Ssl - MACROMEDIA COLDFUSION MX 61 - CONFIGURING AND ADMINISTERING COLDFUSION MX Manual

The JavaScript validation used by the
5
However in a multi-homed environment, each virtual website may not contain this directory
and file. Either copy this file and store it in your virtual website's web root in a CFIDE/scripts
directory or modify all
cfform.js file.
Ensure that Cache Web Server Paths is disabled in the Caching page of the ColdFusion MX
6
Administrator (in the J2EE configuration on JRun, set the
the ProxyService in the jrun.xml file).
Test each virtual server to ensure that CFM pages are served correctly.
7

SSL

The web server connectors supports the use of secure sockets layer (SSL) between the web server
and a ColdFusion server. This is typically not necessary, since the web server is behind a firewall in
most production configurations. However, for maximum security, you can use SSL with the web
server connector.
To enable SSL for the web server connector:
Generate a keystore using the following Java
1
keytool -genkey -dname "cn=<server name or IP address>, ou=CFEngineering,
o=Macromedia, L=Newton, ST=MA, C=US" -keyalg rsa -keystore <keystore name>
When prompted, enter appropriate passwords that are six or more characters in length.
2
Rerun
3
keytool
Note: In a production environment you would obtain a signed certificate from a certificate
authority.
Open the cf_root/runtime/servers/default/SERVER-INF/jrun.xml file in a text editor and set
4
the ProxyService
appropriate values. The
of the keystore and truststore files.
Download and build OpenSSL. The OpenSSL distribution is available at http://openssl.org in
5
a tar.gz file. You must download the distribution and build it for your operating system based
on the included installation instructions. Place the compiled OpenSSL code in a directory that
is in your system path, such as cf_root/runtime/servers/lib.
Open the web server connector configuration file (for example, jrun.ini, httpd.conf, or
6
magnus.conf) and set the
Note: If using Apache virtual hosts, the ssl property must be outside of any VirtualHost
directives.
To use SSL with the built-in web server, enable the SSLService in the cf_root/runtime/servers/
default/SERVER-INF/jrun.xml file and set the
attributes to appropriate values.
68 Chapter 4: Web Server Management
tags to use the
cfform
to add certificates to the keystore.
,
keyStore keyStorePassword
and
keyStore
property to true.
ssl
tag references the CFIDE/scripts/cfform.js file.
cfform
attribute to specify the location of the
scriptsrc
cacheRealPath
command. For example:
keytool
, and
trustStore
attributes should be the paths and filenames
trustStore
,
keyStore keyStorePassword
attribute to false for
(optional) attributes to
, and
trustStore