>This is what I generally use. > >C:> "C:\Program Files\Java\jdk1.6.0_24\bin\keytool" -delete -noprompt >-trustcacerts -alias domain.com.cer -keystore "C:\Program >Files\Java\jdk1.6.0_24\jre\lib\security\cacerts" -storepass [password] > >C:>"C:\Program Files\Java\jdk1.6.0_24\bin\keytool" -import -noprompt >-trustcacerts -alias domain.com.cer -file G:\path\to\domain.com.cer >-keystore "C:\Program Files\Java\jdk1.6.0_24\jre\lib\security\cacerts" >-storepass [password] > >The first will give an error if it doesn't exist, but no big deal. It is an >error just to tell you that it doesn't exist. > >Generally, I am only doing this when certs have expired so I need to remove >them first. > >FYI, this is not going to save you those CF restarts. Unfortunately, that >still needs to be done. > >.:.:.:.:.:.:.:.:.:.:.:.:.:. >Bobby Hartsfield >http://acoderslife.com >http://cf4em.com
Excellent code reference! Thank you! I did the following and it accepted: E:\JRun4\jre\bin>keytool -import -noprompt -trustcacerts -alias dca -file "C:\Do cuments and Settings\xxxx\root.crt" -keystore E:\JRun4\jre\lib\security\cacerts Then I restarted CF8 and reverified the datasource, but still fails. This is my connection string in the administrator (for the record, the connection worked without ssl): jdbc:postgresql://the.ip.address/main?ssl=true ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:343173 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
