Adobe 38043740 - ColdFusion Standard - Mac Development Manual page 692

DEVELOPING COLDFUSION 9 APPLICATIONS
Flex and AIR Integration in ColdFusion
<destination id="cfcontact">
<adapter ref="coldfusion-dao" />
<channels>
<channel ref="cf-dataservice-rtmp" />
</channels>
<properties>
<source>samples.contact.ContactAssembler</source>
<scope>application</scope>
<remote-username>wilsont</remote-username>
<remote-password>password</remote-password>
...
/properties>
</destination>
Enabling SSL
You encrypt communication between ColdFusion and Flex by enabling Secure Sockets Layer (SSL). Enabling SSL only
makes sense if you are running LiveCycle Data Services ES remotely. To use SSL, create a keystore file. The keystore is
a self-signed certificate. (You do not require a certificate signed by a Certificate Authority, although if you do use one,
you do not have to configure Flex as indicated in the following steps.) The information in the keystore is encrypted
and can be accessed only with the password that you specify. To create the keystore, you use the Java keytool utility,
which is included in your Java Runtime Environment (JRE).
To enable SSL, you do the following:
1 Create the keystore
Configure Flex
2
Enable SSL in the ColdFusion Administrator
3
Create the keystore
Generate the SSL server (ColdFusion) keystore file by using the keytool utility, with a command like the following:
keytool -genkey -v -alias FlexAssembler -dname "cn=FlexAssembler" -keystore cf.keystore -
keypass mypassword -storepass mypassword
The following table describes the parameters of the keytool utility that you use:
Parameter Description
The name of the keystore entry. You can use any name as long as you are consistent when referring to it.
-alias
-dname The Distinguished Name, which contains the Common Name (cn) of the server.
The location of the keystore file.
-keystore
-keypass The password for your private key.
The password for the keystore. The encrypted storepass is stored in ColdFusion configuration files.
-storepass
-rfc Generates the certificate in the printable encoding format.
The name of the keystore file.
-file
-v Generates detailed certificate information.
Next, you place the certificate that you created in the file that the JVM uses to decide what certificates to trust. The file
in which you place the certificate (usually named cacerts), is located in the JRE, under the lib/security folder.
Last updated 1/20/2012
687