I found this tool, KeyTool GUI, to be quite helpful for installing certs for CFMX


http://homepage.ntlworld.com/wayne_grant/keytool.html


Also, u can use OpenSSL to grab the key too.


Doug

-----Original Message-----
From: Christine Lawson [mailto:[EMAIL PROTECTED]
Sent: Friday, March 26, 2004 2:05 PM
To: CF-Server
Subject: RE: Getting the CFMX Server to accept Certificates so it can run a Scheduled Task

Hi,

So I imagine this is your own certificate and not one like Verisign? And you
can access it with your browser but not cfhttp? We are in the process of
publishing the steps to do this, here they are:

1)       Browse the https page in IE on the CFMX server

2)       Double-Click on the lock in the lower right corner of the browser
window

3)       Click "Install Certificate"

4)       The Certificate Import Wizard will launch, click "next"

5)       Select the first option "Automatically..." click "next"

6)       Click "finish"

7)   You should see "Import was successful

8)       In IE go to Tools, internet options, content, click certificates

9)       Click other people

10)   Highlight your certificate

11)   Click export

12)   The Export wizard will launch, click "next"

13)   Select "DER encoded binary", click "next"

14)   File to export, browse to cfusionmx\runtime\jre\lib\security name the
file the name of your certificate. For example, mine was "ps-soave.cer"

15)   Click Finish, it should say Export was successful

16)   From the command prompt cd to the cfusionmx\runtime\jre\lib\security
directory and run:

for %a in (*.cer) DO C:\cfusionmx\runtime\jre\bin\keytool -import
-trustcacerts -keystore cacerts -storepass changeit -noprompt -alias "%~na"
-file "ps-soave.cer"

Make sure you change the last part to your .cer name. It should tell you it
was successful, if it does not let me know as I've seen this fail before.

17) Then, close your browser

18) Stop and Start ColdFusion

19) Launch the browser and run your cfhttp code.

Hope that helps!

Christine

-----Original Message-----
From: David Adams [mailto:[EMAIL PROTECTED]
Sent: Friday, March 26, 2004 12:22 PM
To: CF-Server
Subject: Getting the CFMX Server to accept Certificates so it can run a
Scheduled Task

I have an application running over SSL.  One of my files is a scheduled task
and I cannot get it to run because the CFMX server will not accept a
certificate.  How can I resolve this?  

Another way of putting it, if a client accesses the file that runs the
scheduled job, the task is carried out after the client is asked to accept
the certificate.  The problem lies in the fact that the CFMX server is
acting like a client as well, but it cannot make the desision to accept the
certificate.

Any suggestions?

My environment:
CFMX 6.1
Apache 1.3.27 and ModSSL
Linux Advanced Server 6.1
Listening port: 443

  _____
  _____
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

Reply via email to