I don't get a cert warning in the browser because I have "that" cert and only that cert installed in the browser already.
Our staging sites have all been confired to allow the same developer's client cert - thus one cert for all staging sites. Thus only have one cert installed means you don't even get the prompt for the cert it's just automatically applied by firefox - after the first run of course... Well - at least that's what I am putting it (the working in the browser) down to anyway. As for the JVM that we're using - to be honest - I wouldn't have a clue... but since we're running CF9 - would it not be using whatever CF9 gets bundled with? Gavin. On 05/08/2010, at 10:38 PM, MrBuzzy wrote: > What I find interesting is your browser does not give any certificate > warnings when viewing the wsdl over https. That usually means you wont need > to import the certificate or issuing authority in to the JVM. > > Is it possible you are using any early-ish JVM, like version 1.4.2? > If you can, upgrade the CF JVM to the latest 1.6.x. verslon. You will need to > modify jvm.config once you have installed the new JVM and give CF a restart. > > On 5 August 2010 20:29, Gavin Beau Baumanis <[email protected]> wrote: > > On 05/08/2010, at 7:26 PM, MrBuzzy wrote: > > > Annoying isn't it :) > > > Yup sure is. > > > > When you view the https wsdl in a browser what warnings (if any) do you get? > > > None. > > The WSDL looks identical to that produced when using a non-https URL. > Apart from the namespace addresses etc being different because of the > different URL > > > > > Also if you're going commando (command line hehe) just check that you are > > working on the same jvm or jdk that is specified in ColdFusion's jvm.config > > file. > > > Ahh righteo.... > I didn't consider that.... but thanks. > > It still doesn't work though.... bummer.... > > Anyone got anything further I could try? > Or is it simply a fact that importing the server cert into the java keystore > - should see it working? > And if that is the case - does the alias used when importing the cert, matter > any? > > Thanks again.... > > > > > Sent from my iPhone > > > > On 05/08/2010, at 4:50 PM, Gavin Baumanis <[email protected]> wrote: > > > >> Hi Everyone, > >> > >> I have been trying to get this to work for the past few days and have > >> finally decided I should ask for some help. > >> I have a service that runs on a server using the https protocol. > >> > >> Sunsequently - when I try to use that service I get the folling error; > >> Unable to read WSDL from URL: blah/blah.cfc?wsdl. Error: > >> javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated. > >> > >> All the items I read seemed to say that all I needed to do was to add > >> the certificate to java keystore. > >> Which have done using this; > >> http://certman.riaforge.org/ > >> > >> I even tried using the command line - just in case there was some > >> "odd" issue with the Certificate Manager extension to CF Admin. > >> > >> But still no dice. > >> > >> I have added the server cert and also tried by adding in the client > >> cert too - but I still receive that error. > >> Interestingly enough - I can successfully see the WSDL via the browser > >> and https. > >> > >> If I place the code on a non-ssl connection - everything works as > >> expected - so I know that my CFCs/code etc is working correctly. > >> > >> If anyone has any ideas - I would be most appreciative. > >> > >> > >> Gavin. > >> > >> -- > >> You received this message because you are subscribed to the Google Groups > >> "cfaussie" group. > >> To post to this group, send email to [email protected]. > >> To unsubscribe from this group, send email to > >> [email protected]. > >> For more options, visit this group at > >> http://groups.google.com/group/cfaussie?hl=en. > >> > > > > -- > > You received this message because you are subscribed to the Google Groups > > "cfaussie" group. > > To post to this group, send email to [email protected]. > > To unsubscribe from this group, send email to > > [email protected]. > > For more options, visit this group at > > http://groups.google.com/group/cfaussie?hl=en. > > -- > You received this message because you are subscribed to the Google Groups > "cfaussie" group. > To post to this group, send email to [email protected]. > To unsubscribe from this group, send email to > [email protected]. > For more options, visit this group at > http://groups.google.com/group/cfaussie?hl=en. > > > > -- > You received this message because you are subscribed to the Google Groups > "cfaussie" group. > To post to this group, send email to [email protected]. > To unsubscribe from this group, send email to > [email protected]. > For more options, visit this group at > http://groups.google.com/group/cfaussie?hl=en. -- You received this message because you are subscribed to the Google Groups "cfaussie" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/cfaussie?hl=en.
