Skip to main content
M
mjsale
Participating Frequently
February 11, 2008
Question

Sending a p12 cert to a credit card auth system HELP!

  • February 11, 2008
  • 3 replies
  • 1204 views
Hello all, I am constantly banging my head on my desk and I am needing some assistance I hope someone out there has done.

I am working with a credit card verification type of company who I need to integrate my ColdFusion app with. They have provided me with a web service to make a couple of calls to in order to complete the transaction. However, I am running into a road block with this integration.

The vendor states that before I can make any calls to their web service on their server, I need to "send them a client certificate." It seems that the vendor is unable to provide much more information than that to me. So at this point, if I call the web service on their end, I get an authentication error.

They have provided me with a .p12 certificate that I have to send them before I call the web service via CFINVOKE, but I am really not sure as to what to do with this certificate and how to "send" this client cert to them to begin the process.. I am using CF 8. Any help out there would be very appreciated. Thanks

Michael
This topic has been closed for replies.

3 replies

M
Mr_Black
Participating Frequently
February 12, 2008
>Is there anyway I can talk to you offline? Via email?

Yes, if you post your email.
M
mjsaleAuthor
Participating Frequently
February 12, 2008
mjsale@gmail.com
M
mjsaleAuthor
Participating Frequently
February 12, 2008
Mr Black.. I did get a reply from the vendor, but it is quite involved.. Is there anyway I can talk to you offline? Via email?
S
Steve Sommers
Legend
February 12, 2008
Well, I would expect a little more help than that. You did not mention who the company is but I would Google "coldfusion [company] API" and see if anything comes up. If they are a company with any market share you should be able to find something.

Otherwise there are other alternatives if you cannot get it working. ;-)

Hope this helps. Good luck.
M
mjsaleAuthor
Participating Frequently
February 12, 2008
The company is called TouchNet a payment gateway company for Higher Ed institutions. We are a partner of theres. The issue is that they have never interfaced with a CF application.. This is what I got from them today:

If you have a ColdFusion java interface we’d suggest looking at how to provide one or both of these interfaces:



javax.net.ssl.X509KeyManager

javax.net.ssl.X509TrustManager



and provide those to the javax.net.ssl.SSLContext.init() function; then you can use that SSLContext and call getInstance("SSL") to get a socket.
M
Mr_Black
Participating Frequently
February 12, 2008
As far as I understand, they want you to include the client certificate header to HTTP request when you call their Web-serice.

Unfortunately, CFINVOKE doesn't support client certificates. However, CFHHTP (CF8) - does. So, you can use CFHTTP instead of CFINVOKE, but you need to create a proper HTTP request body yourself. Usually, vendors provide examples of properly formatted SOAP messages, which is just a text, where you can insert your data. Or look at their WSDL document and create this by yourself.
Terms & ConditionsAccessibility statement
Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices