7 Replies Latest reply on Feb 25, 2007 4:25 AM by sjibben

    CFHTTP does not work for HTTPS for me

    yaf23
      Hi,

      I am in the process of moving from one hosting provider to another and on the first hosting provider this works fine and still does. In fact CFHTTP works on my local development machine running CFMX. The new provider I am using is CrystalTech. I can't seem to get CFHTTP to work successfully.

      The error I get is Connection Failure. Status code unavailable. . I have tried everything I have seen on most post other than importing the certificate which I don't think I can because it is not my server.

      For Obvious reasons I can't list the actual URL here as it requires a username and passoord but the general idea can be understood.

      Can someone please provide me any help at all I have spent tons of time on this and am on last resorts right now. Also the server that I am getting the info from certificate is not expired, I just checked.

      My code is as follows:


      <cfhttp url="<AN HTTPS URL>"
      method="GET"
      timeout="60">

      <cfhttpparam type="Header" name="Accept-Encoding" value="deflate;q=0">
      <cfhttpparam type="Header" name="TE" value="deflate;q=0">

      </cfhttp>

      <cfdump var="#cfhttp#" label="CFHTTP DUMP">
        • 1. Re: CFHTTP does not work for HTTPS for me
          Level 7
          I always specify a port (443) when I use cfhttp & SSL
          HTH
          --
          Tim Carley
          www.recfusion.com
          info@NOSPAMINGrecfusion.com
          • 2. Re: CFHTTP does not work for HTTPS for me
            yaf23 Level 1
            Thanks, I tried that and it did not resolve the problem but I will leave it in there as a good practice. It is like I am stuck in the middle as the hosting folks say there is nothing wrong with thier setup and the RSS source provider is saying nothing is wrong on their end if I can get it retrieved from other servers. Again, thanks for your help, if anything else come to mind please help.
            • 3. Re: CFHTTP does not work for HTTPS for me
              Level 7
              Does this bit from the docs apply to your situation?

              <blockquote>
              To use HTTPS with the cfhttp tag, you might need to manually import the
              certificate for each web server into the keystore for the JRE that
              ColdFusion uses. This procedure should not be necessary if the certificate
              is signed (issued) by an authority that the JSSE (Java Secure Sockets
              Extension) recognizes (for example, Verisign); that is, if the signing
              authority is in the cacerts already. However, you might need to use the
              procedure if you are issuing SSL (secure sockets layer) certificates
              yourself.
              </blockquote>

              http://livedocs.adobe.com/coldfusion/7/htmldocs/00000272.htm

              --
              Adam
              • 4. Re: CFHTTP does not work for HTTPS for me
                yaf23 Level 1
                It might very well be related the problem is that the server that is having the problem is a hosting company and there is no access to di this or at least try it out. The issuer for this certificate is GlobaSign ServerSign CA. I am not sure if that is included or not.

                Thanks
                • 5. Re: CFHTTP does not work for HTTPS for me
                  yaf23 Level 1
                  In fact if I can get a small list of HTTPS RSS that doesn't not require password then I can try it out and see if it is a problem with the certs or what. If any one has some can you let me know as well.
                  • 6. CFHTTP does not work for HTTPS for me
                    yaf23 Level 1
                    I am more suspecting this might be the problem the reason is this:

                    Even though the information below is not actual RSS feeds I get a response from just one of them (Yahoo) and this could possibley be because the Certificate Issuer is I guess more known.

                    YAHOO MAIL
                    Issue Certificate: Equifax Secure Certificate Authority
                    My Status:Gets a positive response

                    <cfhttp url="https://login.yahoo.com/config/mail?.intl=us"
                    method="GET"
                    timeout="60"
                    port="443">
                    <cfhttpparam type="Header" name="Accept-Encoding" value="deflate;q=0">
                    <cfhttpparam type="Header" name="TE" value="deflate;q=0">
                    </cfhttp>
                    <cfdump var="#cfhttp#" label="CFHTTP DUMP">


                    FireFox
                    Issue Certificate: XRamp Security Services GS CA
                    My Status: Gets a negative response same as the original issue

                    <cfhttp url="https://addons.mozilla.org/feeds.php"
                    method="GET"
                    timeout="60"
                    port="443">
                    <cfhttpparam type="Header" name="Accept-Encoding" value="deflate;q=0">
                    <cfhttpparam type="Header" name="TE" value="deflate;q=0">
                    </cfhttp>
                    <cfdump var="#cfhttp#" label="CFHTTP DUMP">


                    Bank of America
                    Issue Certificate: VeriSign International Server CA - Class 3
                    My Status:Gets a positive response

                    <cfhttp url="https://www.bankofamerica.com/index.jsp"
                    method="GET"
                    timeout="60"
                    port="443">
                    <cfhttpparam type="Header" name="Accept-Encoding" value="deflate;q=0">
                    <cfhttpparam type="Header" name="TE" value="deflate;q=0">
                    </cfhttp>

                    <cfdump var="#cfhttp#" label="CFHTTP DUMP">


                    I will have a chyat with my Provider and see if they have any answers. Please continue to let me know your suggestions.
                    • 7. Re: CFHTTP does not work for HTTPS for me
                      sjibben Level 1
                      Are the servers that you are having problems with running IIS 6.x? If so you may be running into an http compression problem. The link below describes a solution that has worked for me:

                      http://www.talkingtree.com/blog/index.cfm/2004/7/28/20040729