Web service call with v3 client cert in CF8

Did this work? I was told by CF support that CF 8 does NOT support SSL v3. But we are having the same problem with SSL v2.

There are many threads started on this topic, but none with a resolution. Has any one ever gotten Coldfusion to consume a web service with https ??

DrewBlah wrote:
> I'm trying to call an external web service which requires a v3 client
> certificate be installed on our end. Our code platform is CF8, which I
> understand supports v3 certs. I've imported the external party's client cert
> into the CF server's cert store (cacerts) via keytool, and confirmed it's
> there.

You should not import the client certificate, but the server certificate:
http://www.talkingtree.com/blog/index.cfm/2004/7/1/keytool
http://jochem.vandieten.net/2008/02/28/cfhttp-and-client-certificates/


> I've restarted the CF server. How do I attach the certificate to the
> cfhttp call to the external web service? I figure I can use a cfhttpparam, but
> am not sure what type to use, and what the value should be. Thanks in advance.

The certificate for the HTTP call should be on the filesystem in PKCS#12
format. Then use the following code:

<cfset variables.certificatePath = ExpandPath("certificate.pkcs") />
<cfset variables.certificatePass = "fillOutYourOwnPassword"/>
<cfset variables.webserviceURL = "https://server/service" />

<cfsavecontent variable="theSoap">
<soapenv:Envelope
xmlns:soapenv=" http://schemas.xmlsoap.org/soap/envelope/"
xmlns:ns="https://server/service">
<soapenv:Header/>
<soapenv:Body>
<ns:GetXXX>
<xxx>YYY</xxx>
</ns:GetXXX>
</soapenv:Body>
</soapenv:Envelope>
</cfsavecontent>

<cfhttp
url = "#variables.webserviceURL#"
clientCert = "#variables.certificatePath#"
clientCertPassword = "#variables.certificatePass#"
method = "get"
port="443"
>
<cfhttpparam type="header" name="Connection" value="Keep-Alive">
<cfhttpparam type="header" name="SOAPAction" value="service">
<cfhttpparam type="xml" value="#theSoap#">
</cfhttp>

<cfdump var="#XMLParse(cfhttp.filecontent)#">

Jochem


--
Jochem van Dieten
Adobe Community Expert for ColdFusion