Thanks Mark. This actually was helpful in helping me understand WHY the request was failing, which I didn't quite understand before I read your blog entry there.
The PFX file that was sent to us contained the CA cert which I extracted from the PFX file (using openssl) and imported it into the keystore using keytool. So, presumably, I should be able to connect to this blasted web service, but I still can't. So.... I'm wondering if I need to do something more with this PFX file. Unfortunately the company that we got this from is absolutely no help whatsoever - even in the way of documentation. They simply provided the PFX file along with an example XML request and then they wash their hands of it. Not helpful at all. I've read an article (http://www.junlu.com/msg/85393.html) that explains how to use a PFX file with a java connector, but not knowing much about java this doesn't help me very much. Perhaps there is a Cold Fusion equivalent to this? Thanks for your help! Warm regards, Jordan Michaels Vivio Technologies Mark A Kruger wrote: >You can try this: > >http://mkruger.cfwebtools.com/index.cfm?mode=entry&entry=8E44925A-B73D-E3AD- >709D4E02FD6D4588 > >It may not apply to CFMX 7 (it's an old note). > >-Mark > >-----Original Message----- >From: Jordan Michaels [mailto:[EMAIL PROTECTED] >Sent: Wednesday, June 08, 2005 10:24 AM >To: CF-Talk >Subject: Secure WSDL Web Services (Advanced CFML problem) > > >I'm currently working with a client who's attempting to consume a secure >WSDL web service which uses a security mechanism similar to PayPal's web >service. When you sign up to use PayPal's web service, they send you the >public key which you then install in your JVM. (It's like installing a >public key in your browser, only since the "browser in this case is Cold >Fusion, the key needs to be installed in the JVM.) > >Here's a reference: >http://groups-beta.google.com/group/macromedia.coldfusion.component_developm >ent/browse_thread/thread/1f44ebc4b830e50a/f1b338a3de949825?q=cfinvok > >We've installed the certificate (a PFX file) to the cacerts keystore in >the CFusionMX7 folder, but still, for the life of us, cannot get this >blasted web service to connect. Instead, all we continue to get is the >following error message: > >--------------------------- >Could not generate stub objects for web service invocation. >Name: https://xxxxx/CompanyDetailsService.svc?wsdl. WSDL: >https://xxxxx/CompanyDetailsService.svc?wsdl. >javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated It is >recommended that you use a web browser to retrieve and examine the >requested WSDL document for correctness. If the requested WSDL document >can't be retrieved or it is dynamically generated, it is likely that the >target web service has programming errors. > >The error occurred in xxxxx\companyfulldetail.cfm: line 78 > >76 : returnvariable="variables.ReturnVar"> >77 : <CFINVOKEARGUMENT name="companyNumber" value="xxxxx"/> >78 : <CFINVOKEARGUMENT name="clientBillingReference" value="xxxxx"/> >79 : </CFINVOKE> >80 : <cfoutput>#GetHttpRequestData#</cfoutput> > >Please try the following: > > * Check the ColdFusion documentation to verify that you are using >the correct syntax. > * Search the Knowledge Base to find a solution to your problem. > >Browser Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.8) >Gecko/20050511 >Remote Address 66.29.152.47 >Referrer >Date/Time 08-Jun-05 11:18 AM >Stack Trace >at >cfcompanyfulldetail2ecfm989091562.runPage(xxxxx\companyfulldetail.cfm:78) >at cfcompanyfulldetail2ecfm989091562.runPage(xxxxx\companyfulldetail.cfm:78) > >javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated > at >com.sun.net.ssl.internal.ssl.SSLSessionImpl.getPeerCertificateChain(Unknown >Source) > at HTTPClient.HTTPConnection.sendRequest(HTTPConnection.java:2949) >--------------------------- > >So... my question is simply this: > >Has anyone been able to successfully use PayPal's web service with CFMX? >If so, how did you do it? This web service is not PayPal's web service, >but the process is almost identical. If we could see how someone got >PayPal's web service to work, then we could almost certainly get this >web service to work. > >Thank you in advance for any help you can offer. > >-- >Warm regards, >Jordan Michaels >Vivio Technologies >http://www.viviotech.net/ >[EMAIL PROTECTED] > > > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Logware (www.logware.us): a new and convenient web-based time tracking application. Start tracking and documenting hours spent on a project or with a client with Logware today. Try it for free with a 15 day trial account. http://www.houseoffusion.com/banners/view.cfm?bannerid=67 Message: http://www.houseoffusion.com/lists.cfm/link=i:4:208994 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
