Interesting. Importing the cert as a CA as well didn't cut it. It must be
the self signed portion that is the hangup. If the production system isn't
self signed I may not worry about this anymore...

Thanks..
J



On 11/3/06, Dave Watts <[EMAIL PROTECTED]> wrote:
>
> > I am connecting to a self signed SSL page through CFHTTP and
> > I am getting the dreaded connection failure.
> >
> > My test server is running CFMX6.1, windows 2003 IIS6 environment.
> >
> > I followed all the steps to manually install the cert using
> > keytool. No luck. Export the cert a couple of different ways,
> > and attempted to import. I have even imported to the JVM and
> > JRE sitting in the program files directory as well as the one
> > in the CFusionMX directory. Each time it imports correctly, I
> > restart CF and still a connection failure. Something I am
> > missing? Is there another step? Should I insert the cert from
> > somewhere else other than the security directory?
>
> I haven't tried to use self-signed certs with CFHTTP, but I can think of a
> potential problem.
>
> When you use a browser to view an HTTPS URL, your browser examines the
> certificate to see who signed it. To do this, it checks the signature
> against the list of installed CA certificates from Verisign, Thawte, etc.
> In
> the case of a self-signed certificates, there is no separate CA. So, you
> may
> have to import the certificate twice (once as a CA, then again as a
> regular
> cert), or do something else. You might find this useful:
>
> http://java.sys-con.com/read/216388.htm
>
> Dave Watts, CTO, Fig Leaf Software
> http://www.figleaf.com/
>
> Fig Leaf Software provides the highest caliber vendor-authorized
> instruction at our training centers in Washington DC, Atlanta,
> Chicago, Baltimore, Northern Virginia, or on-site at your location.
> Visit http://training.figleaf.com/ for more information!
>
> 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Introducing the Fusion Authority Quarterly Update. 80 pages of hard-hitting,
up-to-date ColdFusion information by your peers, delivered to your door four 
times a year.
http://www.fusionauthority.com/quarterly

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:259128
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4

Reply via email to