An Apple Subsidiary. This software addresses an issue where the OpenSSL library used by FileMaker Server 13.0v1 was vulnerable to the Heartbleed bug.

Transcription

1 An Apple Subsidiary FileMaker Server 13.0v2 Installer and Updater Release Notes Software Description The installer software installs FileMaker Server 13.0v2 for Windows and OS X. The updater software updates versions 13.0v1 and 13.0v1a of FileMaker Server to version 13.0v2. Software Details Updates in FileMaker Server 13.0v2 1. Security This software addresses an issue where the OpenSSL library used by FileMaker Server 13.0v1 was vulnerable to the Heartbleed bug. FileMaker Server 13.0v2 includes OpenSSL 1.0.1g, which is not vulnerable to the Heartbleed bug. In addition, the TLS heartbeat in OpenSSL is disabled, which removes the attack method used by the Heartbleed bug. FileMaker Server 13.0v2 includes an updated default SSL certificate. It is possible that FileMaker passwords may become compromised due to a Heartbleed bug exploit. We recommend that you change all passwords, including Admin Console and database passwords, after installing FileMaker Server 13.0v Replacing the default SSL certificate After applying this software, if you do not have a signed SSL certificate that matches your specific server name or DNS name, request a certificate from a trusted certificate authority (CA) supported by FileMaker, Inc. If you previously obtained a signed SSL certificate, contact your CA to revoke your existing certificate and request a new certificate. For instructions, see the FileMaker Server Help topic Securing your data. For information on supported CAs, see the FileMaker Knowledge Base: 2. CLI commands FileMaker Server 13.0v2 supports importing existing SSL certificates. If you have an existing certificate, you do not need to use the CERTIFICATE CREATE command to create a Certificate Signing Request (CSR). You should have a signed certificate from your SSL certificate provider and a private key file. With the CERTIFICATE IMPORT command, use the --keyfile option to specify the signed certificate and use the -- keyfilepass option to specify the password that is required to read the private key file. Example: fmsamdin certificate import c:\documents\certificate.pem --keyfile c:\documents\certificatekey.pem - keyfilepass password Often, the signed certificate and the private key file are combined into a single file. The CERTIFICATE IMPORT command allows you to specify the same file for both items: fmsadmin certificate import c:\documents\combinedcertificate.pem --keyfile c:\documents\combinedcertificate.pem --keyfilepass password Note: The CERTIFICATE IMPORT command only supports the.pem file format. If you have a private key file

2 that is a.pfx or.pf12 file (a file in either PKCS #7 or #12 format), you need to convert the private key file to the.pem file format before using the fmsadmin CERTIFICATE IMPORT command to import it. The following is an example of how to use OpenSSL to convert a PKCS #12 file to the.pem file format: openssl pkcs12 -in keystore.pfx -out keystore.pem nodes For information about supported certificates, visit the FileMaker Knowledge Base at help.filemaker.com. 3. Server-side scripting Addressed an issue where a script being performed on the server did not return an Exit Script value if the script encountered an error. Addressed an issue where XML import and export could not use XSL style sheet transformations. 4. Database Server Addressed an issue where, in rare cases, the Database Server could stop responding if three or more clients simultaneously performed queries from different layouts on the same table through different relationships. 5. FileMaker WebDirect 5.1. Miscellaneous FileMaker 13 WebDirect Guide has been updated for FileMaker Server 13.0v2. You can download the updated PDF from Addressed an issue where, if a FileMaker WebDirect solution received notifications while doing chart calculations, the solution could cause the Web Publishing Engine to crash. Addressed an issue where custom dialog boxes in FileMaker WebDirect solutions could cause the Web Publishing Engine to crash. Improved performance related to communication with FileMaker WebDirect clients. Web users should not use accented or Asian characters when changing a FileMaker WebDirect solution s password. Using accented or Asian characters from a web browser can corrupt the password stored in the FileMaker database. Addressed text alignment issues for clients using Internet Explorer User interaction in FileMaker WebDirect solutions The capability to specify URL parameters or to bookmark specific locations within FileMaker WebDirect solutions has been removed for security reasons. You now specify only a filename in the URL to open that file. Addressed an issue where pressing Esc would close both a popover window and a list. Addressed an issue where the cursor might fail to appear in a field after a script that goes to another layout and sets the focus in a field on that layout is run. Addressed an issue where the cursor might fail to appear in a field in List View or in a portal after an active record with uncommitted text is changed by clicking directly in a field. Addressed a redraw issue that prevents a user in List View from seeing updates from other users. Addressed an issue where a global field in a grand summary part could not be entered if the found set was empty. Addressed encoding issues in tooltips. Addressed an issue where the web browsers may have issues rendering layout elements correctly if a database developer is changing the layout in a hosted FileMaker WebDirect solution while a web

3 user is accessing the same solution in multiple web browsers (for example, Internet Explorer and Safari, or Internet Explorer and Chrome). Addressed an issue where users could interact with a solution while a script was running on the server. Improved the behavior of scroll wheel and trackpad scrolling. Addressed an issue where menu items were missing in the File menu and the Edit menu when a FileMaker WebDirect solution was viewed in a Chrome web browser. OS X: Addressed an issue where a user could see a Session Expired message when viewing the Database Homepage immediately after rebooting an OS X system Fields in FileMaker WebDirect solutions Addressed an issue where importing using a calculation field as the match field would not detect the match field as valid. Addressed an issue where a number field would not display as a question mark to indicate the field contained non-numeric values or numbers too long to display entirely. Addressed an issue with interactive container contents not showing the correct icon in the container field Functions and calculations in FileMaker WebDirect solutions Fixed the behavior of the Get(ConnectionState) function for FileMaker WebDirect clients. Fixed the behavior of the Get(ActivePortalRowNumber) function for portals that are in popovers. Fixed the behavior of the Self function for user interface controls in FileMaker WebDirect solutions. Addressed an issue where some calculations would return numbers as text instead of as numbers Popovers in FileMaker WebDirect solutions Addressed an issue where, when modifying a field value that is in a popover that is in a portal, the field value might not be saved. Addressed an issue where closing a popover that is opened from a portal might incorrectly deselect the portal row. If an open popover has an OnObjectExit script trigger set and a portal has an OnObjectEnter script trigger set, clicking into a field in the portal executes the portal s OnObjectEnter script trigger before executing the popover s OnObjectExit script trigger Portals in FileMaker WebDirect solutions Addressed an issue where a portal row might not be scrolled to when navigated to by the Go to Portal script step when the Select entire contents option was selected. Addressed an issue where moving to another row through the Go to Portal Row script step would leave the cursor in the previous row. Addressed an issue where running scripts associated to a button for navigating portal rows might intermittently go to the wrong row. Addressed an issue where the active portal row was not highlighted when selected if a script trigger was assigned to the portal. Addressed an issue where the active portal row was not highlighted when selected if another row had previously been highlighted.

4 Addressed an issue with active object focus changes when choosing items from lists in a portal. Addressed an issue with the cursor focus indicator disappearing after using Set Field in portal rows Lists in FileMaker WebDirect solutions Addressed an issue where, when the Include arrow to hide and show list option was selected, a list would not dismiss when a list item was selected. Addressed an issue where clicking out of a field associated to a list in a portal would display the list Custom homepage Addressed an issue where canceling the login from a custom homepage would redirect the user to the default homepage instead of to the custom homepage. Addressed an issue where the custom homepage would open as a blank page if Custom Web Publishing is not enabled Scripts in FileMaker WebDirect solutions Addressed an issue where, if in a FileMaker WebDirect solution, the OnLastWindowClose script trigger ran a script that contained the Exit Application script step, the event would create an infinite loop in the FileMaker Script Engine. Addressed an issue where a user running a script with the Insert File script step to update a container field did not get notified that the record was already locked by another user. Addressed an issue where scripts using the Send Mail script step did not include the information for the To: field. Addressed actions that could be affected by session timeout, including running lengthy scripts and uploading container data Exporting from a FileMaker WebDirect solution Known Issues In a script that uses the Export Record script step to export data where a field or record is too long for the export format, the Get(LastError) function returns 0 rather than 736 when run in a FileMaker WebDirect solution. Addressed an issue where attempting to export only related fields would detect that no fields were selected for export. For the latest information, see the FileMaker Knowledge Base:

