Friday, December 26, 2014

Coldfusion 11 Java Keytool Import Cert Command

Doing an upgrade of coldfusion from CFMX 6.1 to CF11 and completely forgot how to import/trust external SSL certs (for consuming web services).

  1. hit the web service WSDL url, confirm it works over HTTPS, and download the base64 version of the cert from your browser
  2. copy the cert to the coldfusion server (the default path for java cacert keyfile is here: C:\ColdFusion11\jre\lib\security)
  3. open a command prompt (run as administrator) and execute the command
  4. Restart coldfusion

note that when you try to add an HTTPS web service with an untrusted SSL cert from the CF Admin you get a generic "Cant read WSDL" error. Not super helpful, but every time I get that message it ends up being either this SSL cert trust issue or that my web service requires windows authentication (CF 11 does not support kerberos or windows auth for consuming web services).

No comments: