Re: Sudden error with CFHTTP ans SSL

2015-04-03 Thread Claude Schnéegans
Payments were getting processed but the results confirmation didn't work. This is on Coldfusion 8. That was exactly the problem, on CF 9 also. the certificate needed is the Verisign G5 certificate In my case, the certificate I got from the Paypal site was a Symantec certificate. That is

Re: Sudden error with CFHTTP ans SSL

2015-04-03 Thread Michael van Leest
Verisign certificate products have been taken over by Symantec. 2015-04-03 18:54 GMT+02:00 : Payments were getting processed but the results confirmation didn't work. This is on Coldfusion 8. That was exactly the problem, on CF 9 also. the certificate needed is the Verisign G5

Re: Sudden error with CFHTTP ans SSL

2015-04-03 Thread Al Musella, DPM
When I read these messages, I checked one of my old websites that uses paypal integration services and found that it stopped working. Payments were getting processed but the results confirmation didn't work. This is on Coldfusion 8. Thanks to this thread I found the problem and fixed it..

Re: Sudden error with CFHTTP ans SSL

2015-04-03 Thread Al Musella, DPM
So then is the symantec certificate newer? Should I also add that? What is the link to it? They have so many certificates on paypal Verisign certificate products have been taken over by Symantec. 2015-04-03 18:54 GMT+02:00 : Payments were getting processed but the results

Re: Sudden error with CFHTTP ans SSL

2015-04-03 Thread Michael van Leest
Best option is to contact PayPal support with that question. They should be able to point you to the valid certs. Good luck, Michael On Friday, April 3, 2015, Al Musella, DPM muse...@virtualtrials.com wrote: So then is the symantec certificate newer? Should I also add that? What is the

Re: Sudden error with CFHTTP ans SSL

2015-04-03 Thread Al Musella, DPM
Paypal support is useless. I contacted them 3 times for another issue last week and they couldn't help at all At 04:11 PM 4/3/2015, you wrote: Best option is to contact PayPal support with that question. They should be able to point you to the valid certs.

Re: Sudden error with CFHTTP ans SSL

2015-04-01 Thread Claude Schnéegans
you need to import the certificate to the java cacerts as a trusted certificate to by-pass the security matching. That was the trick. I imported the Paypal certificate and now it works. Thanks a lot. ~| Order the Adobe

Re: Sudden error with CFHTTP and SSL

2015-04-01 Thread Michael Grant
This sounds like it could be the Poodle vulnerability that I faced a few months back when Chase Paymentech disabled SSL 3.0. What version of Java is the server running? Java 7 allows SSL 3.0 to negotiate using TLS. I had to convince my host to update from Java 6. On Mon, Mar 30, 2015 at 1:33

RE: Sudden error with CFHTTP and SSL

2015-04-01 Thread Kurt Kaptein
: 616-538-5691 Visit our Website: www.spectrumnetdesigns.com Email: k...@spectrumnetdesigns.com -Original Message- From: Michael Grant [mailto:mgr...@modus.bz] Sent: Wednesday, April 1, 2015 3:29 PM To: cf-talk Subject: Re: Sudden error with CFHTTP and SSL This sounds like it could

Re: Sudden error with CFHTTP and SSL

2015-04-01 Thread Russ Michaels
I suspect they disabled various ssl protocols due to poodle, you should ask them. The default response ro poodle was to disable everything except latest tls version, which is not supported out of the box by the jvm that ships with cf9. On Mon, Mar 30, 2015 at 18:33 PM, wrote: Hi, I have an

Re: Sudden error with CFHTTP and SSL

2015-04-01 Thread Wil Genovese
If they have disable the older SSL protocols here are two blog posts I did on how to handle that with CFHTTP and your Java version. Java Version http://www.trunkful.com/index.cfm/2014/11/24/ColdFusion-JVM-SSL-CA-CERTS-and-POODLE CFHTTP and JVM switches

Re: Sudden error with CFHTTP ans SSL

2015-03-31 Thread Byron Mann
What is the URL and does the domain name match the certificate exactly, meaning not a wildcard certificate. Could be PayPal updated their SSL certificate and is either a wildcard certificate or multi-site/domain certificate (not sure what these are really called). CF will not like it if the

Sudden error with CFHTTP and SSL

2015-03-31 Thread Claude Schnéegans
Hi, I have an application under CF 9 with a paiment module using Paypal. At the end of the process, Paypal acknowledges the paiement and my app calls a Paypal page to validate the whole operation. This is done with a CFHTTP call This application has been working fine for years with no

