relay user's client certificate via cfhttp

[ericbegins]

My application requires client certificates at the root level.  Some functions within my site use cfhttp to contact another server that also requires client certificates.  Is there any way to pass the user's certificate on to the other server via cfhttp?  The only solution I can find is to use a specific cert file that exists on my server's file system to send via cfhttp.

What I'm looking for is a way to do something like:

<cfhttp url="http://www.otherserver.com" clientcert="#cgi.cert_subject#">

...but clientcert is looking for a static file in pkcs format.

[Dave Watts · Accepted solution]

I'm pretty sure that CF can't proxy a user's client certificate.

Dave Watts, CTO, Fig Leaf Software

[nic_tunney]

By design, I'd reckon!

[ericbegins]

Yeah, you're probably right - may be some security concerns involved?

Now for the rest of the story - there's actually only one server involved.  The general setup is that, when a user is on myInterface.cfm and clicks "Print", I then do a <cfhttp url="https://myserver.com/myInterface.cfm">, passing in all of the necessary arguments, sessionIDs, etc.  I then take the resulting cfhttp.filecontent, massage it a bit and output it via PDF, PPT, etc.

Now that I'm having to enforce client certs at the root level, I don't think I can keep this setup.