• Global community
    • Language:
      • Deutsch
      • English
      • Español
      • Français
      • Português
  • 日本語コミュニティ
    Dedicated community for Japanese speakers
  • 한국 커뮤니티
    Dedicated community for Korean speakers
Exit
0

relay user's client certificate via cfhttp

New Here ,
Dec 08, 2017 Dec 08, 2017

Copy link to clipboard

Copied

My application requires client certificates at the root level.  Some functions within my site use cfhttp to contact another server that also requires client certificates.  Is there any way to pass the user's certificate on to the other server via cfhttp?  The only solution I can find is to use a specific cert file that exists on my server's file system to send via cfhttp.

What I'm looking for is a way to do something like:

<cfhttp url="http://www.otherserver.com" clientcert="#cgi.cert_subject#">

...but clientcert is looking for a static file in pkcs format.

Views

552

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines

correct answers 1 Correct answer

Community Expert , Dec 08, 2017 Dec 08, 2017

I'm pretty sure that CF can't proxy a user's client certificate.

Dave Watts, CTO, Fig Leaf Software

Votes

Translate

Translate
Community Expert ,
Dec 08, 2017 Dec 08, 2017

Copy link to clipboard

Copied

I'm pretty sure that CF can't proxy a user's client certificate.

Dave Watts, CTO, Fig Leaf Software

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Engaged ,
Dec 08, 2017 Dec 08, 2017

Copy link to clipboard

Copied

By design, I'd reckon!

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
New Here ,
Dec 08, 2017 Dec 08, 2017

Copy link to clipboard

Copied

LATEST

Yeah, you're probably right - may be some security concerns involved?

Now for the rest of the story - there's actually only one server involved.  The general setup is that, when a user is on myInterface.cfm and clicks "Print", I then do a <cfhttp url="https://myserver.com/myInterface.cfm">, passing in all of the necessary arguments, sessionIDs, etc.  I then take the resulting cfhttp.filecontent, massage it a bit and output it via PDF, PPT, etc.

Now that I'm having to enforce client certs at the root level, I don't think I can keep this setup.

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Resources
Documentation