portal entry

select a category, or use search below
(searches all categories and all time range)
Title:

Solving problems calling out of CF via https, by updating JVM

| View in Portal
June 07, 2019 08:10:34 PM GMT
2 Comments 
<p>If you're getting errors in calling out to https urls from CF, you may not need to "import new certificates". You may merely need to update the JVM that CF uses.</p>
<p>The post <a rel="nofollow" href="https://coldfusion.adobe.com/2019/06/error-calling-cf-via-https-solved-updating-jvm/">Solving problems calling out of CF via https, by updating JVM</a> appeared first on <a rel="nofollow" href="https://coldfusion.adobe.com">ColdFusion</a>.</p>
Labels: Blog, ColdFusion, Troubleshooting, blog, ssl, tls, troubleshooting

Comments:

Hi Charlie, thanks you for your article. You speak of "some unique cases". I'd say it depend's on when you get the exception. If you try to connect to some internal server it likely is the case that the cert is not created by some trusted autority and needs to be imported. If you try to access a public facing website and get the exception, it likely uses some recent cert that was not part of your original Java install.
Comment by Bernhard Döbler
2105 | June 09, 2019 11:45:31 PM GMT
<p>Right, thanks Bernhard. I was torn about elaborating on the other cases. Fair point that that’s the most likely one.</p><p>I figured that for anyone who might find this jvm update alone didn’t help, they’d easily find other discussions of importing certs.</p><p>I will add that those who do that should beware that IF someone has indeed already changed the jvm CF uses, they need to be sure to import the cert into the lib/security /cacerts of THAT jvm, not the one in CF’s jre/lib–as most resources would presume to tell folks.</p>
Comment by Charlie Arehart
2106 | June 10, 2019 12:07:25 AM GMT