Skip to main content

My company does SSL inspection/interception which is causing errors when trying to view background maps in FME Form.  I have seen ways to fix this for the FME Flow (Server) side, but is there any way to change any configurations for FME Form to handle this?  The CA certificate for our authority is in the Trusted Root Certification Authorities certificate store on machines so I’m not sure why it isn’t trusted if FME is using the machine’s certificate store for trust.  Below is an example of error seeing from FME Flow 2025.0.1 (but have seen on previous versions as well).

Stadia Maps Reader: Failed to load 'https://tiles.stadiamaps.com/tiles/alidade_smooth/5/19/14.png'. Error: 'HTTPSConnectionPool(host='tiles.stadiamaps.com', port=443): Max retries exceeded with url: /tiles/alidade_smooth/5/19/14.png (Caused by SSLError(SSLCertVerificationError(1, 'rSSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1018)')))'
Python Exception <FMEException>: FMEException: 927109: Stadia Maps Reader: Failed to load 'https://tiles.stadiamaps.com/tiles/alidade_smooth/5/19/14.png'. Error: 'HTTPSConnectionPool(host='tiles.stadiamaps.com', port=443): Max retries exceeded with url: /tiles/alidade_smooth/5/19/14.png (Caused by SSLError(SSLCertVerificationError(1, 'rSSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1018)')))'
 

Going to a full URL such as https://tiles.stadiamaps.com/tiles/alidade_smooth/5/19/14.png displays a 401 Error image. There is a certificate issued by “Sectigo ECC Domain Validation Secure Server CA” covering *.stadiamaps.com but I don’t know much about Authority Key Identifiers.

Do you get the same Python exception with other background maps?


I’m not sure this is going to work, but worth a try, under FME Options, Network Proxy, have you tried changing it from No proxy to Use system proxy settings?


Make sure your company IT consider whitelisting the following websites for the Flow machines https://support.safe.com/hc/en-us/articles/25407547782541-URLs-Used-by-FME-and-Safe-Software


Hi ​@dave_oppd 

We have the same problem, and I’m currently working with our IT department to get it resolved. Did you manage to get it sorted? If so, what was the ‘trick’?