Skip to main content
J
jschneidercssi
Participant
June 17, 2013
Question

Web service access error: javax.servlet.ServletException: https is forbidden

  • June 17, 2013
  • 2 replies
  • 4776 views

We have Coldfusion 10 configured on an IIS web site using a GoDaddy provided SSL certificate.  When we try to access a web service we receive a 500 error from the server.  When we look at the application log we see the following record:

"Error","ajp-bio-8012-exec-2","06/17/13","14:20:19","SmartPriceAdmin","The web service operation caused an invocation exception.The root cause was that: javax.servlet.ServletException: https is forbidden The specific sequence of files included or processed is: C:\WebSites\Something\SMARTPriceServices.cfc'' "

C:\WebSites\Something\SMARTPriceServices.cfc is the location on the server where the actual web service file resides.

I'm not the sites developer but I'm trying to aid him in finding the issue.  We've added the sites SSL certificate through the SSL Certificate Management feature of the Administrator and restarted the Coldfusion 10 Appllication Service but it had no effect.  Any help would be very appreciated.

    This topic has been closed for replies.

    2 replies

    A
    Anonymous
    July 17, 2013

    The issue is because by default Axis is set to only permit HTTP calls and not HTTPS.  You have to update the ColdFusion10\cfusion\wwwroot\WEB-INF\Axis2.xml file to enable the HTTPS mode.  I found Apache documentation on it here;

    http://axis.apache.org/axis2/java/core/docs/servlet-transport.html

    Using their documentation I changed it from this;

    <transportReceiver name="http" class="coldfusion.xml.rpc.CFAxisServletListener"/>

    to this

    <transportReceiver name="http" class="coldfusion.xml.rpc.CFAxisServletListener">
        <parameter name="port">8080</parameter>
    </transportReceiver>

    <transportReceiver name="https" class="coldfusion.xml.rpc.CFAxisServletListener">
        <parameter name="port">8443</parameter>
    </transportReceiver>

    I'm still testing though to see if this works correctly

    Priyank Shrivastava.
    Community Manager
    Priyank Shrivastava.Community Manager
    Community Manager
    July 17, 2013

    Hi,

    Can you please check which Axis is selected in your ColdFusion Admin. If it is Axis 2, then try to add the transport receiver for HTTPS which Leith mentioned and restart the service. Also you can try with Axis 1.

    Hope this helps.

    Regards,

    Priyank

    Thanks, Priyank Shrivastava
    A
    Anonymous
    July 17, 2013

    Of note I had to change the port #'s to be 80 & 443 to match those of the websites running under IIS.  When the ports didn't match the calls would fail.

    p_sim
    p_sim
    Participating Frequently
    June 17, 2013

    Can you access a CFM inside the directory? It might be IIS configuration issue.

    J
    jschneidercssiAuthor
    Participant
    June 18, 2013

    Yes, I can.  Also, when the SSL requirement is removed for the site it works as expected.  The error suggests a specific issue with the java component and https.  Unfortunately, I'm not a CF expert and the developer isn't familiar with the issue either.

    p_sim
    p_sim
    Participating Frequently
    June 18, 2013

    I'm almost certain that the issue is related to Web server configuration with SSL installed.

    Try this and see if that works. In the CF Admin, there is a way to flush out generated CFC files.

    Terms & ConditionsAccessibility statement
    Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices