Re: Sudden error with CFHTTP ans SSL

2015-04-03 Thread Claude Schnéegans
Payments were getting processed but the results confirmation didn't work. This is on Coldfusion 8. That was exactly the problem, on CF 9 also. the certificate needed is the Verisign G5 certificate In my case, the certificate I got from the Paypal site was a Symantec certificate. That is

Re: Sudden error with CFHTTP ans SSL

2015-04-03 Thread Michael van Leest
Verisign certificate products have been taken over by Symantec. 2015-04-03 18:54 GMT+02:00 : Payments were getting processed but the results confirmation didn't work. This is on Coldfusion 8. That was exactly the problem, on CF 9 also. the certificate needed is the Verisign G5

Re: Sudden error with CFHTTP ans SSL

2015-04-03 Thread Al Musella, DPM
it.. but just to make it faster for others... the certificate needed is the Verisign G5 certificate which you can get at https://knowledge.verisign.com/support/mpki-for-ssl-support/index?page=contentactp=CROSSLINKid=SO5624 To see if you have it installed - and to install it if you don't, use: https

Re: Sudden error with CFHTTP ans SSL

2015-04-03 Thread Al Musella, DPM
So then is the symantec certificate newer? Should I also add that? What is the link to it? They have so many certificates on paypal Verisign certificate products have been taken over by Symantec. 2015-04-03 18:54 GMT+02:00 : Payments were getting processed but the results

Re: Sudden error with CFHTTP ans SSL

2015-04-03 Thread Michael van Leest
Best option is to contact PayPal support with that question. They should be able to point you to the valid certs. Good luck, Michael On Friday, April 3, 2015, Al Musella, DPM muse...@virtualtrials.com wrote: So then is the symantec certificate newer? Should I also add that? What is the

Re: Sudden error with CFHTTP ans SSL

2015-04-03 Thread Al Musella, DPM
Paypal support is useless. I contacted them 3 times for another issue last week and they couldn't help at all At 04:11 PM 4/3/2015, you wrote: Best option is to contact PayPal support with that question. They should be able to point you to the valid certs.

Re: Sudden error with CFHTTP ans SSL

2015-04-01 Thread Claude Schnéegans
you need to import the certificate to the java cacerts as a trusted certificate to by-pass the security matching. That was the trick. I imported the Paypal certificate and now it works. Thanks a lot. ~| Order the Adobe

Re: Sudden error with CFHTTP and SSL

2015-04-01 Thread Michael Grant
This sounds like it could be the Poodle vulnerability that I faced a few months back when Chase Paymentech disabled SSL 3.0. What version of Java is the server running? Java 7 allows SSL 3.0 to negotiate using TLS. I had to convince my host to update from Java 6. On Mon, Mar 30, 2015 at 1:33

RE: Sudden error with CFHTTP and SSL

2015-04-01 Thread Kurt Kaptein
: 616-538-5691 Visit our Website: www.spectrumnetdesigns.com Email: k...@spectrumnetdesigns.com -Original Message- From: Michael Grant [mailto:mgr...@modus.bz] Sent: Wednesday, April 1, 2015 3:29 PM To: cf-talk Subject: Re: Sudden error with CFHTTP and SSL This sounds like it could

Re: Sudden error with CFHTTP and SSL

2015-04-01 Thread Russ Michaels
I suspect they disabled various ssl protocols due to poodle, you should ask them. The default response ro poodle was to disable everything except latest tls version, which is not supported out of the box by the jvm that ships with cf9. On Mon, Mar 30, 2015 at 18:33 PM, wrote: Hi, I have

Re: Sudden error with CFHTTP and SSL

2015-04-01 Thread Wil Genovese
If they have disable the older SSL protocols here are two blog posts I did on how to handle that with CFHTTP and your Java version. Java Version http://www.trunkful.com/index.cfm/2014/11/24/ColdFusion-JVM-SSL-CA-CERTS-and-POODLE CFHTTP and JVM switches http://www.trunkful.com/index.cfm/2014

Re: Sudden error with CFHTTP ans SSL

2015-03-31 Thread Byron Mann
What is the URL and does the domain name match the certificate exactly, meaning not a wildcard certificate. Could be PayPal updated their SSL certificate and is either a wildcard certificate or multi-site/domain certificate (not sure what these are really called). CF will not like

Sudden error with CFHTTP and SSL

2015-03-31 Thread Claude Schnéegans
with no modification, bur all of a sudden starting March 23rd, I get this error: I/O Exception: peer not authenticated It appears to be an error with the SSL certificate, but how come ? The Paypal site is verified by Verisign. What ca I do

Sudden error with CFHTTP ans SSL

2015-03-31 Thread Claude Schnéegans
with no modification, bur all of a sudden starting March 23rd, I get this error: I/O Exception: peer not authenticated It appears to be an error with the SSL certificate, but how come ? The Paypal site is verified by Verisign. What ca I do

Re: Sudden error with CFHTTP ans SSL

2015-03-31 Thread Claude Schnéegans
Could be PayPal updated their SSL It must be the problem, because I have other paiement services and they have no problem. I'm trying your suggestion, thanks. ~| Order the Adobe Coldfusion Anthology now! http

Re: Sudden error with CFHTTP ans SSL

2015-03-31 Thread John M Bliss
not a wildcard certificate. Could be PayPal updated their SSL certificate and is either a wildcard certificate or multi-site/domain certificate (not sure what these are really called). CF will not like it if the domain is www.domain.com, but the certificate is *.domain.com. In this case, you

RE: CFHTTP SSL Cert

2014-04-17 Thread Brook Davies
-Original Message- From: John M Bliss [mailto:bliss.j...@gmail.com] Sent: April-16-14 11:02 AM To: cf-talk Subject: Re: CFHTTP SSL Cert When cfhttp is broken, can you drop the URL into your browser and have it work? Or is it broken there too? On Wed, Apr 16, 2014 at 12:27 PM, Brook

CFHTTP SSL Cert

2014-04-16 Thread Brook Davies
Hey Peeps, After heartbleed, I had to re-add the EchoSign Cert to our keystore (via the keytool) on all our servers. It worked as expected, and the connection started working again. However, on one our webservers, it works, and then later that day stops being able to connect and I get I/O

Re: CFHTTP SSL Cert

2014-04-16 Thread John M Bliss
When cfhttp is broken, can you drop the URL into your browser and have it work? Or is it broken there too? On Wed, Apr 16, 2014 at 12:27 PM, Brook Davies cft...@logiforms.com wrote: Hey Peeps, After heartbleed, I had to re-add the EchoSign Cert to our keystore (via the keytool) on all

Re: CFHTTP SSL call returns Peer Not Authenticated

2014-02-25 Thread Pete Freitag
Is the server using a 2048 bit or higher key? I had a client with some issues connecting to twitter after they upgraded their SSL to 2048 bit, and the issue was resolved in this case by updating the CF9 server with the latest hotfixes (9.0.1 Cumulative Hotfix 4). I know you are on CF8, but you

CFHTTP SSL call returns Peer Not Authenticated

2014-02-24 Thread David Phelan
I have written a page that makes an SSL web service call using CFHTTP but I cannot seem to get the service to respond with anything other than Peer Not Authenticated. I have imported the certificates for the servers into the CF keystore and restarted the CF services. I found a post relating

Re: SSL certificate problem with 3rd party

2014-01-17 Thread Wil Genovese
and after restarting CF10 it still works. I’ve pulled my hair out before on this without luck other than in one case an SSL cert automagically started working. I have in the past looked for any documentation that Adobe updated CFHTTP between CF8 and CF10 I have not found anything yet. However

SSL certificate problem with 3rd party

2014-01-16 Thread Jason Durham
A payment processor changed one of their certificates which is causing CF to throw an exception when we try to connect via CFHTTP using SSL. The error message is: *I/O Exception: Name in certificate `internetsecure.com http://internetsecure.com' does not match host name `test.internetsecure.com

Re: SSL certificate problem with 3rd party

2014-01-16 Thread Jake Churchill
jqdur...@gmail.com wrote: A payment processor changed one of their certificates which is causing CF to throw an exception when we try to connect via CFHTTP using SSL. The error message is: *I/O Exception: Name in certificate `internetsecure.com http://internetsecure.com' does not match host

Re: SSL certificate problem with 3rd party

2014-01-16 Thread Jon Clausen
SSL. The error message is: *I/O Exception: Name in certificate `internetsecure.com http://internetsecure.com' does not match host name `test.internetsecure.com http://test.internetsecure.com'* You can view the certificate by navigating to https://test.internetsecure.com. My browser doesn't

