Skip to main content
Solved

is TLS 1.2 supported using FME Desktop 2014?

s.jager
Influencer
Forum|alt.badge.img+16

Hi,

Unfortunately I am still forced to use FME 2014. A lot of webservices that I frequently use have now moved to TLS 1.2, and I find that FME won't connect to them anymore, returning an error "SSL connect error".

Based on this:

https://knowledge.safe.com/questions/73167/what-http-client-does-the-httpcaller-use.html

It looks like the version of FME shouldn't be a problem, since FME uses what the OS provides (in which case I need to get my sysadmin working - we're on Windows 10). But based on this:

https://knowledge.safe.com/questions/85353/esris-arcgis-online-is-removing-support-for-tls-11.html

It might not be supported, although this sentence "FME has supported TLS 1.2-based connections to ArcGIS Online starting with FME 2015.1.1" could also reference AGOL instead of TLS, I'm not sure about that.

Can anyone clarify for me what the problem could be? If the upgrade is the only solution, then I'm out of luck for at least the next few months I'm afraid...

TIA,

Stefan

Best answer by mark2atsafe

So I looked through our internal notes and databases and the information was as ambiguous as the articles that you have discovered.

However, then I found this sentence about the Esri requirement:

This may have implications on FME’s Esri ArcGIS Online (AGOL) Feature Service format from the time it was introduced (circa FME 2014) until FME 2015.1.1 (when we upgraded to a Python version with TLS 1.2 support).

That's my bold highlighting, but I think that's the relevant part.

So right now I'm 90% sure you won't be able to connect using 2014. I'm 5% thinking you might get somewhere if you can change the Python interpreter under Tools > FME Options (although I'm not sure what options 2014 had). I'm also about 5% it might be a proxy issue. Do you have any proxy set up under Tools > FME Options? If so, what are they set to?

I'm going to check with a developer, but like I said, I think it's likely to be not possible in FME 2014.

View original
Did this help you find an answer to your question?

4 replies

mark2atsafe
Safer
Forum|alt.badge.img+44
  • mark2atsafeSafer
  • Safer
  • Best Answer
  • January 29, 2020

So I looked through our internal notes and databases and the information was as ambiguous as the articles that you have discovered.

However, then I found this sentence about the Esri requirement:

This may have implications on FME’s Esri ArcGIS Online (AGOL) Feature Service format from the time it was introduced (circa FME 2014) until FME 2015.1.1 (when we upgraded to a Python version with TLS 1.2 support).

That's my bold highlighting, but I think that's the relevant part.

So right now I'm 90% sure you won't be able to connect using 2014. I'm 5% thinking you might get somewhere if you can change the Python interpreter under Tools > FME Options (although I'm not sure what options 2014 had). I'm also about 5% it might be a proxy issue. Do you have any proxy set up under Tools > FME Options? If so, what are they set to?

I'm going to check with a developer, but like I said, I think it's likely to be not possible in FME 2014.

s.jager
Influencer
Forum|alt.badge.img+16
  • s.jagerInfluencer
  • Author
  • Influencer
  • January 30, 2020
mark2atsafe wrote:

So I looked through our internal notes and databases and the information was as ambiguous as the articles that you have discovered.

However, then I found this sentence about the Esri requirement:

This may have implications on FME’s Esri ArcGIS Online (AGOL) Feature Service format from the time it was introduced (circa FME 2014) until FME 2015.1.1 (when we upgraded to a Python version with TLS 1.2 support).

That's my bold highlighting, but I think that's the relevant part.

So right now I'm 90% sure you won't be able to connect using 2014. I'm 5% thinking you might get somewhere if you can change the Python interpreter under Tools > FME Options (although I'm not sure what options 2014 had). I'm also about 5% it might be a proxy issue. Do you have any proxy set up under Tools > FME Options? If so, what are they set to?

I'm going to check with a developer, but like I said, I think it's likely to be not possible in FME 2014.

I think I agree, that it's not possible. The environment I have to work in is (unnecesary) complicated, but no matter what I set the Proxy to (none, use system settings, fill in all the details manually) seem to make a difference.

I will try to see if I can change the Python interpreter, just to see if that makes a difference. But I think my main priority is going to be pushing the upgrade forward that has been in the pipeline for over a year now :-)

Tahnk you for looking into this though, that is much appreciated (at least now I know I'm not the only one thinking the available information is ambiguous ;-) ). I'll post here when I know more about the python thing, that could be helpful for others as well.

s.jager
Influencer
Forum|alt.badge.img+16
  • s.jagerInfluencer
  • Author
  • Influencer
  • February 5, 2020
s.jager wrote:

I think I agree, that it's not possible. The environment I have to work in is (unnecesary) complicated, but no matter what I set the Proxy to (none, use system settings, fill in all the details manually) seem to make a difference.

I will try to see if I can change the Python interpreter, just to see if that makes a difference. But I think my main priority is going to be pushing the upgrade forward that has been in the pipeline for over a year now :-)

Tahnk you for looking into this though, that is much appreciated (at least now I know I'm not the only one thinking the available information is ambiguous ;-) ). I'll post here when I know more about the python thing, that could be helpful for others as well.

So I have not been able to replace the Python interpreter yet, so still not sure if that helps or not. But what is interesting is that I have another workspace that connects to an https webservice in order to get an access token, and that token is retrieved without a problem. That webservice also uses TLS1.2, at least in my browser.

It is of course possible that this one still supports the previous protocols and the others do not anymore, and in the handshake between webservice and FME it is decided to fall back on 1.1 or even 1.0 or something. Is there a way to log that? Or do I need Wireshark in order to see that? extremely slim change I'd be allowed to install Wireshark, but I can always ask...

s.jager
Influencer
Forum|alt.badge.img+16
  • s.jagerInfluencer
  • Author
  • Influencer
  • February 6, 2020
mark2atsafe wrote:

So I looked through our internal notes and databases and the information was as ambiguous as the articles that you have discovered.

However, then I found this sentence about the Esri requirement:

This may have implications on FME’s Esri ArcGIS Online (AGOL) Feature Service format from the time it was introduced (circa FME 2014) until FME 2015.1.1 (when we upgraded to a Python version with TLS 1.2 support).

That's my bold highlighting, but I think that's the relevant part.

So right now I'm 90% sure you won't be able to connect using 2014. I'm 5% thinking you might get somewhere if you can change the Python interpreter under Tools > FME Options (although I'm not sure what options 2014 had). I'm also about 5% it might be a proxy issue. Do you have any proxy set up under Tools > FME Options? If so, what are they set to?

I'm going to check with a developer, but like I said, I think it's likely to be not possible in FME 2014.

Without changing the Python interpreter you are correct. I used https://www.ssllabs.com/ssltest to check the TLS versins supported by the servers that I could and could not connect to, and used https://www.howsmyssl.com/ to check FME (using a simple httpfetcher). FME 2014 only supports TLS 1.0, the server I could not connect to only supports 1.2, the server I could connect to supports 1.0, 1.1 and 1.2. So in the handshake between FME and the server 1.0 is agreed upon, and FME gets the results I need.

A test with 2019-2 had no problems with either server, but that was done from my personal private laptop. I will still see if I can get another Python interpreter.

Thanks for your time though, it's been hepful (even if it isn't really the answer I would ike to hear ;-) )

Reply


Helpful Members This Week

Community Stats

31,094
Posts
117,895
Replies
38,853
Members

Latest FME

Terms & ConditionsCookie settings

Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings
A product of
Safe Software respectfully acknowledges that we live, learn and work on the traditional and unceded territories of the Kwantlen, Katzie, and Semiahmoo First Nations.