Of course, it gets a little confusing when discussing this. The "client" request does take place from the CFML server. In case it's helpful, I'll note that client certs for CFHTTP have been added as of some point in the recent past. Here's a comment out of my help in HomeSite+:
"To use HTTPS with the cfhttp tag, you might need to manually import the certificate for each web server into the keystore for the JRE that ColdFusion uses. This procedure should not be necessary if the certificate is signed (issued) by an authority that the JSSE (Java Secure Sockets Extension) recognizes (for example, Verisign); that is, if the signing authority is in the cacerts already. However, you might need to use the procedure if you are issuing SSL (secure sockets layer) certificates yourself." The above and more are in the CFML reference at livedocs.macromedia.com (and yes, that's not yet available as an adobe property, curiously): http://livedocs.macromedia.com/coldfusion/7/htmldocs/wwhelp/wwhimpl/common/h tml/wwhelp.htm?context=ColdFusion_Documentation&file=00000272.htm If you're still at 6.1 doc, see the comments below the text of the help for CFHTTP: http://livedocs.macromedia.com/coldfusion/6.1/htmldocs/tags-p58.htm /charlie -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dean H. Saxe Sent: Monday, July 03, 2006 11:54 AM To: discussion@acfug.org Subject: Re: [ACFUG Discuss] CFHTTP and Certificates? FWIW, if its client certs, I don't believe its supported. However, you can write the code in Java and wrap it in CF if needed. Just make sure the certs are stored securely, the keystore should require a manually entered password on boot in order to retrieve the certs. -dhs Dean H. Saxe, CISSP, CEH [EMAIL PROTECTED] "I have always strenuously supported the right of every man to his own opinion, however different that opinion might be to mine. He who denies another this right makes a slave of himself to his present opinion, because he precludes himself the right of changing it." -- Thomas Paine, 1783 Find out about my Hike for Discovery at www.fullfrontalnerdity.com/hfd On Jul 3, 2006, at 11:40 AM, Todd Hartle wrote: > Anyone useed CFHTTP with certificates before that might be able to > give me some hints? > > > > > ------------------------------------------------------------- > To unsubscribe from this list, manage your profile @ http:// > www.acfug.org?fa=login.edituserform > > For more info, see http://www.acfug.org/mailinglists Archive @ > http://www.mail-archive.com/discussion%40acfug.org/ > List hosted by http://www.fusionlink.com > ------------------------------------------------------------- > > > ------------------------------------------------------------- To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com ------------------------------------------------------------- ------------------------------------------------------------- To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -------------------------------------------------------------