Sudden error with CFHTTP ans SSL

2015-03-31 Thread Claude Schnéegans
Hi, I have an application under CF 9 with a paiment module using Paypal. At the end of the process, Paypal acknowledges the paiement and my app calls a Paypal page to validate the whole operation. This is done with a CFHTTP call This application has been working fine for years with no

Re: Sudden error with CFHTTP ans SSL

2015-03-31 Thread Claude Schnéegans
Could be PayPal updated their SSL It must be the problem, because I have other paiement services and they have no problem. I'm trying your suggestion, thanks. ~| Order the Adobe Coldfusion Anthology now!

Re: Sudden error with CFHTTP ans SSL

2015-03-31 Thread John M Bliss
I also once solved this by editing the hosts file on the server and adding lines to force the name on the cert to point to the right IP. On Tue, Mar 31, 2015 at 8:51 AM, Byron Mann byronos...@gmail.com wrote: What is the URL and does the domain name match the certificate exactly, meaning not

Re: cfhttp and SSL ... I/O Exception: peer not authenticated

2013-11-18 Thread Brian FitzGerald
If you use a centralised storage for all servers in your cluster then it is easy. Russ, thanks a lot for your response (somehow I missed it last week). I read the article you linked to about client variables (good read). Are you aware of any resources which discuss how one might implement a

Re: cfhttp and SSL ... I/O Exception: peer not authenticated

2013-11-18 Thread Russ Michaels
I did it once long ago when I was still a developer, it was probably on CF5 or 6. I will presume Windows is used here, if not, just translate tot he Unix equivalents. It is basically just a file server, network attached storage, a SAN or whatever you have available. You MAP a drive on your web

Re: cfhttp and SSL ... I/O Exception: peer not authenticated

2013-11-15 Thread Brian FitzGerald
Hey Dave, Thanks a lot for your response. Please see some comments inline below: Are you using clustering to support a larger number of users than a single server? Or are you using it to provide failover in case a server fails? Or both? The clustering is mainly for supporting a large number

Re: cfhttp and SSL ... I/O Exception: peer not authenticated

2013-11-15 Thread Dave Watts
I'm hoping it's the former :) I guess that's what I'm getting at though... I'm sure you've done many applications that run on clustered servers, is using sticky sessions a common and accepted practice for using cfcs in a clustered environment? Or do larger applications like this just

Re: cfhttp and SSL ... I/O Exception: peer not authenticated

2013-11-15 Thread Russ Michaels
If you use a centralised storage for all servers in your cluster then it is easy. You save session data to your san disk. And simply reload it if it gets lost due to switching servers. You can also achieve this with replication between local disks too. Remember the session is stored in a cookie

Re: cfhttp and SSL ... I/O Exception: peer not authenticated

2013-11-15 Thread Brian FitzGerald
Lots of people use sticky sessions to solve this problem. That doesn't provide failover, but if you're not doing something extremely critical where the user can just go elsewhere (ex: ecommerce) you might not need failover. With sticky sessions, in the event that one server crashed, the users on

Re: cfhttp and SSL ... I/O Exception: peer not authenticated

2013-11-15 Thread Dave Watts
Lots of people use sticky sessions to solve this problem. That doesn't provide failover, but if you're not doing something extremely critical where the user can just go elsewhere (ex: ecommerce) you might not need failover. With sticky sessions, in the event that one server crashed, the

Re: cfhttp ignore SSL error

2012-10-02 Thread John M Bliss
Workaround ended up being to add a line to server's hosts file: [IP of download.vendor.com]vendor.com ...and then cfhttp to https://vendor.com On Sun, Sep 23, 2012 at 12:10 PM, John M Bliss bliss.j...@gmail.com wrote: CFX_HTTP returns An error occurred in the secure channel support.

