Skip to main content
S
Steve Sommers
Legend
June 11, 2013
Question

CFHTTP and wildcard SSL

  • June 11, 2013
  • 1 reply
  • 1415 views

I'm using CF9. Has anyone been successful with CFHTTP when the target URL is using a wildcard SSL certificate? I've imported the cert and full cert path into the certificate store. I don't have any problems with non-wildcard certs, only wildcard certs. Thus far I've only found one reference to this topic and it simply stated "I have never been successful using wildcard certificates on CF8 and below." Yet there is no reference as to if or how to be successful with CF9 or above.

This topic has been closed for replies.

1 reply

James Moberg
James Moberg
Inspiring
July 11, 2013

What's the actual error you are getting?  I encountered something with ColdFusion 9 and thought it was a wildcard cert, but it turns out it was due to a SSL Certificate with Subject Alternative Names (SAN) and was getting javax.net.ssl.SSLException: Name in certificate 'gateway.testserver.com' does not match host name 'api.gateway.testserver.com'."  The service I was trying to connect to performed many internal tests and determined it was not on their end.  I reported it to Adobe here:
https://bugbase.adobe.com/index.cfm?event=bug&id=3566218

Also, are you able to post the secure domain's URL?  I'd be curious if it worked using CF8 w/Java 1.7.0_15.

Facebook appears to be using a wildcard SSL certificate.  Try connecting to their server:

     <cfhttp url="https://www.facebook.com/" method="GET"></CFHTTP>

     <CFDUMP VAR="#CFHTTP#">

S
Steve SommersAuthor
Legend
July 11, 2013

The issue ended up being a certificate import issue and not a wildcard issue. I imported the certificat into the wrong cacerts location. Our server was configured to use the Oracle JVM instead of the one that came with CF. Once I imported the certificates into the correct location everything worked.

Terms & ConditionsAccessibility statement
Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices