将 First Data 证书导入 ColdFusion [英] Importing First Data certificate into ColdFusion

问题描述

我尝试使用 keytool 将证书从 First Data 导入到我的 ColdFusion 9 设置中:

I've tried to import the certificate from First Data into my ColdFusion 9 setup using the keytool as so:

keytool -importcert -keystore MYCF9Dir
untimejrelibsecuritycacerts -trustcacerts -alias firstdata -file FirstData.pem

导入似乎有效，但是当我通过任何 ColdFusion 函数或标记访问 WSDL 时，它会引发I/O 异常:收到致命警报:handshake_failure".这告诉我它无法使用它拥有的证书访问该站点，或者找不到它.

The import seems to work, however when I access the WSDL via any ColdFusion function or tag it throws a "I/O Exception: Received fatal alert: handshake_failure". Which tells me it can't access the site with the certificates that it has, or can't find it.

那么，我是否正确导入了证书?如果我是，我还能如何使用 ColdFusion 访问此 WSDL?

So, am I importing the certificate correctly? And if I am, how else can I access this WSDL with ColdFusion?

推荐答案

我有一个类似的问题，以防万一有人面临同样的问题，这就是我解决我的问题的方法.我有一个 .pem 文件，这表明它已成功导入到 ColdFusion 中的 Cacert 密钥库中，但我试图访问的远程 API(服务器)由于某些原因无法识别证书.因此，我首先使用 OpenSSL 将 .pem 证书转换为 PKCS12 格式文件 - 此链接有帮助:http://cc.in2p3.fr/docenligne/84/en#0.4(在底部).然后我使用了 CFHTTP CF 标签，如下所示:

I had a similar issue and just in case someone is facing the same issue, this is how I solved mine. I had a .pem file and this was showing it has imported successfully in the Cacert keystore within ColdFusion but the remote API(server) I was trying to hit was not recognising the certificate for some reasons. So I first of all converted the .pem certificate into a PKCS12 format file using OpenSSL - this link helped:http://cc.in2p3.fr/docenligne/84/en#0.4 (at the bottom). I then used the CFHTTP CF tag like below:

        <cfhttp
        url="https://urlToAPI"
        method="POST"
        clientCert="path to the file (.p12)"
        clientCertPassword="password"
        result="result">             

这是为我做的.我希望它可以帮助某人.

This did it for me. I hope it helps someone.

这篇关于将 First Data 证书导入 ColdFusion的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！