If you have had problems connecting CFHTTP using HTTPS then the following forum posting may help you out.
It ended up being because the server we were connecting to used certificates and the Java didn't like them. To fix it we exported the certificates from IE Certificate manager after installing them from thier website and the entie certificate chain if neccessary (root, and intermediates)...
Export each to c:\cfusion\runtime\jre\lib\security (Assuming CF is installed at this location) using the bianry x.509 format (The default for IE 6). Name them something recognisable (Site1.cer, site2.cer and site3.cer in this case)
Easy part is done.
Now, run a command line (CMD at Start-Run)
type PATH=%PATH%;C:\CFUSIONMX\RUNTIME\JRE\BIN (Assuming CF is installed at this location)
cd\
cd cfusionmx\runtime\jre\lib\security
keytool -import -noprompt -alias SITE1 -file site1.cer -keystore .\cacerts -storepass changeit (assuming you haven't changed the default java password yet)
keytool -import -noprompt -alias SITE2 -file site2.cer -keystore .\cacerts -storepass changeit
keytool -import -noprompt -alias SITE3 -file site3.cer -keystore .\cacerts -storepass changeit
exit
Now restart the CF Services or restart the server and it should work.
http://webforums.macromedia.com/coldfusion/messageview.cfm?catid=3&threadid=456004&highlight_key=y&keyword1=cfhttp&keyword2=ssl
Thank you! I've been searching for days, this fixed my problems!
Big up to you! This solved a huge problem I was having with site I was connecting to via cfhttp. Their SSL certificate was not issued by a trusted authority, so the connection was failing.
Thank you!!!!!!!!
p.s. The webforums.macromedia.com link above doesn't work anymore. Luckily, this page had all I needed.
Very helpful post.
For the record I found on my system with default install paths (Windows) the -keystore is cacerts and not .\cacerts
Also useful is listing the certs (there could be more than 100 in there) using the command
keytool -list -keystore cacerts -storepass changeit
Yep, still useful - cheers, Brandon :-)
-- Mike