Skip to main content
jschneidercssi
Participant
Jun 17, 2013 6:43 PM UTC
Question

Web service access error: javax.servlet.ServletException: https is forbidden

We have Coldfusion 10 configured on an IIS web site using a GoDaddy provided SSL certificate.  When we try to access a web service we receive a 500 error from the server.  When we look at the application log we see the following record:

"Error","ajp-bio-8012-exec-2","06/17/13","14:20:19","SmartPriceAdmin","The web service operation caused an invocation exception.The root cause was that: javax.servlet.ServletException: https is forbidden The specific sequence of files included or processed is: C:\WebSites\Something\SMARTPriceServices.cfc'' "

C:\WebSites\Something\SMARTPriceServices.cfc is the location on the server where the actual web service file resides.

I'm not the sites developer but I'm trying to aid him in finding the issue.  We've added the sites SSL certificate through the SSL Certificate Management feature of the Administrator and restarted the Coldfusion 10 Appllication Service but it had no effect.  Any help would be very appreciated.

    This topic is closed to new replies. Start a new post to keep the conversation going.

    8 replies

    Anonymous
    Jul 17, 2013 6:47 PM UTC

    The issue is because by default Axis is set to only permit HTTP calls and not HTTPS.  You have to update the ColdFusion10\cfusion\wwwroot\WEB-INF\Axis2.xml file to enable the HTTPS mode.  I found Apache documentation on it here;

    http://axis.apache.org/axis2/java/core/docs/servlet-transport.html

    Using their documentation I changed it from this;

    <transportReceiver name="http" class="coldfusion.xml.rpc.CFAxisServletListener"/>

    to this

    <transportReceiver name="http" class="coldfusion.xml.rpc.CFAxisServletListener">
        <parameter name="port">8080</parameter>
    </transportReceiver>

    <transportReceiver name="https" class="coldfusion.xml.rpc.CFAxisServletListener">
        <parameter name="port">8443</parameter>
    </transportReceiver>

    I'm still testing though to see if this works correctly

    Translate
    Priyank Shrivastava.
    Priyank Shrivastava.
    Inspiring
    Jul 17, 2013 7:54 PM UTC

    Hi,

    Can you please check which Axis is selected in your ColdFusion Admin. If it is Axis 2, then try to add the transport receiver for HTTPS which Leith mentioned and restart the service. Also you can try with Axis 1.

    Hope this helps.

    Regards,

    Priyank

    Translate
    Thanks, Priyank Shrivastava
    Anonymous
    Jul 17, 2013 7:55 PM UTC

    Of note I had to change the port #'s to be 80 & 443 to match those of the websites running under IIS.  When the ports didn't match the calls would fail.

    Translate
    p_sim
    p_sim
    Participating Frequently
    Jun 17, 2013 10:08 PM UTC

    Can you access a CFM inside the directory? It might be IIS configuration issue.

    Translate
    jschneidercssiAuthor
    Participant
    Jun 18, 2013 12:53 PM UTC

    Yes, I can.  Also, when the SSL requirement is removed for the site it works as expected.  The error suggests a specific issue with the java component and https.  Unfortunately, I'm not a CF expert and the developer isn't familiar with the issue either.

    Translate
    p_sim
    p_sim
    Participating Frequently
    Jun 18, 2013 1:06 PM UTC

    I'm almost certain that the issue is related to Web server configuration with SSL installed.

    Try this and see if that works. In the CF Admin, there is a way to flush out generated CFC files.

    Translate
    Terms & ConditionsAccessibility statement
    Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices