Highlighted

relay user's client certificate via cfhttp

New Here ,
Dec 08, 2017

Copy link to clipboard

Copied

My application requires client certificates at the root level.  Some functions within my site use cfhttp to contact another server that also requires client certificates.  Is there any way to pass the user's certificate on to the other server via cfhttp?  The only solution I can find is to use a specific cert file that exists on my server's file system to send via cfhttp.

What I'm looking for is a way to do something like:

<cfhttp url="http://www.otherserver.com" clientcert="#cgi.cert_subject#">

...but clientcert is looking for a static file in pkcs format.

Adobe Community Professional
Correct answer by Dave_Watts | Adobe Community Professional

I'm pretty sure that CF can't proxy a user's client certificate.

Dave Watts, CTO, Fig Leaf Software

Views

322

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more

relay user's client certificate via cfhttp

New Here ,
Dec 08, 2017

Copy link to clipboard

Copied

My application requires client certificates at the root level.  Some functions within my site use cfhttp to contact another server that also requires client certificates.  Is there any way to pass the user's certificate on to the other server via cfhttp?  The only solution I can find is to use a specific cert file that exists on my server's file system to send via cfhttp.

What I'm looking for is a way to do something like:

<cfhttp url="http://www.otherserver.com" clientcert="#cgi.cert_subject#">

...but clientcert is looking for a static file in pkcs format.

Adobe Community Professional
Correct answer by Dave_Watts | Adobe Community Professional

I'm pretty sure that CF can't proxy a user's client certificate.

Dave Watts, CTO, Fig Leaf Software

Views

323

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Dec 08, 2017 0
Adobe Community Professional ,
Dec 08, 2017

Copy link to clipboard

Copied

I'm pretty sure that CF can't proxy a user's client certificate.

Dave Watts, CTO, Fig Leaf Software

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Reply
Loading...
Dec 08, 2017 0
Engaged ,
Dec 08, 2017

Copy link to clipboard

Copied

By design, I'd reckon!

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Reply
Loading...
Dec 08, 2017 0
New Here ,
Dec 08, 2017

Copy link to clipboard

Copied

Yeah, you're probably right - may be some security concerns involved?

Now for the rest of the story - there's actually only one server involved.  The general setup is that, when a user is on myInterface.cfm and clicks "Print", I then do a <cfhttp url="https://myserver.com/myInterface.cfm">, passing in all of the necessary arguments, sessionIDs, etc.  I then take the resulting cfhttp.filecontent, massage it a bit and output it via PDF, PPT, etc.

Now that I'm having to enforce client certs at the root level, I don't think I can keep this setup.

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Reply
Loading...
Dec 08, 2017 0