1

(9 replies, posted in Institution Errors)

I have been in the phone several times with them about this. They ignored me.

Thanks

What error are you getting?
Are you using NetBenefits? Then the right URL is https://nbofx.fidelity.com/netbenefits/ofx/download

Try ofx_version=102, app_version=2500. Your FID of 7776 is correct.

4

(9 replies, posted in Institution Errors)

With Fidelity one doesn't need to do anything to get OFX access. It already works.

5

(9 replies, posted in Institution Errors)

I checked with them about a month ago, and approval was still pending. I made it very clear in my request that this is for home use, but I did not provide a DUNS number. There is not much transparency into the process. The person I spoke to on the phone was from a different department than the dev portal. I think we have a reasonable case that 1) it is our data and they took away access we previously had 2) we are "developers" from their point of view, and are willing to accept and assume the associated risks. The more of us try to go through the process, the harder they have to think before issuing a blanket refusal. I could easily see myself moving to Fidelity over this.

In order to be sure you'd have to tell us what application is producing these messages.
SSL validation is about your application being able to verify the connection encryption certificate of the ofx server. Hypothetically a failed SSL validation may mean someone is intercepting your connection and reading/modifying it (including obtaining your password); but this is unlikely.
It is harder to guess what "OFX validation" means, but I would guess it means your password was correct.

Jesse wrote:

I had a few nice discussions with potential owners but nothing worked out. Thanks to anyone who contacted me about this.

I expect to have some more time to develop this site in the coming weeks. Look for new and interesting changes.

My first goal is to finish a new ofx downloading tool that I've been working on.

Jesse, how's your ofx tool development going?

8

(9 replies, posted in Institution Errors)

I spoke to Schwab. The usual questions about Quicken and have I tried this/that etc.
Eventually I found out that they recently made some changes (around mid-October) and are asking third-party software providers to register and sign agreements. I told them I'm writing my own software and want to do the same.
They directed me to register here: https://developer.schwab.com/home

9

(9 replies, posted in Institution Errors)

I am having the same issue. I verified that a curl request that previously worked does not work now.
Sounds like we need to call them up and try to understand what they changed.

10

(3 replies, posted in OFX Tools)

Look into the ofxtools package.

Interesting. Have you reached out to Schwab to report this?

12

(1 replies, posted in General)

pedz wrote:

OFX was originally suppose to be a communication between a bank and an application I thought but now Quicken (Intuit?) has morphed it into a "file format" and it is a binary format it seems.

Indeed your assessment is correct. The protocol is called OFX, but both QFX and OFX are file formats that typicall contain FI responses. All the QFX and OFX files I have seen are plain-text and human-readable. I don't know why your QFX is binary. Perhaps it is compressed?

I am speculating now, but I suspect the difference between QFX and OFX is simply that Intuit has added a few extra directives to OFX.

pedz wrote:

Will diving into the OFX specification be the place to start?  I guess my basic question (which is off topic for this forum perhaps) is how best to understand how to parse a "QFX file"?

Since you have already have experience with libofx my suggestion is not use that, and not have to write your own parser from scratch. Furthermore, I suggest you take a look at ofxtools, which is an active and well-documented project.

13

(33 replies, posted in Institution Errors)

Thank you crashenx.5UiL7.

pk2007, I would be grateful for any hints on how your set up your Citi CREDIT CARD transaction download. As far as I know from browsing various forums very few people have been able to do what you did. Any information you can share would be very useful.

15

(33 replies, posted in Institution Errors)

Any progress?

What is your Citi credit card configuration?

robler wrote:

I think Quicken has a connection dump facility whereby users can print out the details of its http/ofx connection with whatever institution it's talking to.

Can one of you post that for Discover Card? Maybe non-Quicken users can mimic whatever connection scheme Quicken uses to get OFX access.

Can you provide instructions on how to do it?

Thank you. I followed the instructions and installed the patch. My Quicken 2019 still uses what they call Web Connect Express rather than Direct Connect (OFX).

The Discover URL you posted above, what's supposed to go into the stmtKey and bid fields? Also, it ends with "RecentActivity-20190918", what's the rule for changing that? Finally, I assume you request it only after logging into the account from the browser first?

joelika wrote:

However, there's a different support document from Quicken saying they have an update to fix it (can't link it here because of the 1 URL rule)

Could you provide a link to that please?