Re: cfhttp ignore SSL error

2012-09-23 Thread John M Bliss
CFX_HTTP returns An error occurred in the secure channel support. Any other ideas? On Tue, Sep 11, 2012 at 12:56 PM, Dave Watts dwa...@figleaf.com wrote: Suggestion as to which one...? http://ultrahttp.riaforge.org/ http://cflib.org/udf/HTTPGet Well, the second one just uses

Re: cfhttp ignore SSL error

2012-09-11 Thread Russ Michaels
Fyi in railo u can do this from the railo admin. There is also an extension for the cfadmin to do this, check riaforge. Regards Russ Michaels On Sep 11, 2012 5:42 AM, .jonah jonah@creori.com wrote: Good point. Here's my writeup on importing certs into the java keystore in ColdFusion:

Re: cfhttp ignore SSL error

2012-09-11 Thread John M Bliss
OK. I used http://certman.riaforge.org to add the cert, restarted CF, and I'm still getting: I/O Exception: Name in certificate `vendor.com' does not match host name ` download.vendor.com' The problem might be that when I use my browser to go to https://download.vendor.com and then view the

Re: cfhttp ignore SSL error

2012-09-11 Thread Dave Watts
OK. I used http://certman.riaforge.org to add the cert, restarted CF, and I'm still getting: I/O Exception: Name in certificate `vendor.com' does not match host name ` download.vendor.com' The problem might be that when I use my browser to go to https://download.vendor.com and then view

Re: cfhttp ignore SSL error

2012-09-11 Thread John M Bliss
Can you provide the actual URL you're trying to get to? It would be useful to be able to look at the certificate chain. You should be able to see it here: https://download.api.bingads.microsoft.com On Tue, Sep 11, 2012 at 7:58 AM, Dave Watts dwa...@figleaf.com wrote: OK. I used

Re: cfhttp ignore SSL error

2012-09-11 Thread Dave Watts
Can you provide the actual URL you're trying to get to? It would be useful to be able to look at the certificate chain. You should be able to see it here: https://download.api.bingads.microsoft.com OK, I took a quick look at it. First, there are two intermediate certificates in the chain.

Re: cfhttp ignore SSL error

2012-09-11 Thread John M Bliss
You may need to download and install them into the keystore as well I'll try that. What version of Java are you using? I believe Java 6 supports Subject Alternative Names. Java Version 1.6.0_26 How do I use Subject Alternative Names? On Tue, Sep 11, 2012 at 10:00 AM, Dave Watts

Re: cfhttp ignore SSL error

2012-09-11 Thread John M Bliss
You may need to download and install them into the keystore as well That did not appear to have worked. On Tue, Sep 11, 2012 at 10:05 AM, John M Bliss bliss.j...@gmail.com wrote: You may need to download and install them into the keystore as well I'll try that. What version of Java

Re: cfhttp ignore SSL error

2012-09-11 Thread John M Bliss
I think there're some cfhttp alternatives out there. Anyone know whether one will fix this issue for me? On Tue, Sep 11, 2012 at 10:20 AM, John M Bliss bliss.j...@gmail.com wrote: You may need to download and install them into the keystore as well That did not appear to have worked. On

Re: cfhttp ignore SSL error

2012-09-11 Thread Dave Watts
Java Version 1.6.0_26 How do I use Subject Alternative Names? They should just work if they're going to work at all, so if they don't work you might try one of the HTTP alternatives you mentioned. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig

Re: cfhttp ignore SSL error

2012-09-11 Thread John M Bliss
Suggestion as to which one...? http://ultrahttp.riaforge.org/ http://cflib.org/udf/HTTPGet On Tue, Sep 11, 2012 at 11:25 AM, Dave Watts dwa...@figleaf.com wrote: Java Version 1.6.0_26 How do I use Subject Alternative Names? They should just work if they're going to work at all, so if

Re: cfhttp ignore SSL error

2012-09-11 Thread Dave Watts
Suggestion as to which one...? http://ultrahttp.riaforge.org/ http://cflib.org/udf/HTTPGet Well, the second one just uses java.net.URL, it looks like, so I don't think it'll behave any differently. I don't know about the first one. There's a Windows binary, CFX_HTTP, you could try that if

Re: cfhttp ignore SSL error

2012-09-11 Thread Leigh
http://ultrahttp.riaforge.org/ FYI, that one uses cfhttp -Leigh ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive:

cfhttp ignore SSL error

2012-09-10 Thread John M Bliss
Hi. So I know this is not the optimal solution but I could really use it as a temporary workaround right now: one of our vendors has a newly broken SSL cert where, when I call URL with cfhttp, it's returning: I/O Exception: Name in certificate `vendor.com' does not match host name `

Re: cfhttp ignore SSL error

2012-09-10 Thread Byron Mann
You can download the certificate and import it into your server jre cacerts file using the java keytool. http://helpx.adobe.com/coldfusion/kb/import-certificates-certificate-stores-coldfusion.html Google ColdFusion import ssl, for some more help. That article was based around Jrun, but applies

Re: cfhttp ignore SSL error

2012-09-10 Thread .jonah
Good point. Here's my writeup on importing certs into the java keystore in ColdFusion: https://docs.google.com/document/d/12Ef1SwddMh0oO11TS3lt5E8VGiVCsdI8WmYn8qQLW4c/edit .jonah On 9/10/12 9:21 PM, Byron Mann wrote: You can download the certificate and import it into your server jre cacerts

CFHTTP and SSL

2011-06-29 Thread Steve Jaeger
I have been having lots of problems with CFHTTP posting to an SSL site. Sometimes it will work, sometimes it will not depending on the site to which I am trying to connect. Usually I can add the certificate manually to the jre keystore and restart jrun and it will work. Sometimes it does

RE: CFHTTP and SSL

2011-06-29 Thread Bobby Hartsfield
, 2011 12:28 PM To: cf-talk Subject: CFHTTP and SSL I have been having lots of problems with CFHTTP posting to an SSL site. Sometimes it will work, sometimes it will not depending on the site to which I am trying to connect. Usually I can add the certificate manually to the jre keystore and restart

Re: cfhttp and SSL ... I/O Exception: peer not authenticated

2011-06-17 Thread Brian FitzGerald
You'll need to download the certificate and install it in your JVM's keystore. Google java keystore keytool coldfusion for instructions. Hi Dave, Thank you for the reply. Only thing is that I've already downloaded the certificate through Google Chrome, and imported it via the keytool as

RE: cfhttp and SSL ... I/O Exception: peer not authenticated

2011-06-17 Thread Bobby Hartsfield
it to the java keystore on the CF server to have CFHTTP make successful SSL calls to a page using that cert. Your other options are to use a real, valid cert and some hosts file magic to make the request remain local but use the real domain (that the cert was issued to) Or... just stop using SSL

Re: cfhttp and SSL ... I/O Exception: peer not authenticated

2011-06-17 Thread Brian FitzGerald
Hey Bobby, thanks for the reply. It turns out this is a CF9 bug. Ray Camden outlines it well here, with a workaround that is working for me: http://www.coldfusionjedi.com/index.cfm/2011/1/12/Diagnosing-a-CFHTTP-issue--peer-not-authenticated Here is the bug report Jason Dean filed:

cfhttp and SSL ... I/O Exception: peer not authenticated

2011-06-16 Thread Brian FitzGerald
Hey all, I'm trying to make a cfhttp call to a secure url (the API for http://spreedly.com) and this is what I keep getting back: ErrorDetail I/O Exception: peer not authenticated Filecontent Connection Failure Mimetype Unable to determine MIME type of file. Statuscode

Re: cfhttp and SSL ... I/O Exception: peer not authenticated

2011-06-16 Thread Dave Watts
I'm trying to make a cfhttp call to a secure url (the API for http://spreedly.com) and this is what I keep getting back: ErrorDetail      I/O Exception: peer not authenticated Filecontent      Connection Failure Mimetype         Unable to determine MIME type of file. Statuscode      

Re: CFHTTP and SSL v3

2009-07-09 Thread Casey Dougall
Bringing this back here. Did anyone notice a switch to SSL v3 at authorize.net? I'm curious as well... Is it safe to say we can disable ssl v2 on our servers? I've been googling here a bit but just don't understand as a whole how protocals work, just that they do. Had request from client saying

Re: CFHTTP and SSL v3

2009-07-09 Thread Dave Watts
cfhttp doesn't care about IIS when it makes calls right, that's internal, so would this just be an issue with end users with old web browsers? Right. Your IIS settings will only affect your users, not your CFHTTP calls. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf

RE: CFHTTP and SSL v3

2009-07-09 Thread Che Vilnonis
] Sent: Thursday, July 09, 2009 3:31 PM To: cf-talk Subject: Re: CFHTTP and SSL v3 Bringing this back here. Did anyone notice a switch to SSL v3 at authorize.net? I'm curious as well... Is it safe to say we can disable ssl v2 on our servers? I've been googling here a bit but just don't understand

Re: CFHTTP and SSL v3

2009-02-25 Thread Amit Talwar
have read it doesn't support ssl 3.0 via cfhttp. If anyone has a quick solution I'd appreciate it. Likewise if I find one I'll let everyone know. Thanks Mike I got an email a while ago from Authorize.net that they have set up the test server with ssl 2.0 disabled and only ssl 3.0

RE: CFHTTP and SSL v3

2009-02-25 Thread Mark Kruger
- From: Amit Talwar [mailto:talwar.a...@gmail.com] Sent: Wednesday, February 25, 2009 3:53 PM To: cf-talk Subject: Re: CFHTTP and SSL v3 I had read it in several blog postings but nothing definitive from Adobe. I've done some more checking and it appears you are right about it working

RE: CFHTTP and SSL v3

2009-02-25 Thread Mark Kruger
...@cfwebtools.com] Sent: Wednesday, February 25, 2009 4:12 PM To: cf-talk Subject: RE: CFHTTP and SSL v3 Hmmm Very interesting... CF 5 uses an ipswitch com or something to make HTTP connections ... Or is it something native to windows through the stack? -Mark Mark A. Kruger, CFG, MCSE (402) 408-3733

RE: CFHTTP and SSL v3

2009-02-24 Thread Mark Kruger
FYI: I did some testing and research (with some help :) and I posted an article with my findings on this issue. http://www.coldfusionmuse.com/index.cfm/2009/2/24/CF-SSL30-Authorize-net -mk ~| Adobe® ColdFusion® 8 software 8

Re: CFHTTP and SSL v3

2009-02-23 Thread Michael Kotuba
I got the same email from Authorize.net. We are using CFMX7 and from what I have read it doesn't support ssl 3.0 via cfhttp. If anyone has a quick solution I'd appreciate it. Likewise if I find one I'll let everyone know. Thanks Mike

RE: CFHTTP and SSL v3

2009-02-23 Thread Mark Kruger
[mailto:michael.kot...@entrust.com] Sent: Monday, February 23, 2009 8:42 AM To: cf-talk Subject: Re: CFHTTP and SSL v3 I got the same email from Authorize.net. We are using CFMX7 and from what I have read it doesn't support ssl 3.0 via cfhttp. If anyone has a quick solution I'd appreciate it. Likewise if I

Re: CFHTTP and SSL v3

2009-02-23 Thread Michael Kotuba
ssl 3.0 via cfhttp. If anyone has a quick solution I'd appreciate it. Likewise if I find one I'll let everyone know. Thanks Mike ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free

RE: CFHTTP and SSL v3

2009-02-19 Thread Mark Kruger
, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: Mary Jo Sminkey [mailto:mary...@cfwebstore.com] Sent: Wednesday, February 18, 2009 8:38 PM To: cf-talk Subject: Re: CFHTTP and SSL v3 I'm confused SSL 3.0 does

Re: CFHTTP and SSL v3

2009-02-19 Thread Dave Watts
I think it would be the underlying protocol of Java not the web server - right? Does CF pass an HTTP request back through IIS or apache? I think it accesses the stack using it's own internal libraries. I guess we wait till they have a new test server ready eh? CF doesn't use the web server

Re: CFHTTP and SSL v3

2009-02-19 Thread Mary Jo Sminkey
I think it would be the underlying protocol of Java not the web server - right? That would have been my assumption as well, the support from AuthNet seemed to think otherwise, but I certainly don't trust their knowledge of CF and its inner workings. Which still brings me back to trying to

RE: CFHTTP and SSL v3

2009-02-19 Thread Mark Kruger
www.coldfusionmuse.com www.necfug.com -Original Message- From: Mary Jo Sminkey [mailto:mary...@cfwebstore.com] Sent: Thursday, February 19, 2009 10:54 AM To: cf-talk Subject: Re: CFHTTP and SSL v3 I think it would be the underlying protocol of Java not the web server - right? That would have

Re: CFHTTP and SSL v3

2009-02-19 Thread Mary Jo Sminkey
Hmmm... You know the more I think of it the more I believe you should only be concerned about CF 5. SSL 3.0 came out in 1996 and I think it's the version that supports chaining certificates. I have certainly dealt with cert chain issues in both CF 6 and CF 7 - so I'm of a mind to believe those

Re: CFHTTP and SSL v3

2009-02-19 Thread Dave Watts
That would have been my assumption as well, the support from AuthNet seemed to think otherwise, but I certainly don't trust their knowledge of CF and its inner workings. Which still brings me back to trying to determine exactly *which* versions of CF do support SSL v3.0 by default. Like

Re: CFHTTP and SSL v3

2009-02-18 Thread Amit Talwar
CFWebstore, ColdFusion-based Ecommerce http://www.cfwebstore.com We have some legacy ecomm apps that still use cf 5.0 with authorize.net will the move to cfmx 8 solve this new ssl 3.0 requirement issue by authorize.net . i have been trying hard to find if cfmx 8.0 supports ssl 3.0 with cfhttp

RE: CFHTTP and SSL v3

2009-02-18 Thread Mark Kruger
105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: Mary Jo Sminkey [mailto:mary...@cfwebstore.com] Sent: Tuesday, February 17, 2009 8:11 PM To: cf-talk Subject: Re: CFHTTP and SSL v3 You should be able to bypass CFHTTP and use the java libs directly. I

Re: CFHTTP and SSL v3

2009-02-18 Thread Mary Jo Sminkey
I'm confused SSL 3.0 does not necessarily need a client cert - does it? The connection would still use the public key right? Are you saying that Auth.net is requiring you to specify the client cert as a part of the handshake? Mark, I checked with AuthNet and you're right, they are not

CFHTTP and SSL v3

2009-02-17 Thread Mary Jo Sminkey
Okay, I have a bit of a critical issue as Authorize.Net is apparently disabling any use of SSL v2.0 and requiring the use of v3.0 (and only giving us about a month to get ready!) To my knowledge, only ColdFusion 8 even supports this, and not sure what the support is in Railo and BlueDragon. Is

RE: CFHTTP and SSL v3

2009-02-17 Thread Mark Kruger
...@cfwebstore.com mailto:mary...@cfwebstore.com] Sent: Tuesday, February 17, 2009 2:47 PM To: cf-talk Subject: CFHTTP and SSL v3 Okay, I have a bit of a critical issue as Authorize.Net is apparently disabling any use of SSL v2.0 and requiring the use of v3.0 (and only giving us about a month to get ready!) To my

Re: CFHTTP and SSL v3

2009-02-17 Thread Casey Dougall
On Tue, Feb 17, 2009 at 3:46 PM, Mary Jo Sminkey mary...@cfwebstore.comwrote: Okay, I have a bit of a critical issue as Authorize.Net is apparently disabling any use of SSL v2.0 and requiring the use of v3.0 (and only giving us about a month to get ready!) To my knowledge, only ColdFusion 8

Re: CFHTTP and SSL v3

2009-02-17 Thread Mary Jo Sminkey
Where do you read that Mary Jo? I don't see it in merchant area or in developer docs... Yeah, they just kind of dropped this on us with virtually no advanced notice. I've already sent them an email expressing my annoyance at such an extremely short time frame for something that is not just a

Re: CFHTTP and SSL v3

2009-02-17 Thread Mary Jo Sminkey
You should be able to bypass CFHTTP and use the java libs directly. I took a gander at the Java samples on the auth.net site for AIM integration and here's what I came up with. It seems to work fine on CF 7 and It handles the SSL all right and returns values. But I'm still trying to figure out

Re: CFHTTP and SSL

2008-08-27 Thread Matthew Williams
The talking tree has an article on this; http://www.talkingtree.com/blog/index.cfm?mode=entryentry=25AA75A4-45A6-2844-7CA3EECD842DB576. Matthew Williams Geodesic GraFX ~| Adobe® ColdFusion® 8 software 8 is the most important

Re: CFHTTP and SSL

2008-08-27 Thread Casey Dougall
On Wed, Aug 27, 2008 at 8:21 AM, Matthew Williams [EMAIL PROTECTED]wrote: The talking tree has an article on this; http://www.talkingtree.com/blog/index.cfm?mode=entryentry=25AA75A4-45A6-2844-7CA3EECD842DB576 . Matthew Williams Geodesic GraFX On a sidenote. For people who hate cmd

Re: CFHTTP and SSL

2008-08-26 Thread Gerald Guido
Is your cert self-signed or was it purchased from a place like Thawte? I ran into this a few years back... CFHTTP flat out failed with a self signed cert. I feel your pain. Took me better part of a day to figure out wft was going on. You have to register the cert with CF some how. I forgot what

CFHTTP and SSL

2008-08-25 Thread Chad Fraser
I have been trying to figure this one out for days. I need to know if cfhttp works with https for Cold Fusion ver 8.01. I've searched the internet with no definitive answers. Below I have included some code that should work but it is not. It works when I change the url to http instead of

Re: CFHTTP and SSL

2008-08-25 Thread Mike Chabot
Is your cert self-signed or was it purchased from a place like Thawte? When you view that URL in a Web browser do you get any errors whatsoever about the SSL cert, such as an expired warning or a domain mismatch warning? If you want to confirm for yourself that cfhttp works with https, you can

Wildcard Certificate and CFHTTP over SSL

2007-05-16 Thread Colin Jones
is seeing the certificate as *.rgu.ac.uk, deciding it is not a match for www.rgu.ac.uk and therefore rejecting the connection. The root certifying authority has been added to trustStore, ordinary CFHTTP connection work, as do CFHTTP to other SSL sites with 'normal' certificates. Anyone any idea why

Re: Wildcard Certificate and CFHTTP over SSL

2007-05-16 Thread James Holmes
, CFHTTP is seeing the certificate as *.rgu.ac.uk, deciding it is not a match for www.rgu.ac.uk and therefore rejecting the connection. The root certifying authority has been added to trustStore, ordinary CFHTTP connection work, as do CFHTTP to other SSL sites with 'normal' certificates

Re: Wildcard Certificate and CFHTTP over SSL

2007-05-16 Thread Colin Jones
. rgu.ac.uk, CFHTTP is seeing the certificate as *.rgu.ac.uk, deciding it is not a match for www.rgu.ac.uk and therefore rejecting the connection. The root certifying authority has been added to trustStore, ordinary CFHTTP connection work, as do CFHTTP to other SSL sites with 'normal

Re: Wildcard Certificate and CFHTTP over SSL

2007-05-16 Thread Wes Middendorff
What version is your SSL. SSLv3 can produce similar results. I had a similar situation and had to create a java class and seperate keystore for SSLv3 certificates. CFHTTP does not support SSLv3 and should not work at all, but in my situation I was able to connect to a testing platform (same

CFHTTP and SSL woes

2007-03-27 Thread Will Swain
Yup - this old chestnut. Server running cfmx6.1 trying to use CFHTTP to a url using SSL v3. This worked until recently when they upgraded their cert from v2 to v3, and now I'm getting the infamous Connection Failure error. I've tried applying the fixes such as importing the cert into cfmx's

Re: CFHTTP and SSL woes

2007-03-27 Thread Ryan Stille
Have you upgraded the jvm? If so, could you be importing the cert into the wrong keystore? You will need to import it into the keystore under the new JVM installation directory. If you follow any of the cert import instructions on the net, they will probably lead you to install the cert into

RE: CFHTTP and SSL woes

2007-03-27 Thread Will Swain
Ah, good point. I'm not sure to be honest - it's a client's server so they may well have done. I will investigate. Thanks Will -Original Message- From: Ryan Stille [mailto:[EMAIL PROTECTED] Sent: 27 March 2007 19:19 To: CF-Talk Subject: Re: CFHTTP and SSL woes Have you upgraded

CFHTTP and SSL Troubles

2007-02-07 Thread J W
I have, what I think is a pretty unique situation that is causing me to rip my hair out. I am working with trying to import a KEYPAIR into CACERTS. To explain a little further. I have a private key file that I created using openssl, then generated a cert request for the company that I am dealing

cfhttp w/ssl and access denied

2004-09-17 Thread Whittingham, P
Hi All, When I use cfhttp (https://abc.cfm https://abc.cfm ) from a non-ssl box to a ssl box, I am getting an 'Access Denied. I am using port#443. If I 'run' the page on the ssl box (in the browser) I get the typical 'security alert' message and it works (NO Access denied). What could

CFHTTP AND SSL

2004-02-12 Thread Brook Davies
have been trying to get SSL to work over CFHTTP within CFMX 6.1 for some time with no success. I searched the archives and found this hack: http://mxc.blogspot.com/2002_12_15_mxc_archive.html And implemented it on our CFMX server, when I run C:\CFusionMX\runtime\jre\libkeytool -list -storepass

RE: CFHTTP AND SSL

2004-02-12 Thread Smith, Matthew P -CONT(CSC)
a solution offlist please post just so I have in my knowledge base. Thanks, Matthew -Original Message- From: Brook Davies To: CF-Talk Sent: 2/12/04 1:13 PM Subject: CFHTTP AND SSL have been trying to get SSL to work over CFHTTP within CFMX 6.1 for some time with no success. I searched

RE: CFHTTP AND SSL

2004-02-12 Thread Brook Davies
are importing the CA to the proper JVM if the latter is true. If you find a solution offlist please post just so I have in my knowledge base. Thanks, Matthew -Original Message- From: Brook Davies To: CF-Talk Sent: 2/12/04 1:13 PM Subject: CFHTTP AND SSL have been trying to get SSL to work over

RE: CFHTTP AND SSL

2004-02-12 Thread Douglas.Knudsen
To: CF-Talk Subject: RE: CFHTTP AND SSL did you import to the proper jvm?I had to do this for navy issued certs, and it worked fine.I do not know if there are different keystores for each jvm you might have on there, or if you would have to be sure that you are importing the CA to the proper JVM

RE: CFHTTP AND SSL

2004-02-12 Thread Douglas.Knudsen
To: CF-Talk Subject: RE: CFHTTP AND SSL did you import to the proper jvm?I had to do this for navy issued certs, and it worked fine.I do not know if there are different keystores for each jvm you might have on there, or if you would have to be sure that you are importing the CA to the proper JVM

RE: CFHTTP AND SSL

2004-02-12 Thread Brook Davies
Subject: RE: CFHTTP AND SSL did you import to the proper jvm?I had to do this for navy issued certs, and it worked fine.I do not know if there are different keystores for each jvm you might have on there, or if you would have to be sure that you are importing the CA to the proper JVM

CFHTTP problem, SSL, and PayPal IPN

2004-01-18 Thread Jake McKee
I've been using PayPal's IPN system for automated purchasing for a while now. It's been working like a champ for a couple of months, and then suddenly stopped working without change to the code or server config. After searching high and low, I discovered that PayPal recently changed their IPN

RE: CFHTTP problem, SSL, and PayPal IPN

2004-01-18 Thread Greg Luce
: CFHTTP problem, SSL, and PayPal IPN I've been using PayPal's IPN system for automated purchasing for a while now. It's been working like a champ for a couple of months, and then suddenly stopped working without change to the code or server config. After searching high and low, I discovered

RE: CFHTTP problem, SSL, and PayPal IPN

2004-01-18 Thread Dave Watts
Anyone have any ideas for a possible CFHTTP replacement that DOES do 128bit SSL correctly? The IO JSP custom tag from the Jakarta project should work: http://jakarta.apache.org/taglibs/doc/io-doc/index.html But as others have said, you should probably look to migrate to CFMX 6.1, which fixes

cfhttp over ssl: X.509 not found

2003-09-23 Thread Stacy Young
Trying to use CFHTTP with one of our internal servers over SSL but are getting the following exception: I/O Exception: Default SSL context init failed: X.509 not found I've imported the cert into the cacerts keystore but it's not helping... Any ideas appreciated! Stace AVIS IMPORTANT:

CFMX and CFHTTP over SSL ?!!

2002-09-23 Thread Stacy Young
Ok folks this can't be...I've got a CFHTTP working just fine over SSL to one of our sitesCFMX fails...I've even tried manually importing the certificate and no go... Does it not support 128 bit ?! Stace AVIS IMPORTANT: --- Les informations contenues dans le

Re: CFMX and CFHTTP over SSL ?!!

2002-09-23 Thread Jesse Houwing
Stacy Young wrote: Ok folks this can't be...I've got a CFHTTP working just fine over SSL to one of our sitesCFMX fails...I've even tried manually importing the certificate and no go... Does it not support 128 bit ?! check if you imported it into the rigth JDK... I had three JDK's on my

RE: CFMX and CFHTTP over SSL ?!!

2002-09-23 Thread Stacy Young
Err sorry I meant to say it's functioning on CF5 just fine... -Original Message- From: Stacy Young [mailto:[EMAIL PROTECTED]] Sent: Monday, September 23, 2002 6:16 PM To: CF-Talk Subject: CFMX and CFHTTP over SSL ?!! Ok folks this can't be...I've got a CFHTTP working just fine over

RE: CFMX and CFHTTP over SSL ?!!

2002-09-23 Thread Stacy Young
I've tried on 2 servers...verified was the right JRE and nuthin! Don't get it... :\ -Original Message- From: Jesse Houwing [mailto:[EMAIL PROTECTED]] Sent: Monday, September 23, 2002 6:28 PM To: CF-Talk Subject: Re: CFMX and CFHTTP over SSL ?!! Stacy Young wrote: Ok folks this can't

RE: CFMX and CFHTTP over SSL ?!! SOLVED!

2002-09-23 Thread Stacy Young
Message- From: Stacy Young [mailto:[EMAIL PROTECTED]] Sent: Monday, September 23, 2002 6:29 PM To: CF-Talk Subject: RE: CFMX and CFHTTP over SSL ?!! I've tried on 2 servers...verified was the right JRE and nuthin! Don't get it... :\ -Original Message- From: Jesse Houwing [mailto

  1   2   >