Skip to main content
Known Participant
December 8, 2017
Answered

relay user's client certificate via cfhttp

  • December 8, 2017
  • 1 reply
  • 764 views

My application requires client certificates at the root level.  Some functions within my site use cfhttp to contact another server that also requires client certificates.  Is there any way to pass the user's certificate on to the other server via cfhttp?  The only solution I can find is to use a specific cert file that exists on my server's file system to send via cfhttp.

What I'm looking for is a way to do something like:

<cfhttp url="http://www.otherserver.com" clientcert="#cgi.cert_subject#">

...but clientcert is looking for a static file in pkcs format.

    This topic has been closed for replies.
    Correct answer Dave Watts

    I'm pretty sure that CF can't proxy a user's client certificate.

    Dave Watts, CTO, Fig Leaf Software

    1 reply

    Dave WattsCommunity ExpertCorrect answer
    Community Expert
    December 8, 2017

    I'm pretty sure that CF can't proxy a user's client certificate.

    Dave Watts, CTO, Fig Leaf Software

    Dave Watts, Eidolon LLC
    Inspiring
    December 8, 2017

    By design, I'd reckon!

    Known Participant
    December 8, 2017

    Yeah, you're probably right - may be some security concerns involved?

    Now for the rest of the story - there's actually only one server involved.  The general setup is that, when a user is on myInterface.cfm and clicks "Print", I then do a <cfhttp url="https://myserver.com/myInterface.cfm">, passing in all of the necessary arguments, sessionIDs, etc.  I then take the resulting cfhttp.filecontent, massage it a bit and output it via PDF, PPT, etc.

    Now that I'm having to enforce client certs at the root level, I don't think I can keep this setup.