20

(27 replies, posted in Institution Errors)

Thank you guys!
Following your discussion I too was able to download my Citi transactions, both through ofxget, and through GnuCash.
The trick seems to have been 1) choosing a fixed client uid 2) navigating to Profile->More Settings->Manage Desktop Apps and adding access 3) within the 10 minute window sending a signon only request, without transaction information request. Something like this:

OFXHEADER:100
DATA:OFXSGML
VERSION:103
SECURITY:NONE
ENCODING:USASCII
CHARSET:NONE
COMPRESSION:NONE
OLDFILEUID:5bbe7147-1084-4a90-bf47-98b69af842c1
NEWFILEUID:5bbe7147-1084-4a90-bf47-98b69af842c1

<OFX>
  <SIGNONMSGSRQV1>
    <SONRQ>
        <DTCLIENT>20190919051115.851[0:GMT]
      <USERID>Username
      <USERPASS>Password
    <CLIENTUID>b238dd8f-84d0-44b6-9327-3f79b8e704a0</CLIENTUID>
    <LANGUAGE>ENG<FI><ORG>Citigroup<FID>24909</FI>
    <APPID>QWIN<APPVER>2500
    </SONRQ>
  </SIGNONMSGSRQV1>
</OFX>

Citi replied with:
<OFX>
<SIGNONMSGSRSV1>
<SONRS>
<STATUS>
<CODE>0
<SEVERITY>INFO
<MESSAGE>0
</STATUS>
<DTSERVER>20190919050848.000
<LANGUAGE>ENG
<FI>
<ORG>Citigroup
<FID>24909
</FI>
</SONRS>
</SIGNONMSGSRSV1>
</OFX>

Then, I sent another request, this time including the tag:
    <CREDITCARDMSGSRQV1>
    <CCSTMTTRNRQ>
      <TRNUID>40c5a401-5976-4bd4-bf25-ff8ed56f3c99</TRNUID>
      <CCSTMTRQ>
        <CCACCTFROM>
          <ACCTID>my credit card number</ACCTID>
        </CCACCTFROM>
        <INCTRAN>
          <INCLUDE>Y</INCLUDE>
        </INCTRAN>
      </CCSTMTRQ>
    </CCSTMTTRNRQ>
  </CREDITCARDMSGSRQV1>

21

(27 replies, posted in Institution Errors)

I'm using the latest url, and getting "The information you entered does not match our records".
Obviously I'm using the right username and password, to the best of my knowledge. Any thoughts on what might be the issue?

22

(27 replies, posted in Institution Errors)

@jchem, could you please post your Citi card config? Are you using GnuCash and AqBanking?

23

(33 replies, posted in Institution Errors)

How were you able to order the header entries exactly as pgs described? My order is slightly off and I'm getting permission denied errors.
Are you able to download data directly to GnuCash?

24

(33 replies, posted in Institution Errors)

Is Discover and the HTTP header order trick still working for anyone?

25

(13 replies, posted in Institution Comments)

By default GnuCash uses OFXHEADER 102, at least v3.6 for me.

So you are able to get Schwab Brokerage statement data through ofxtools, but what about directly from GnuCash?

EDIT.
I think the header version is a red herring.
Here is the request GnuCash sends for me right now, pulled from /tmp/ofx.log

OFXHEADER:100
DATA:OFXSGML
VERSION:220
SECURITY:NONE
ENCODING:USASCII
CHARSET:1252
COMPRESSION:NONE
OLDFILEUID:NONE
NEWFILEUID:20190821160519.000

<OFX><SIGNONMSGSRQV1><SONRQ><DTCLIENT>20190821160519.000<USERID>username
<USERPASS>password
<LANGUAGE>ENG<FI><ORG>ISC<FID>5104</FI><APPID>QWIN<APPVER>2700</SONRQ></SIGNONMSGSRQV1><INVSTMTMSGSRQV1><INVSTMTTRNRQ><TRNUID>20190821160519.000<CLTCOOKIE>1<INVSTMTRQ><INVACCTFROM><ACCTID>account number</INVACCTFROM><INCTRAN><INCLUDE>N</INCTRAN><INCOO>Y<INCPOS></INCPOS><INCBAL>Y</INVSTMTRQ></INVSTMTTRNRQ></INVSTMTMSGSRQV1></OFX>

I get the same error message as you, about invalid characters such as spaces. But when I compared with the ofxget request, I noticed I was missing the field

<BROKERID>SCHWAB.COM</BROKERID>

.
After adding SCHWAB.COM to appropriate BrokerId field in AqBanking user config, now GnuCash pulls data correctly.