It's not an issue in CF 4.5
And, I've found that it's not an issue with previous versions of CF if IE
5.0 is installed on the server.
Michael J. Sheldon
Internet Applications Developer
Phone: 480.699.1084
http://www.desertraven.com/
PGP Key Available on Request
-----Original Message-----
From: Mary Jo Sminkey [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, May 24, 2000 10:30
To: [EMAIL PROTECTED]
Subject: CFHTTP and SSL
Ran into this in the help files, is this still an issue, or can anyone else
shed light on this? Could be a problem for my customers that want to use
CFHTTP to do credit card processing.
Using Secure Sockets Layer (SSL) with cfhttp
When using Secure Sockets Layer (SSL) to transmit secured transactions via
cfhttp, you need to be aware of limitations on its use caused by a bug in
one of the components of Microsoft's InetSDK. The problem occurs on Windows
NT and should not affect Windows 95/98 machines.
cfhttp uses the InetSDK to conduct all HTTP and HTTPS transactions and
relies on the WinInet DLL and Schannel DLL for its SSL implementation. The
WinInet bug constrains storage of SSL certificate information to the user
level. This means that WinInet does not interrogate the registry for
certificate information if the client that loads the DLL is a service. As a
result, a cfhttp request to an https:// url, will fail if ColdFusion is
running as a service.
While we strongly recommend that the ColdFusion Server be run as a service,
a workaround for this SSL/WinInet problem is available. The workaround is
to run ColdFusion as a desktop application when SSL is needed. In this way,
WinInet will write to and read from the registry appropriately when
negotiating certificate information.
------------------------------------------------------------------------
Mary Jo Sminkey [EMAIL PROTECTED]
http://www.cfwebstore.com
CFWebstore, Cold Fusion-based E-commerce
------------------------------------------------------------------------
----------------------------------------------------------------------------
--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or
send a message to [EMAIL PROTECTED] with 'unsubscribe' in
the body.
------------------------------------------------------------------------------
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.