5 Who should use this software? Use this software if you have any of the configurations listed below. Platform Product Version Use This Software Languages Windows FileMaker Server 13 OS X FileMaker Server v1 13.0v1a 13.0v1 13.0v1a FileMaker Server 13.0v2 installer for Windows FileMaker Server 13.0v2 updater for Windows FileMaker Server 13.0v2 installer for OS X FileMaker Server 13.0v2 updater for OS X English French Italian German Swedish Japanese Installation Instructions (Windows 7, Windows 8, Windows Server 2008 R2 SP1, Windows Server 2012) To ensure a smooth installation, disable virus detection software before running the installer, and re-enable it after you are finished. Before running the installer 4. In the Windows Services Console, select Services (Local). 5. Select the FileMaker Server service, then choose Action menu > Stop. 6. Quit web browsers before applying the update. Uninstall your current version of FileMaker Server installation, for detailed instructions on uninstalling FileMaker Server. 2. Restart the machine after uninstalling FileMaker Server. installation, for detailed instructions on installing FileMaker Server. 2. Double-click Setup.exe, and follow the instructions on installing FileMaker Server. 3. After the installation has completed, restart the machine. 4. Verify the version has been updated: If, after following the steps above, you are still unable to install FileMaker Server 13.0v2, contact FileMaker

6 Updater Instructions (Windows 7, Windows 8, Windows Server 2008 R2 SP1, Windows Server 2012) To ensure a smooth update, disable virus detection software before applying the update, and re-enable it after you are finished. You may be prompted to insert your original installation CD or locate the original installation software during the update process. Before running the updater 4. In the Windows Services Console, select Services (Local). 5. Select the FileMaker Server service, then choose Action menu > Stop. 6. Quit web browsers before applying the update. installation, for detailed instructions on upgrading FileMaker Server. 2. Double-click Setup.exe. (Note: Do not run FileMakerServer13v2Update.msp.) 3. Read the license agreement. If you agree to the terms, click Update and proceed as directed. 4. After the update has completed, you will see a message confirming the successful update to the new version. Click Finish to quit the updater. 5. Restart the machine. 6. Verify the version has been updated: If, after following the steps above, you are still unable to update to FileMaker Server 13.0v2, contact FileMaker Installation Instructions (OS X 10.8 and OS X 10.9) To ensure a smooth installation, disable virus detection software before running the installer, and re-enable it after you are finished. Before running the installer Uninstall your current version of FileMaker Server installation, for detailed instructions on uninstalling FileMaker Server. 2. Restart the machine after uninstalling FileMaker Server. installation, for detailed instructions on installing FileMaker Server. 2. Double-click the FileMaker Server 13 installer. 3. After the installation has completed, restart the machine. 4. Verify the version has been updated:

7 If, after following the steps above, you are still unable to install FileMaker Server 13.0v2, contact FileMaker Updater Instructions (OS X 10.8 and OS X 10.9) To ensure a smooth update, disable virus detection software before applying the update, and re-enable it after you are finished. Before running the updater 1. Double-click the FileMaker Server 13 v2 Update. 2. Read the license agreement. If you agree to the terms, click Update, and then proceed as directed. After the update has completed, you will see a message confirming the successful installation of the new version. 3. Click Quit to quit the updater when completed. 4. Restart the machine. 5. Verify the version has been updated: If, after following the steps above, you are still unable to install FileMaker Server 13.0v2, contact FileMaker 2014 FileMaker, Inc. All rights reserved. FileMaker is a trademark of FileMaker, Inc. registered in the U.S. and other countries. The file folder logo is a trademark of FileMaker, Inc. All other trademarks are the property of their respective owners.