Skip to main content
bgordon8684
Inspiring
June 23, 2015
Answered

"Peer not authenticated" with RDS configuration using SSL

  • June 23, 2015
  • 3 replies
  • 3849 views

We have a remote ColdFusion 11 server, and I'm trying to set up ColdFusion Builder 3 on a Windows 7 machine.  I have this RDS connection working in HomeSite with an IDENTICAL configuration, but I get a "peer not authenticated" error in ColdFusion Builder on the same machine connecting to the same server with HomeSite successfully.

I've seen references to AdminServerComponents_WWEJ.zip and have downloaded that and installed the files in ColdFusion11, but when I run "adminstart" I get:

'jrun' is not recognized as an internal or external command, operable program or batch file.

There is no "jrun.exe" on this server.  So can I assume that this file and procedure are not required for ColdFusion 11?

I don't find any answers anywhere on how to get this working with ColdFusion 11...

Thanks for any assistance anyone can offer.  -bg

This topic has been closed for replies.
Correct answer bgordon8684

After a very fruitful remote session with Charlie (whose diagnostic and troubleshooting skills are beyond amazing), we got this sorted out.  It appears that HomeSite trusts the SSL certificate on the web server, but ColdFusion Builder does not.

We had to export the SSL certificate from the (external) website we were using as RDS host (save it to a .cer file) and import it into the ColdFusion Builder certificate store (C:\ColdFusionBuilder3\jre\lib\security\cacerts) on my PC running ColdFusion Builder using the JDK keytool program.

Problem solved.  I would NEVER have been able to figure this out on my own...

Thanks, Charlie!

3 replies

Known Participant
June 26, 2015

My goal was or is actually to connect to FTP over SSL and only saw RDS in the ColdFusion Builder.  I did not want to enable RDS on the server, so have not tried that yet.  I found this post https://wiki.hostek.com/ColdFusion_Builder about a tool that can be installed to connect over FTP, however; that does not allow SFTP or FTP using SSL.  The RDS method got me closest as I got the peer error message.

bgordon8684
Inspiring
June 26, 2015

I feel your pain.

I have followed the instructions at the hostek.com link, and I cannot get FTP working.  So now I have an RDS connection to the server (using SSL), and I can load a file from the remote server, but I have no way to save it back to the server!  CFB is still useless at this point.

This is incredibly frustrating...  -bg

Charlie Arehart
Community Expert
Community Expert
June 28, 2015

Bill, this is new info for me. When we left things last week, you were connecting via RDS over SSL. But I don’t recall noticing if you had tried to either upload or download a file once we confirmed the connection.

So you’re saying you can pull files down but not push them back up? That really surprises me. RDS does not have any sort of great distinction between those operations, that I know of, so I can’t see it being an RDS problem. And I’ve never heard it to be any sort of generic CFB problem. Finally, I don’t know of anything about SSL support in a web server that would affect downloads differently than uploads.

Just to rule SSL out, you could change CFB to using a non-SSL connection. Any difference? And I assume you are confirming that the file in question can upload just fine using your HomeSite+/RDS connection, right, which is why you think it’s CFB?

I’ll add that if perhaps this IS a file that also can’t upload in HS+, then the problem may be due to a limiter in your IIS 6 setup (or something like the free URLScan tool, often used with IIS 6 for injection protection) which may be limiting the size of files that can be posted to the server.

CF also has a limit for file size uploads (in the CF Admin Settings page), but I don’t recall if that limit applies to RDS-based file uploads. It could. Again, if you would say HS+ can upload the same file to the same server, then clearly it’s not a CF issue.

But let us know more. Again, I’ve never heard of the problem. Also, check your IIS and CF logs just to see if possibly either has info on the rejection you’re experiencing.

/charlie

/Charlie (troubleshooter, carehart. org)
bgordon8684
bgordon8684AuthorCorrect answer
Inspiring
June 25, 2015

After a very fruitful remote session with Charlie (whose diagnostic and troubleshooting skills are beyond amazing), we got this sorted out.  It appears that HomeSite trusts the SSL certificate on the web server, but ColdFusion Builder does not.

We had to export the SSL certificate from the (external) website we were using as RDS host (save it to a .cer file) and import it into the ColdFusion Builder certificate store (C:\ColdFusionBuilder3\jre\lib\security\cacerts) on my PC running ColdFusion Builder using the JDK keytool program.

Problem solved.  I would NEVER have been able to figure this out on my own...

Thanks, Charlie!

Charlie Arehart
Community Expert
Community Expert
June 25, 2015

Thanks for the update and the kind regards, Bill. And yep, I'd say this was one we'd not have readily solved by email, so chalk up another one for the value of online troubleshooting sessions.

That said, now that we have learned this, and documented it here, hopefully it could help others who may hit the problem in the future. And certainly if I see such a discussion I'll be able to more readily offer the answer, without need of an online session. We can all learn something new every day.:-)

Enjoy your CFB development.

/Charlie (troubleshooter, carehart. org)
Charlie Arehart
Community Expert
Community Expert
June 23, 2015

Bg, you get that error “when”, exactly? On what screen or operation within CFB? It may be significant.

Because yes, if you can talk to the CF server from the same dev machine using HS+, you should also be able to talk to it from that machine using CFB. I am wondering if the error might possibly relate to something other than RDS processing itself. Your answer should help clarify.

And no, that adminserver component should not be needed.

/charlie

/Charlie (troubleshooter, carehart. org)
bgordon8684
Inspiring
June 23, 2015

Hi, Charlie.  Thanks for the reply.

Upper right corner, right click on server, then "RDS Configuration".  Test connection returns this:

Also at the bottom under "CF Servers" with same setup, if I "Start Server", status says "Starting" and stays there forever.

You available for a remote control session to poke around on this computer?

Thanks.  -bg

Charlie Arehart
Community Expert
Community Expert
June 23, 2015

Well, let’s clarify first that the RDS config test and the server view are quite different. The latter does NOT rely on RDS (there are facets of the configuration of a server there which DO rely on RDS, but not that “start/stop” status). As for why it remains stuck showing the “starting” status, I don’t readily know, but guess the question would be first “does the server run or not?”, and seconddo you need to be concerned about this status?

So back to the RDS test, this error suggests you are connecting to the server via SSL. Can you confirm that? And when you say that the HomeSite+ setup is identical, are you saying it uses HTTP in its url also?

And when you say these are both connecting to the “same server”, is the URL you’re using also otherwise identical? For instance, you could connect to “the same server” but use 2 different domain names, connecting to the one web server but in different ways. Finally, are you in fact making the connection to CF through a web server (IIS or Apache) or directly using CF’s built-in web server (such as if using port 8500 or the like in your URL)?

As for doing a remote session, we could, sure, but not for free. If I offered that sort of help here, I’d be overwhelmed. But if you mean as per my consulting (see the consulting page at carehart.org), then sure. I just got out of a meeting so have time now, if you do. Otherwise contact me off-list using the contact info offered on that page. Looking forward to seeing your problem solved. As you can see, my questions are striving to help you here on the forums for free, but if you’re pressed for time, it’s true that sometimes there’s no quicker solution than to have such a remote screen-sharing session.

/charlie

/Charlie (troubleshooter, carehart. org)