Re: SSL certificate problem with 3rd party

2014-01-16 Thread John M Bliss
wrote: A payment processor changed one of their certificates which is causing CF to throw an exception when we try to connect via CFHTTP using SSL. The error message is: *I/O Exception: Name in certificate `internetsecure.com http://internetsecure.com' does not match host name

Re: SSL certificate problem with 3rd party

2014-01-16 Thread Justin Scott
Can anyone provide assistance as to why CF 8.0.1 isn't happy with this certificate? It sounds like they're using a certificate with multiple embedded hostnames (known as alternative names) which is not supported by Java 6. Importing the cert into the java cert cache won't help. You will need

Re: SSL certificate problem with 3rd party

2014-01-16 Thread Byron Mann
. test.internetsecure.com != *.internetsecure.com as CF 8 sees it. https://www.google.com/#q=coldfusion+import+ssl+certificate is a start as to importing the certificate to the CF java instance. To grab the certificate, use a web browser to go to the URL ( https://test.internetsecure.com). Click

Re: SSL certificate problem with 3rd party

2014-01-16 Thread Justin Scott
You will need to import the star (*) certificate into the keystore for the java instance ColdFusion is running upon. Basically ColdFusion doesn't like to speak to *.domain.com certificates (I think CF10 doesn't mind so much), as it is not an exact match to the URL it is attempting to

Re: SSL certificate problem with 3rd party

2014-01-16 Thread Byron Mann
Apologies, Justin is correct. I tested this on one of our CF 8 servers and the host file/IP manipulation worked as stated. I'm so used to dealing with the * certificate issue, I wasn't aware this wasn't the case for the new certificates with the multiple names. FYI, I tried things out on CF 10,

Re: SSL certificate problem with 3rd party

2014-01-16 Thread Justin Scott
FYI, I tried things out on CF 10, and it appears to accept these types of certificates without issue. What's the JVM version you're using on that installation? -Justin ~| Order the Adobe Coldfusion Anthology now!

Re: SSL certificate problem with 3rd party

2014-01-16 Thread Wil Genovese
Simply stating it works on ColdFusion 10 is meaningless. ColdFusion 10 installs with Java 1.6 by default. So unless you’ve patched CF10 and explicitly installed Java 1.7 and edited your jvm.config to use Java 1.7 you are still on Java 1.6. Wil Genovese Owner / Sr Web Application

Twitter API: SSL now required

2014-01-14 Thread Jordan Michaels
it was something I had done even though what I was doing had nothing to do with that. It took me a while to track it down. Turns out, just today twitter started enforcing the use of SSL with their API calls. If you have any twitter API code that do not currently use HTTPS in it's endpoint URL's, better get

Re: CFLDAP socket closed error against SSL

2013-12-18 Thread Dave Watts
Used LDAP Browser and it fails with the following message: CA certificate is not in the server certificate chain So I've used the keytool to import the all three: 1 - Comodo CA 2 - the intermediate/root cert of the server 3 - the cert of the server itself. Restarted and it still

CFLDAP socket closed error against SSL

2013-12-10 Thread Dan LeGate
Custom Tag code isn't somehow cached. I have verified the SSL (636) port is open to the CF server. Any ideas on this one? Very confused by this. Thanks for any feedback! Dan ~| Order the Adobe Coldfusion Anthology now! http

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread Dan LeGate
I take it back... exact same code EXCEPT my code in outside the Custom Tag folder had excluded the PORT attribute, so I assume it was going to the non-SSL port and working fine. Once I added port = 636 to that code, exact same response: socket closed Again, the LDAPS (636) port is open

RE: CFLDAP socket closed error against SSL

2013-12-10 Thread Robert Harrison
Blog: http://www.austin-williams.com/blog Twitter: http://www.twitter.com/austin_williams -Original Message- From: Dan LeGate [mailto:d...@legeek.com] Sent: Tuesday, December 10, 2013 3:50 PM To: cf-talk Subject: Re: CFLDAP socket closed error against SSL I take it back... exact

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread Russ Michaels
Have u imported the ssl into the key store? Russ Michaels www.michaels.me.uk cfmldeveloper.com cflive.net cfsearch.com On 10 Dec 2013 20:52, Dan LeGate d...@legeek.com wrote: I take it back... exact same code EXCEPT my code in outside the Custom Tag folder had excluded the PORT attribute, so

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread Dan LeGate
: Have u imported the ssl into the key store? Russ Michaels www.michaels.me.uk cfmldeveloper.com cflive.net cfsearch.com On 10 Dec 2013 20:52, Dan LeGated...@legeek.com wrote: I take it back... exact same code EXCEPT my code in outside the Custom Tag folder had excluded the PORT

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread Russ Michaels
we need? Where is the key store on the CF Server and how do we manipulate it? Thanks, Dan On 12/10/2013 2:53 PM, Russ Michaels wrote: Have u imported the ssl into the key store? Russ Michaels www.michaels.me.uk cfmldeveloper.com cflive.net cfsearch.com On 10 Dec 2013 20:52

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread .jonah
on the CF Server and how do we manipulate it? Thanks, Dan On 12/10/2013 2:53 PM, Russ Michaels wrote: Have u imported the ssl into the key store? Russ Michaels www.michaels.me.uk cfmldeveloper.com cflive.net cfsearch.com On 10 Dec 2013 20:52, Dan LeGated...@legeek.com wrote: I take

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread .jonah
into the key store? Or a Certificate Authority certificate we need? Where is the key store on the CF Server and how do we manipulate it? Thanks, Dan On 12/10/2013 2:53 PM, Russ Michaels wrote: Have u imported the ssl into the key store? Russ Michaels www.michaels.me.uk cfmldeveloper.com

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread Dan LeGate
certificate? Or just individually import one at a time? Any help is appreciated. Thanks, Dan On 12/10/2013 2:53 PM, Russ Michaels wrote: Have u imported the ssl into the key store? Russ Michaels www.michaels.me.uk cfmldeveloper.com cflive.net cfsearch.com On 10 Dec 2013 20:52, Dan LeGated

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread .jonah
, Dan On 12/10/2013 2:53 PM, Russ Michaels wrote: Have u imported the ssl into the key store? Russ Michaels www.michaels.me.uk cfmldeveloper.com cflive.net cfsearch.com On 10 Dec 2013 20:52, Dan LeGated...@legeek.com wrote: I take it back... exact same code EXCEPT my code in outside

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread Dan LeGate
:53 PM, Russ Michaels wrote: Have u imported the ssl into the key store? Russ Michaels www.michaels.me.uk cfmldeveloper.com cflive.net cfsearch.com On 10 Dec 2013 20:52, Dan LeGated...@legeek.com wrote: I take it back... exact same code EXCEPT my code in outside the Custom Tag folder had

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread Mahcsig
or root certs as well? Should I be importing some sort of combined certificate? Or just individually import one at a time? Any help is appreciated. Thanks, Dan On 12/10/2013 2:53 PM, Russ Michaels wrote: Have u imported the ssl into the key store? Russ Michaels

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread Dave Watts
That's only necessary if the certificate from the LDAP server isn't signed by a known CA. (e.g. it's self-signed.) ... or signed by a root CA that's not in the keystore - this happens fairly commonly in my experience. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/

Re: CFLDAP socket closed error against SSL

2013-12-10 Thread Dan LeGate
:53 PM, Russ Michaels wrote: Have u imported the ssl into the key store? Russ Michaels www.michaels.me.uk cfmldeveloper.com cflive.net cfsearch.com On 10 Dec 2013 20:52, Dan LeGated...@legeek.comwrote: I take it back... exact same code EXCEPT my code in outside the Custom Tag folder

Issue implementing SSL authentication to use SQL force encryption

2013-12-05 Thread Gregory Grays
All, I am having an issue when I add the suggested SSL connection string via adobe\Cold Fusion website (EncryptionMethod=SSL; TrustStore=path to keystore; TrustStorePassword=trustStorePassword; ValidateServerCertificate=true|false; HostNameInCertificate) and when I restart the Cold Fusion

Re: Issue implementing SSL authentication to use SQL force encryption

2013-12-05 Thread Dave Watts
I am having an issue when I add the suggested SSL connection string via adobe\Cold Fusion website (EncryptionMethod=SSL; TrustStore=path to keystore; TrustStorePassword=trustStorePassword; ValidateServerCertificate=true|false; HostNameInCertificate) and when I restart the Cold Fusion

Re: cfhttp and SSL ... I/O Exception: peer not authenticated

2013-11-18 Thread Brian FitzGerald
If you use a centralised storage for all servers in your cluster then it is easy. Russ, thanks a lot for your response (somehow I missed it last week). I read the article you linked to about client variables (good read). Are you aware of any resources which discuss how one might implement a

Re: cfhttp and SSL ... I/O Exception: peer not authenticated

2013-11-18 Thread Russ Michaels
I did it once long ago when I was still a developer, it was probably on CF5 or 6. I will presume Windows is used here, if not, just translate tot he Unix equivalents. It is basically just a file server, network attached storage, a SAN or whatever you have available. You MAP a drive on your web

Re: cfhttp and SSL ... I/O Exception: peer not authenticated

2013-11-15 Thread Brian FitzGerald
Hey Dave, Thanks a lot for your response. Please see some comments inline below: Are you using clustering to support a larger number of users than a single server? Or are you using it to provide failover in case a server fails? Or both? The clustering is mainly for supporting a large number

Re: cfhttp and SSL ... I/O Exception: peer not authenticated

2013-11-15 Thread Dave Watts
I'm hoping it's the former :) I guess that's what I'm getting at though... I'm sure you've done many applications that run on clustered servers, is using sticky sessions a common and accepted practice for using cfcs in a clustered environment? Or do larger applications like this just

Re: cfhttp and SSL ... I/O Exception: peer not authenticated

2013-11-15 Thread Russ Michaels
If you use a centralised storage for all servers in your cluster then it is easy. You save session data to your san disk. And simply reload it if it gets lost due to switching servers. You can also achieve this with replication between local disks too. Remember the session is stored in a cookie

Re: cfhttp and SSL ... I/O Exception: peer not authenticated

2013-11-15 Thread Brian FitzGerald
Lots of people use sticky sessions to solve this problem. That doesn't provide failover, but if you're not doing something extremely critical where the user can just go elsewhere (ex: ecommerce) you might not need failover. With sticky sessions, in the event that one server crashed, the users on

Re: cfhttp and SSL ... I/O Exception: peer not authenticated

2013-11-15 Thread Dave Watts
Lots of people use sticky sessions to solve this problem. That doesn't provide failover, but if you're not doing something extremely critical where the user can just go elsewhere (ex: ecommerce) you might not need failover. With sticky sessions, in the event that one server crashed, the

Re: SSL on CFquery

2013-04-19 Thread Richard White
Thanks Russ, ill take a look into this You don't, afaik ypu simply need the client cert in the java keystore. See this http://dev.mysql.com/doc/refman/5.0/en/connector-j-reference-using-ssl.html There is a handu cfadmin extension on riaforge.org for managing your keystore. Regards Russ

SSL on CFquery

2013-04-16 Thread Richard White
Hi, We have a windows server for our CF application and a Linux server for our database. We are setting up a self-signed SSL between the two servers. Our hosting company have said we need to reference the SSL in the connection string but how can I do this in a cfquery? Many thanks Richard

Re: SSL on CFquery

2013-04-16 Thread Russ Michaels
Do the following to enable SSL connection: 1. In the ColdFusion Administrator, go to Data Services Data Sources. 2. Select the data source to enable SSL Connection. 3. In the data source page, click Show Advanced Settings. 4. In the Connection String text box

Re: SSL on CFquery

2013-04-16 Thread Richard White
Perfect! Many thanks Russ :) Do the following to enable SSL connection: 1. In the ColdFusion Administrator, go to Data Services Data Sources. 2. Select the data source to enable SSL Connection. 3. In the data source page, click Show Advanced Settings

Re: SSL on CFquery

2013-04-16 Thread Richard White
Hi, We have a further issue with this. The hosting company have installed the SSL certificate on the database and provided us with the details of where the certificate is stored. However, in the CF connection string it asks to provide the url of the certificate. I am confused about how

Re: SSL on CFquery

2013-04-16 Thread Russ Michaels
www.cfmldeveloper.com - Free CFML hosting for developers www.cfsearch.com - CF search engine On Apr 16, 2013 5:33 PM, Richard White rich...@re-base.net wrote: Hi, We have a further issue with this. The hosting company have installed the SSL certificate on the database and provided us with the details of where

Does AJAX work with Shared SSL

2013-03-22 Thread Byte Me
Hi, my website and shared ssl use different servers (my site is hosted). Can someone tell me for sure if ajax can work with shared ssl. When I try to use ajax with shared ssl I get a security type error. I could have sworn that this had been working fine, but now I get an error. I am wondering

Re: Does AJAX work with Shared SSL

2013-03-22 Thread Raymond Camden
Are you saying your HTML is NOT on the Shared SSL and your Ajax resource is? If so, you're going to run into the cross domain security issue. You can use JSON/P or CORS to get around it. On Fri, Mar 22, 2013 at 8:30 AM, Byte Me byteme...@verizon.net wrote: Hi, my website and shared ssl use

Re: Does AJAX work with Shared SSL

2013-03-22 Thread Byte Me
Are you saying your HTML is NOT on the Shared SSL and your Ajax resource is? If so, you're going to run into the cross domain security issue. You can use JSON/P or CORS to get around it. Hi, my html Ajax resource is not on the same server as the shared ssl server. This is what I got back

Re: Does AJAX work with Shared SSL

2013-03-22 Thread Russ Michaels
the way shared SSL works is that your host provide a generic acme.comdomain for SSL purposes, and gives you a folder on that domain to store your secure pages so that you do not have to buy your own SSL certificate. so if your domain is yoursite.com, your SSL pages would be redirected

Re: Does AJAX work with Shared SSL

2013-03-22 Thread Raymond Camden
So use JSON/P or CORS. :) If you Google, you can find multiple blog posts (by myself, and Nadel) on both of these topics. Both are easy to do with ColdFusion. On Fri, Mar 22, 2013 at 9:03 AM, Byte Me byteme...@verizon.net wrote: Are you saying your HTML is NOT on the Shared SSL and your

Re: Does AJAX work with Shared SSL

2013-03-22 Thread Byte Me
OK, I got it to work using a widget called AjaxRequest that I read about in the book Ajax Design Patterns. Thanks for the assistance. ~| Order the Adobe Coldfusion Anthology now!

Re: cfftp with SSL (Coldfusion 8)

2012-12-20 Thread Steve Milburn
Really? I've used CF8 with Bitvise and Tumbleweed sFTP servers for a while and it works a treat. I used a blog post by Ben Nadel as a guide: http://www.bennadel.com/blog/1337-My-First-ColdFusion-8-CFFTP-Experience-Rocky-But-Triumphant.htm Anyway, this doesn't address the initial question of

RE: cfftp with SSL (Coldfusion 8)

2012-12-20 Thread James Davis
Neither CF8 or CF9 support SFTP using CFFTP. However, like Russ mentioned, you can use some java libraries as an alternative. One project I worked on that required connecting to an sftp server we used the apache commons-net library (commons.apache.org/net) and it worked like a charm. Not

Re: cfftp with SSL (Coldfusion 8)

2012-12-19 Thread Dan Crouch
the CF server call it as a scheduled task. But livedocs show support only for SSH http://livedocs.adobe. com/coldfusion/8/htmldocs/help.html?content=Tags_f_18.html. The same steps do not work when connecting to SSL. From memory, SFTP support was added to ColdFusion in version 8. So, yes

Re: cfftp with SSL (Coldfusion 8)

2012-12-19 Thread Russ Michaels
call it as a scheduled task. But livedocs show support only for SSH http://livedocs.adobe. com/coldfusion/8/htmldocs/help.html?content=Tags_f_18.html. The same steps do not work when connecting to SSL. From memory, SFTP support was added to ColdFusion in version 8. So, yes. SSL FTP

cfftp with SSL (Coldfusion 8)

2012-12-18 Thread fun and learning
All - Is it possible to use cfftp to connect to a secure ftp server over SSL? Thank you. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive

Re: cfftp with SSL (Coldfusion 8)

2012-12-18 Thread Nathan Strutz
From memory, SFTP support was added to ColdFusion in version 8. So, yes. SSL FTP is available to you. nathan strutz [www.dopefly.com] [hi.im/nathanstrutz] [about.me/nathanstrutz] On Tue, Dec 18, 2012 at 11:35 AM, fun and learning funandlrnn...@gmail.comwrote: All - Is it possible to use

Re: cfftp with SSL (Coldfusion 8)

2012-12-18 Thread fun and learning
From memory, SFTP support was added to ColdFusion in version 8. So, yes. SSL FTP is available to you. nathan strutz [www.dopefly.com] [hi.im/nathanstrutz] [about.me/nathanstrutz] On Tue, Dec 18, 2012 at 11:35 AM, fun and learning funandlrnn...@gmail.comwrote: All - Is it possible to use

Re: cfftp with SSL (Coldfusion 8)

2012-12-18 Thread fun and learning
But livedocs show support only for SSH http://livedocs.adobe.com/coldfusion/8/htmldocs/help.html?content=Tags_f_18.html. The same steps do not work when connecting to SSL. From memory, SFTP support was added to ColdFusion in version 8. So, yes. SSL FTP is available to you. nathan strutz

Invoking Java component that sends SSL Client Key in CF9 Ent

2012-10-02 Thread Donnie Bachan (Gmail)
the COM api on windows 32 bit but our shiny new servers running Windows 2008 doesn't support COM. I've attempted to use .NET thinking that it should be a fairly straight swap between the COM and .NET systems but was I wrong. The Java SDK requires you to pass in 3 SSL files. A CA certificate

Re: Invoking Java component that sends SSL Client Key in CF9 Ent

2012-10-02 Thread Paul Kukiel
COM. I've attempted to use .NET thinking that it should be a fairly straight swap between the COM and .NET systems but was I wrong. The Java SDK requires you to pass in 3 SSL files. A CA certificate, a client certificate and a client key file. The following code illustrates the call from

Re: Invoking Java component that sends SSL Client Key in CF9 Ent

2012-10-02 Thread Donnie Bachan (Gmail)
servers running Windows 2008 doesn't support COM. I've attempted to use .NET thinking that it should be a fairly straight swap between the COM and .NET systems but was I wrong. The Java SDK requires you to pass in 3 SSL files. A CA certificate, a client certificate and a client key file

Re: Invoking Java component that sends SSL Client Key in CF9 Ent

2012-10-02 Thread Donnie Bachan (Gmail)
Hi Paul, Thanks for this, it's odd we use Cardinal when we call Paypal Pro (we use them as a back up processor if Barclays ever goes down) and that works fine on 64 bit. What's even more odd is the fact that they all use Arcot at the core because Arcot developed the system. Best Regards

Re: cfhttp ignore SSL error

2012-10-02 Thread John M Bliss
Workaround ended up being to add a line to server's hosts file: [IP of download.vendor.com]vendor.com ...and then cfhttp to https://vendor.com On Sun, Sep 23, 2012 at 12:10 PM, John M Bliss bliss.j...@gmail.com wrote: CFX_HTTP returns An error occurred in the secure channel support.

Re: Invoking Java component that sends SSL Client Key in CF9 Ent

2012-10-02 Thread Dave Watts
The following code illustrates the call from ColdFusion to the SDK: var serverInfo = createObject(java, com.arcot.xfms.XFMS_Java_API$ServerInfo).init( VARIABLES.clientOptions.host, VARIABLES.clientOptions.port, VARIABLES.clientOptions.transport, 30, 5, 8, 4,

Re: Invoking Java component that sends SSL Client Key in CF9 Ent

2012-10-02 Thread Donnie Bachan (Gmail)
Thanks Dave, You just pass the location of the key file as a string so I'm just passing in C:\wamp\.\ClientKey.pem both in CF and Java class. I've tried using Wireshark as well to look at the packets being sent. From Java the request is fine, from CF the remote URL never gets called at all

Re: Invoking Java component that sends SSL Client Key in CF9 Ent

2012-10-02 Thread Pete Freitag
My Guess is that this has something to do with the RSA BSafe crypto-j security provider that CF Enterprise ships with. This API was upgraded in CF10, so you could try that as an option. When you run Java from the command line, you are not using Crypto-J, when you run java within CF you are.

Re: Invoking Java component that sends SSL Client Key in CF9 Ent

2012-10-02 Thread Russ Michaels
Dont forget that you are using jrun which also allows you to use jsp as well, perhaps you could try doing this from jsp and see if that works, which may save you some head banging as cfm and jsp can happily work together. Regards Russ Michaels On Oct 2, 2012 6:32 PM, Pete Freitag

Re: Invoking Java component that sends SSL Client Key in CF9 Ent

2012-10-02 Thread Donnie Bachan (Gmail)
Donnie Bachan Nitendo Vinces - By Striving You Shall Conquer == The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review,

Re: Invoking Java component that sends SSL Client Key in CF9 Ent

2012-10-02 Thread Donnie Bachan (Gmail)
Thanks Russ, I've not played with JSP in years, will give it a shot. I'm willing to even try Pascal at this point! On Tue, Oct 2, 2012 at 8:37 PM, Russ Michaels r...@michaels.me.uk wrote: Dont forget that you are using jrun which also allows you to use jsp as well, perhaps you could try

