RE: https connection issues using cfhttp
Ok thanks John. I did search before posting but didn't see that. -Original Message- From: John M Bliss [mailto:bliss.j...@gmail.com] Sent: 17 January 2013 15:48 To: cf-talk Subject: Re: https connection issues using cfhttp +1 what Jeff said. Dealt with this same issue here: http://www.houseoffusion.com/groups/cf-talk/thread.cfm/threadid:64157 On Thu, Jan 17, 2013 at 9:37 AM, Jeff Garza wrote: > > You are going to have to edit your hosts file and create a pointer for > "hub" that directs it to "187.141.14.122". Then when you call the > webservice, you'll use "https://hub/..."; to access it. I've been > through this before as well and this should do it after you've > imported the certificate from the site. > > -- > Jeff > > > Original Message > > From: "Ian Chapman" > > Sent: Thursday, January 17, 2013 8:13 AM > > To: "cf-talk" > > Subject: https connection issues using cfhttp > > > > Hi Guys, > > > > I've been wrestling with a problem calling a SOAP Web Service using > cfhttp. The endpoint is an https URL to a server IP, not a host name. > > > > We are running MX7. > > > > Initially when I tried connecting I got the usual error response > > from an > untrusted authority source: > > > > "ErrorDetail: I/O Exception: peer not authenticated" > > > > Usually when this happens we download the certificate (DER format > > saved > as a .cer file) from the site using a browser and add it to the Java > SDK truststore using the "keytool -import " command in the > jrun/jre/lib folder. > > > > This all went ok and I can see the certificate when I list them > > using the > "keytool - list..." command. > > > > This changed the error response to: > > > > "ErrorDetail: I/O Exception: Name in certificate `hub' does not > > match > host name `187.141.14.122'" > > > > My first issue is very common and usually easy to resolve, but the > > latter > has caused a lot of head banging. > > > > What I can tell is that it seems to be self signed certificate and > > feel > this might be part of the problem. > > > > Any ideas? > > > > Regards, > > > > Ian. > > > > > > > > > > ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:353957 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: https connection issues using cfhttp
Hi Jeff, I did see something like that suggested somewhere else but think I had misunderstood "what" I should point to the IP. Now you've said it like that it makes complete sense. That works a treat, connecting ok. Why didn't I post here earlier. :) Really appreciate your help. Regards, Ian. -Original Message- From: Jeff Garza [mailto:j...@garzasixpack.com] Sent: 17 January 2013 15:37 To: cf-talk Subject: re: https connection issues using cfhttp You are going to have to edit your hosts file and create a pointer for "hub" that directs it to "187.141.14.122". Then when you call the webservice, you'll use "https://hub/..."; to access it. I've been through this before as well and this should do it after you've imported the certificate from the site. -- Jeff Original Message > From: "Ian Chapman" > Sent: Thursday, January 17, 2013 8:13 AM > To: "cf-talk" > Subject: https connection issues using cfhttp > > Hi Guys, > > I've been wrestling with a problem calling a SOAP Web Service using cfhttp. The endpoint is an https URL to a server IP, not a host name. > > We are running MX7. > > Initially when I tried connecting I got the usual error response from > an untrusted authority source: > > "ErrorDetail: I/O Exception: peer not authenticated" > > Usually when this happens we download the certificate (DER format > saved as a .cer file) from the site using a browser and add it to the Java SDK truststore using the "keytool -import " command in the jrun/jre/lib folder. > > This all went ok and I can see the certificate when I list them using > the "keytool - list..." command. > > This changed the error response to: > > "ErrorDetail: I/O Exception: Name in certificate `hub' does not match host name `187.141.14.122'" > > My first issue is very common and usually easy to resolve, but the > latter has caused a lot of head banging. > > What I can tell is that it seems to be self signed certificate and > feel this might be part of the problem. > > Any ideas? > > Regards, > > Ian. > > > > ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:353956 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: https connection issues using cfhttp
that is your problem then, the cert does not match the hostname. so here are the options 1. create a hosts entry as others have said 2. get the person running the web service to assign a domain or sub-domain to it and create a cert for that domain. On Thu, Jan 17, 2013 at 3:46 PM, Ian Chapman wrote: > > Hi Russ, > > When saving the file from Firefox it gets saved by default as "HUB.cer". > And > that's what I imported into the keystore. I did as a test tried saving as > "187.141.14.122.cer" but the filename is obviously arbitrary so didn't > help. > > When I look at the certificate in Windows it says "issued to HUB" and > issued > by "HUB". But I'm not sure how you'd create a certificate issued from > "187.141.14.122". > > This is the end point so you can see the certificate in question if it > helps. > > https://187.141.14.122:443/asg/services/SubscribeProductService > > > Regards, > > Ian. > > > -Original Message- > From: Russ Michaels [mailto:r...@michaels.me.uk] > Sent: 17 January 2013 15:30 > To: cf-talk > Subject: Re: https connection issues using cfhttp > > > Is the ssl cert actually for the ip address, the error says it is for "hub" > > Regards > Russ Michaels > www.michaels.me.uk > www.cfmldeveloper.com - Free CFML hosting for developers www.cfsearch.com- > CF search engine On Jan 17, 2013 3:12 PM, "Ian Chapman" > > wrote: > > > > > Hi Guys, > > > > I've been wrestling with a problem calling a SOAP Web Service using > > cfhttp. The endpoint is an https URL to a server IP, not a host name. > > > > We are running MX7. > > > > Initially when I tried connecting I got the usual error response from > > an untrusted authority source: > > > > "ErrorDetail: I/O Exception: peer not authenticated" > > > > Usually when this happens we download the certificate (DER format > > saved as a .cer file) from the site using a browser and add it to the > > Java SDK truststore using the "keytool -import " command in the > > jrun/jre/lib folder. > > > > This all went ok and I can see the certificate when I list them using > > the "keytool - list..." command. > > > > This changed the error response to: > > > > "ErrorDetail: I/O Exception: Name in certificate `hub' does not match > > host name `187.141.14.122'" > > > > My first issue is very common and usually easy to resolve, but the > > latter has caused a lot of head banging. > > > > What I can tell is that it seems to be self signed certificate and > > feel this might be part of the problem. > > > > Any ideas? > > > > Regards, > > > > Ian. > > > > > > > > > > > > ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:353955 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: https connection issues using cfhttp
+1 what Jeff said. Dealt with this same issue here: http://www.houseoffusion.com/groups/cf-talk/thread.cfm/threadid:64157 On Thu, Jan 17, 2013 at 9:37 AM, Jeff Garza wrote: > > You are going to have to edit your hosts file and create a pointer for > "hub" that directs it to "187.141.14.122". Then when you call the > webservice, you'll use "https://hub/..."; to access it. I've been through > this before as well and this should do it after you've imported the > certificate from the site. > > -- > Jeff > > > Original Message > > From: "Ian Chapman" > > Sent: Thursday, January 17, 2013 8:13 AM > > To: "cf-talk" > > Subject: https connection issues using cfhttp > > > > Hi Guys, > > > > I've been wrestling with a problem calling a SOAP Web Service using > cfhttp. The endpoint is an https URL to a server IP, not a host name. > > > > We are running MX7. > > > > Initially when I tried connecting I got the usual error response from an > untrusted authority source: > > > > "ErrorDetail: I/O Exception: peer not authenticated" > > > > Usually when this happens we download the certificate (DER format saved > as a .cer file) from the site using a browser and add it to the Java SDK > truststore using the "keytool -import " command in the jrun/jre/lib > folder. > > > > This all went ok and I can see the certificate when I list them using the > "keytool - list..." command. > > > > This changed the error response to: > > > > "ErrorDetail: I/O Exception: Name in certificate `hub' does not match > host name `187.141.14.122'" > > > > My first issue is very common and usually easy to resolve, but the latter > has caused a lot of head banging. > > > > What I can tell is that it seems to be self signed certificate and feel > this might be part of the problem. > > > > Any ideas? > > > > Regards, > > > > Ian. > > > > > > > > > > ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:353954 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: https connection issues using cfhttp
Hi Russ, When saving the file from Firefox it gets saved by default as "HUB.cer". And that's what I imported into the keystore. I did as a test tried saving as "187.141.14.122.cer" but the filename is obviously arbitrary so didn't help. When I look at the certificate in Windows it says "issued to HUB" and issued by "HUB". But I'm not sure how you'd create a certificate issued from "187.141.14.122". This is the end point so you can see the certificate in question if it helps. https://187.141.14.122:443/asg/services/SubscribeProductService Regards, Ian. -Original Message- From: Russ Michaels [mailto:r...@michaels.me.uk] Sent: 17 January 2013 15:30 To: cf-talk Subject: Re: https connection issues using cfhttp Is the ssl cert actually for the ip address, the error says it is for "hub" Regards Russ Michaels www.michaels.me.uk www.cfmldeveloper.com - Free CFML hosting for developers www.cfsearch.com - CF search engine On Jan 17, 2013 3:12 PM, "Ian Chapman" wrote: > > Hi Guys, > > I've been wrestling with a problem calling a SOAP Web Service using > cfhttp. The endpoint is an https URL to a server IP, not a host name. > > We are running MX7. > > Initially when I tried connecting I got the usual error response from > an untrusted authority source: > > "ErrorDetail: I/O Exception: peer not authenticated" > > Usually when this happens we download the certificate (DER format > saved as a .cer file) from the site using a browser and add it to the > Java SDK truststore using the "keytool -import " command in the > jrun/jre/lib folder. > > This all went ok and I can see the certificate when I list them using > the "keytool - list..." command. > > This changed the error response to: > > "ErrorDetail: I/O Exception: Name in certificate `hub' does not match > host name `187.141.14.122'" > > My first issue is very common and usually easy to resolve, but the > latter has caused a lot of head banging. > > What I can tell is that it seems to be self signed certificate and > feel this might be part of the problem. > > Any ideas? > > Regards, > > Ian. > > > > ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:353953 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
re: https connection issues using cfhttp
You are going to have to edit your hosts file and create a pointer for "hub" that directs it to "187.141.14.122". Then when you call the webservice, you'll use "https://hub/..."; to access it. I've been through this before as well and this should do it after you've imported the certificate from the site. -- Jeff Original Message > From: "Ian Chapman" > Sent: Thursday, January 17, 2013 8:13 AM > To: "cf-talk" > Subject: https connection issues using cfhttp > > Hi Guys, > > I've been wrestling with a problem calling a SOAP Web Service using cfhttp. The endpoint is an https URL to a server IP, not a host name. > > We are running MX7. > > Initially when I tried connecting I got the usual error response from an untrusted authority source: > > "ErrorDetail: I/O Exception: peer not authenticated" > > Usually when this happens we download the certificate (DER format saved as a .cer file) from the site using a browser and add it to the Java SDK truststore using the "keytool -import " command in the jrun/jre/lib folder. > > This all went ok and I can see the certificate when I list them using the "keytool - list..." command. > > This changed the error response to: > > "ErrorDetail: I/O Exception: Name in certificate `hub' does not match host name `187.141.14.122'" > > My first issue is very common and usually easy to resolve, but the latter has caused a lot of head banging. > > What I can tell is that it seems to be self signed certificate and feel this might be part of the problem. > > Any ideas? > > Regards, > > Ian. > > > > ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:353952 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: https connection issues using cfhttp
Is the ssl cert actually for the ip address, the error says it is for "hub" Regards Russ Michaels www.michaels.me.uk www.cfmldeveloper.com - Free CFML hosting for developers www.cfsearch.com - CF search engine On Jan 17, 2013 3:12 PM, "Ian Chapman" wrote: > > Hi Guys, > > I've been wrestling with a problem calling a SOAP Web Service using > cfhttp. The endpoint is an https URL to a server IP, not a host name. > > We are running MX7. > > Initially when I tried connecting I got the usual error response from an > untrusted authority source: > > "ErrorDetail: I/O Exception: peer not authenticated" > > Usually when this happens we download the certificate (DER format saved as > a .cer file) from the site using a browser and add it to the Java SDK > truststore using the "keytool -import " command in the jrun/jre/lib > folder. > > This all went ok and I can see the certificate when I list them using the > "keytool - list..." command. > > This changed the error response to: > > "ErrorDetail: I/O Exception: Name in certificate `hub' does not match host > name `187.141.14.122'" > > My first issue is very common and usually easy to resolve, but the latter > has caused a lot of head banging. > > What I can tell is that it seems to be self signed certificate and feel > this might be part of the problem. > > Any ideas? > > Regards, > > Ian. > > > > ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:353951 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
https connection issues using cfhttp
Hi Guys, I've been wrestling with a problem calling a SOAP Web Service using cfhttp. The endpoint is an https URL to a server IP, not a host name. We are running MX7. Initially when I tried connecting I got the usual error response from an untrusted authority source: "ErrorDetail: I/O Exception: peer not authenticated" Usually when this happens we download the certificate (DER format saved as a .cer file) from the site using a browser and add it to the Java SDK truststore using the "keytool -import " command in the jrun/jre/lib folder. This all went ok and I can see the certificate when I list them using the "keytool - list..." command. This changed the error response to: "ErrorDetail: I/O Exception: Name in certificate `hub' does not match host name `187.141.14.122'" My first issue is very common and usually easy to resolve, but the latter has caused a lot of head banging. What I can tell is that it seems to be self signed certificate and feel this might be part of the problem. Any ideas? Regards, Ian. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:353950 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
