If I remember correctly, the JVM keeps it's own cache of certificates. I'd search for the commands to remove a cert from the built-in java keystore. It's pretty simple using the keytool app but you might need to restart CF to make it take.
-Jake On Thu, Jan 16, 2014 at 2:05 PM, Jason Durham <jqdur...@gmail.com> wrote: > > A payment processor changed one of their certificates which is causing CF > to throw an exception when we try to connect via CFHTTP using SSL. > > The error message is: *I/O Exception: Name in certificate > `internetsecure.com <http://internetsecure.com>' does not match host name > `test.internetsecure.com <http://test.internetsecure.com>'* > > You can view the certificate by navigating to > https://test.internetsecure.com. My browser doesn't seem to have problems > with this cert, and I see a SAN that indicates this certificate should be > valid for test.internetsecure.com. > > I've tried importing this cert into the keystore but received the same > error. > > Can anyone provide assistance as to why CF 8.0.1 isn't happy with this > certificate? > > Jason Durham > > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357455 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
