I have imported the cert into the keystore and have tried to add the name
into the host file, but wouldn't you believe it, there is some kind of
redirect on the other end so that this doesn't work. I am really looking for
a way to avoid hostname verification altogether.
I have some Java code that is able to do just that, but the question is how
to transfer that to CF. I have experimented with cfobject to try to "run"
this from CF but so far have not gotten far.
I tried to to instantiate a URL class like this
<cfobject action="create" class="java.net.URL" name="url" type="Java">
but was not able to do the next step which I thought would look like
<cfset x=url.init("https://thatDamOtherSite.com/";)>
If anyone can point me to online resources on how to work with Java objects
that are more advanced than the livedocs I'd really appreciate it.
Thanks all,
Caroline
On 4/14/07, Dave Watts <[EMAIL PROTECTED]> wrote:
>
> > My application is using cfhttp to interact with another
> > website which is utilizing an SSL certificate. This works
> > well in the production environment.
> > However, during development, we're having issues because the
> > dev environment of that other website is utilizing a
> > self-signed certificate which does not have a correct host
> > name. The IT person from that other website has pointed out
> > that in Java it is possible to suppress hostname validation
> > by implementing a "custom" HostnameVerifier which always
> > returns true, but is that possible with Coldfusion? I don't
> > know much about Java and how to utilize it from a CF point of view.
> >
> > The error I am getting is: I/O Exception: Name in certificate
> > `abcd.com' does not match host name `xyz.com'
> >
> > Does anyone know how to get CF to ignore the SSL error?
>
> If this is your only problem, you could simply add an entry to your
> machine's hosts file that maps the name used in the self-signed
> certificate
> to the IP address of the target machine, then use that name in your CFHTTP
> request.
>
> Dave Watts, CTO, Fig Leaf Software
> http://www.figleaf.com/
>
> Fig Leaf Software provides the highest caliber vendor-authorized
> instruction at our training centers in Washington DC, Atlanta,
> Chicago, Baltimore, Northern Virginia, or on-site at your location.
> Visit http://training.figleaf.com/ for more information!
>
> This email has been processed by SmoothZap - www.smoothwall.net
>
>
>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
ColdFusion MX7 by Adobe®
Dyncamically transform webcontent into Adobe PDF with new ColdFusion MX7.
Free Trial. http://www.adobe.com/products/coldfusion?sdid=RVJV
Archive:
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:275241
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe:
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