Re: Invoking Java component that sends SSL Client Key in CF9 Ent

2012-10-02 Thread Dave Watts
You just pass the location of the key file as a string so I'm just passing in C:\wamp\.\ClientKey.pem both in CF and Java class. I've tried using Wireshark as well to look at the packets being sent. From Java the request is fine, from CF the remote URL never gets called at all so it's not

Re: Invoking Java component that sends SSL Client Key in CF9 Ent

2012-10-02 Thread Dave Watts
My Guess is that this has something to do with the RSA BSafe crypto-j security provider that CF Enterprise ships with. This API was upgraded in CF10, so you could try that as an option. When you run Java from the command line, you are not using Crypto-J, when you run java within CF you are.

Re: Invoking Java component that sends SSL Client Key in CF9 Ent

2012-10-02 Thread Donnie Bachan (Gmail)
Pete and Dave, I owe both of you a beverage (or ten!) next time I'm in the US or you are in the UK! It was the BSafe library. I used the code from the forum post to disable the library and my requests worked. I will have to look into the compliance issue with disabling the library when making

Re: cfhttp ignore SSL error

2012-09-23 Thread John M Bliss
CFX_HTTP returns An error occurred in the secure channel support. Any other ideas? On Tue, Sep 11, 2012 at 12:56 PM, Dave Watts dwa...@figleaf.com wrote: Suggestion as to which one...? http://ultrahttp.riaforge.org/ http://cflib.org/udf/HTTPGet Well, the second one just uses

Re: cfhttp ignore SSL error

2012-09-11 Thread Russ Michaels
-certificates-certificate-stores-coldfusion.html Google ColdFusion import ssl, for some more help. That article was based around Jrun, but applies to whatever jvm you are using. You'll need a CF restart after, to get it working. Didn't see that in the article. For years I wish

Re: cfhttp ignore SSL error

2012-09-11 Thread John M Bliss
/import-certificates-certificate-stores-coldfusion.html Google ColdFusion import ssl, for some more help. That article was based around Jrun, but applies to whatever jvm you are using. You'll need a CF restart after, to get it working. Didn't see that in the article. For years

Re: cfhttp ignore SSL error

2012-09-11 Thread Dave Watts
OK. I used http://certman.riaforge.org to add the cert, restarted CF, and I'm still getting: I/O Exception: Name in certificate `vendor.com' does not match host name ` download.vendor.com' The problem might be that when I use my browser to go to https://download.vendor.com and then view

Re: cfhttp ignore SSL error

2012-09-11 Thread John M Bliss
Can you provide the actual URL you're trying to get to? It would be useful to be able to look at the certificate chain. You should be able to see it here: https://download.api.bingads.microsoft.com On Tue, Sep 11, 2012 at 7:58 AM, Dave Watts dwa...@figleaf.com wrote: OK. I used

Re: cfhttp ignore SSL error

2012-09-11 Thread Dave Watts
Can you provide the actual URL you're trying to get to? It would be useful to be able to look at the certificate chain. You should be able to see it here: https://download.api.bingads.microsoft.com OK, I took a quick look at it. First, there are two intermediate certificates in the chain.

Re: cfhttp ignore SSL error

2012-09-11 Thread John M Bliss
You may need to download and install them into the keystore as well I'll try that. What version of Java are you using? I believe Java 6 supports Subject Alternative Names. Java Version 1.6.0_26 How do I use Subject Alternative Names? On Tue, Sep 11, 2012 at 10:00 AM, Dave Watts

Re: cfhttp ignore SSL error

2012-09-11 Thread John M Bliss
You may need to download and install them into the keystore as well That did not appear to have worked. On Tue, Sep 11, 2012 at 10:05 AM, John M Bliss bliss.j...@gmail.com wrote: You may need to download and install them into the keystore as well I'll try that. What version of Java

Re: cfhttp ignore SSL error

2012-09-11 Thread John M Bliss
I think there're some cfhttp alternatives out there. Anyone know whether one will fix this issue for me? On Tue, Sep 11, 2012 at 10:20 AM, John M Bliss bliss.j...@gmail.com wrote: You may need to download and install them into the keystore as well That did not appear to have worked. On

  1   2   3   4   5   6   7   8   9   10   >