Since I haven't had to do this in a million years I figured I'd hit the
group to see if someone can rattle off the steps to do this quicker than me
refreshing my memory via google.

I have two Linux VPSes I need to make CFHTTP calls to over SSL. The servers
I'm calling are set up fine, with SSL verified working.

When I try to CFHTTP to them with an https URL, I get this error:
Connect Exception: Failed to verify hostname due to IOException: Connection
has been shutdown: javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target

If memory serves that means I need to import the SSL certificates into the
Java keystore, specifically under the JDK/JRE that Tomcat is using. I took
a stab at that but no dice so I'm assuming I did it wrong.

Also if I'm only making outbound SSL calls I do *not* need to enable SSL in
Tomcat, right?

Any help with my very rusty recollection on all this would be greatly
appreciated!

Thanks,
Matt

-- 
Matthew Woodward
[email protected]
http://blog.mattwoodward.com
identi.ca / Twitter: @mpwoodward

Please do not send me proprietary file formats such as Word, PowerPoint,
etc. as attachments.
http://www.gnu.org/philosophy/no-word-attachments.html

-- 
online documentation: http://openbd.org/manual/
 http://groups.google.com/group/openbd?hl=en

Reply via email to