to enable your packages.



What I would do in this case would be to leave what works running, change the IP of presinstalled apache to to make the apache server only me available on localhost,) install nginx as reverse proxy( as pr this example ) on the same node and make a https accessible proxying through localhost, that way you get the benefit of reverse proxy in 2 ways; speed/performance, and security.

Edited by ggt667

Share this post

Link to post
Share on other sites

You should update to OS X 10.11 or 10.12.  This will update your Apache and ModSSL installs.  Unfortunately, FMS 11 is not compatible with these newer OS versions so you'll need to update it as well, and then your FMPro installs too.  Isn't this fun?

I'm not even sure how you're running FMS 11 on OS X 10.9 as it is an unsupported OS for that version.

- John

Share this post

Link to post
Share on other sites

FMS 11 is officially unsupported on OS X 10.9 but I've experienced no problems serving 40 databases to 25 FMP clients and 1 database over the web via custom web publishing from this Mac. Yes, at some point we will upgrade to a version of OS X which Apple is actively supporting and as you note we'll then need to convert our databases to FM 12 format to run on whichever version of FMS/FMP is compatible with the new OS. Not a trivial task and with everything stable and everybody happy (other than the security auditor) there have been no complaints.

Nevertheless we need to be secure but we can't jump to OS X 10.12 on this server quite yet. I installed a new Apache/OpenSSL but was unable to persuade FMS 11 to see it so I'm going to follow ggt667's recommendation and go down the nginx path. His advice to leave what works running and have nginx serve as a reverse proxy to 10.0's Apache is an elegant solution but I'm somewhat out of my comfort zone with the necessary configuration steps. Hopefully I can figure it all out but may return for additional advice if I get stuck.

In any case, many thanks for the replies and especially to ggt667 for suggesting a solution I would never have thought of myself.


Share this post

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Similar Content

    • By Joost Miltenburg
      We are running FMserver with custom webpublishing. People can connect to the website and see pictures that are attached to propositions.
      The pictures folder is located on the FMServer as well and getting pretty big now. So we are complating moving the folder ( it is currently located in htdocs ( running on a Mac )).
      How do we reconfigure FMServer/apache to do this?
      Kind regards....
    • By GeoSteven
      I am running a server side script that attempts to update records in a MySQL table that is set up as an external data source. It runs without issue for hours to weeks at a time then gets hung on error 512 (Record was already modified by another user). The problem is that I can't figure out how to capture and handle this error. I've tried adding "If get(lasterror)=512 then <skip this record and continue to next> just after the 'Go to Record(next)' but it never gets to that step. Instead hangs on try to move the record pointer and writing error after error to the log. 
      I've searched the forums fairly thoroughly but there is not a lot of info forthcoming. Surely this has been a problem for someone else that has figured out how to handle it. Any suggestions appreciated.
      Will be glad to provide more info on the environment if needed.
      Thanks in advance,
    • By ggt667
      What is wrong when Database appears unavailable to the scheduler, yet regular users are logged in?
    • By imdarek
      Hi, I am using filemaker 11 to copy customer info from excel into the database and then it would generate special keys in pdf allowing us to send the file to the customer.
      My access to the filemaker is non-admin, and the import function of customer info has been blocked.
      We are keying in the record one at a time, so we are looking at ways to automate this process.
      When I try to create a new record using applescript with just 
      it was not allowed. There are data that require validation like date and auto-indexed record number.
      So, is there a way we could create new record and then using the set function to copy data into the report?
    • By ggt667
      How can I get ESS access to PostgreSQL from FM11SA?
  • Who Viewed the Topic

    2 members have viewed this topic:
    Ed@  Terrible Toll 
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.