Skip to main content
Question

Corporate SSL Interception with FME Form/Desktop


dave_oppd
Contributor
Forum|alt.badge.img+3

My company does SSL inspection/interception which is causing errors when trying to view background maps in FME Form.  I have seen ways to fix this for the FME Flow (Server) side, but is there any way to change any configurations for FME Form to handle this?  The CA certificate for our authority is in the Trusted Root Certification Authorities certificate store on machines so I’m not sure why it isn’t trusted if FME is using the machine’s certificate store for trust.  Below is an example of error seeing from FME Flow 2025.0.1 (but have seen on previous versions as well).

Stadia Maps Reader: Failed to load 'https://tiles.stadiamaps.com/tiles/alidade_smooth/5/19/14.png'. Error: 'HTTPSConnectionPool(host='tiles.stadiamaps.com', port=443): Max retries exceeded with url: /tiles/alidade_smooth/5/19/14.png (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1018)')))'
Python Exception <FMEException>: FMEException: 927109: Stadia Maps Reader: Failed to load 'https://tiles.stadiamaps.com/tiles/alidade_smooth/5/19/14.png'. Error: 'HTTPSConnectionPool(host='tiles.stadiamaps.com', port=443): Max retries exceeded with url: /tiles/alidade_smooth/5/19/14.png (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1018)')))'
 

3 replies

geographix
Contributor
Forum|alt.badge.img+4
  • Contributor
  • May 14, 2025

Going to a full URL such as https://tiles.stadiamaps.com/tiles/alidade_smooth/5/19/14.png displays a 401 Error image. There is a certificate issued by “Sectigo ECC Domain Validation Secure Server CA” covering *.stadiamaps.com but I don’t know much about Authority Key Identifiers.

Do you get the same Python exception with other background maps?


hkingsbury
Celebrity
Forum|alt.badge.img+54
  • Celebrity
  • May 15, 2025

I’m not sure this is going to work, but worth a try, under FME Options, Network Proxy, have you tried changing it from No proxy to Use system proxy settings?


j.botterill
Influencer
Forum|alt.badge.img+39
  • Influencer
  • May 20, 2025

Make sure your company IT consider whitelisting the following websites for the Flow machines https://support.safe.com/hc/en-us/articles/25407547782541-URLs-Used-by-FME-and-Safe-Software


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings