Skip to main content
Participant
September 22, 2017
Question

Help Needed w/CF10 SSL Connection String to SQL 2008

  • September 22, 2017
  • 1 reply
  • 572 views

Hello,

I have an existing/working CF10-SQL 2008 DataSource that I need to make encrypted. I have added the following connection string to the advanced setting of the DSN:

EncryptionMethod=SSL; trustStore=C:/ColdFusion10/jre/bin/cacerts; trustStorePassword=PASSWORD; ValidateServerCertificate=true;

The SSL certificate for the SQL server was issued with the FQDN and resides on the SQL and ColdFusion servers and was loaded in to the CF certificate store.

When verifying the DSN, I receive the following error:

Connection verification failed for data source: TestSSLDSN

java.sql.SQLNonTransientConnectionException: [Macromedia][SQL Server JDBC Driver] SSL Handshake failed: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Any assistance would be greatly appreciated. Thanks!

    This topic has been closed for replies.

    1 reply

    BKBK
    Community Expert
    Community Expert
    September 26, 2017

    trustStore=C:/ColdFusion10/jre/bin/cacerts;

    Shouldn't that be: trustStore=C:/ColdFusion10/jre/lib/security/cacerts;

    jlibean23Author
    Participant
    September 26, 2017

    Yes but I just missed it here in my post, the connection string in the DSN has the correct path.

    I have validated the connection string by purposely changing the truststore and password values to confirm neither are the issue.

    Thank you but that's not it. :-(

    BKBK
    Community Expert
    Community Expert
    September 26, 2017

    What about including the flag HostNameInCertificate? I would also check that the Java versions are consistent.