portal entry

select a category, or use search below
(searches all categories and all time range)
Title:

How to enable SSL for ColdFusion Administrator running on internal ColdFusion port.

| View in Portal
October 30, 2017 05:29:11 PM GMT
2 Comments 
We have removed administrator access from external web server for CF 2016 for security reasons. You can access the administrator only from the internal Tomcat web server port 8500 series. Naturally, there are users who would want to make the administrator secure and enable SSL for the same.   Follow the instructions below to enable the SSL for Tomcat/ColdFusion: Generate a keystore, preferably of type PKCS12. Import your certificate to keystore. Make sure you also import the private key and […]
Labels: Blog, ColdFusion

Comments:

<ol> <li>Generate a keystore, preferably of type PKCS12. HOW???  Need specifics (commands, paths, etc.)</li> <li>Import your certificate to keystore. Make sure you also import the private key and have the correct key pair. HOW???  Need specifics (commands, paths, etc.)</li> <li>Include the following code in your jvm.config file. WHERE???  Need specific paths...</li> </ol>
Comment by Hi There
2187 | July 29, 2019 08:25:38 PM GMT
I agree that the post leaves out a lot of detail, but I can point out for you that since it was written (in 2017), the CF2018 Lockdown Guide came out and that DOES have a section showing how to enable SSL/TLS for the CF Admin (built-in web server). The guide is here: <a href="https://www.adobe.com/content/dam/acom/en/products/coldfusion/pdfs/coldfusion-2018-lockdown-guide.pdf" rel="nofollow">https://www.adobe.com/content/dam/acom/en/products/coldfusion/pdfs/coldfusion-2018-lockdown-guide.pdf</a> And the section with the needed details is named, "To run the Builtin Web Server over TLS". Finally, FWIW, this same issue came up yesterday also on a blog post of my own (perhaps you were even the one asking for more info there, if under a different alias/name). I'll say to readers here that I share still more info that may interest them about this topic, there (this link goes right to my comment): <a href="https://www.carehart.org/blog/client/index.cfm/2012/7/23/The-builtin-web-server-in-ColdFusion-10-enabling-it-configuring-it-reconsidering-it/#c9EA03315-A448-278D-984B3BC157118279" rel="nofollow">https://www.carehart.org/blog/client/index.cfm/2012/7/23/The-builtin-web-server-in-ColdFusion-10-enabling-it-configuring-it-reconsidering-it/#c9EA03315-A448-278D-984B3BC157118279</a>
Comment by Charlie Arehart
2192 | July 30, 2019 03:58:28 PM GMT