I have FM17 server running on a Mac mini in our office, I purchased an SSL certificate(yet to be set up) from GoDaddy via Filemaker direct link. I can create a CSR, the difficulty is getting a validation on a private server as there is no email,DNS or TXT. Can anybody help on how to get a certificate on a private server?
Get the SSL certificate issued for a subdomain of a domain that you control (eg: fms.mydomain.com).
Add an A record to your existing public DNS that points the subdomain to your public IP address.
Set your router to port forward 5003 to the private IP of the server.
Outside users will now be able to connect to FileMaker.
If your router supports "NAT Loopback" or "hairpinning", you're done. When you try to connect from inside your LAN, DNS will give the client your public IP address, but the router will see the request on its way out and sent it right back in according to the port forwarding rules.
If your router does not support NAT Loopback or if you do not want to provide public access to your FileMaker Server, you must set up a local DNS server that points fms.mydomain.com to your private IP address.
First before you can obtain a SSL certificate, you need a public domain. You can not use a self invented internal domain name.
Second, you our someone else needs access to the DNS server of that domain.
Now let’s try to answer 2 questions: how can obtain a SSL certificate and second, how can I use it in my private network?
Let’s start with the first one, how can I buy a certificate?
Like you have done, create a CSR for the FQDN you will use in your domain. ( eg filemaker.mypublicdomain.com).
I asdume you will buy a SSL certificate with domain validation. The easiest way to get your domain validated is via a TXT record.
When you choose this option, you will receive a text string that you (or someone else that has access to your public DNS server) need ta add as a TXT record to your public DNS server.
If this can’t be done, there is a second option that you add your FQDN to the DNS server and point it to a public website, where you can upload a validation page you receive from GoDaddy. But this setup is more complex to achieve.
Now you can validate your certificate.
Now the second question: how can I use the SSL certificate in my internal network?
The clients in your orginisation must know that the FQDN you have chosen points to your internal FileMaker Server. Most often this is done configured on an internal DNS server. In some very small organisations, I have seen people have added it to the hosts file on the local computer.
Not the best option, but you can also add it to the external DNS ( with the internal IP address). Just be aware that it will only work inside ypur local network.
- Koen
Can't be done without DNS.
You have to prove you are the owner of that domain name for which the SSL was purchased (domain control validation), and that can't be done unless your Mac Mini host has a hostname and a DNS host record.