tracker issue : CF-3552414

select a category, or use search below
(searches all categories and all time range)

CFHTTP Basic Authentication fails when using JRE 1.7 in CF 9

| View in Tracker

Status/Resolution/Reason: Closed/Withdrawn/

Reporter/Name(from Bugbase): Dan Jones / Dan Jones (DanJonez)

Created: 04/30/2013

Components: Net Protocols, HTTP

Versions: 9.0.1

Failure Type: Non Functioning

Found In Build/Fixed In Build: 9.0.1 /

Priority/Frequency: Major / Some users will encounter

Locale/System: English / Windows 7

Vote Count: 0

Problem Description:When I upgraded to JRE 1.7 basic authentication stopped working in the CFHTTP tag. 

Steps to Reproduce: Use JRE 1.7 and attempt to use basic authentication with a CFHTTP tag.

Actual Result: Authentication fails.

Expected Result: Authentication should work.

Any Workarounds:Downgrade to JRE 1.6

----------------------------- Additional Watson Details -----------------------------

Watson Bug ID:	3552414

Deployment Phase:	Release Candidate

External Customer Info:
External Company:  
External Customer Name: DanJonez
External Customer Email:  
External Test Config: Server Product 	ColdFusion

Version 	9,0,2,282541  

Edition 	Developer  

Operating System 	Windows 7  

OS Version 	6.1  

Update Level 	hf902-00004.jar  

Adobe Driver Version 	4.1 (Build 0001)



Unable to repro the issue , can you please send the exception /stack trace you are getting.
Comment by Asha K.
15537 | May 09, 2013 05:38:39 AM GMT
After further testing I was able to pin the problem on the SSL cert of the site ( I was accessing with CFHTTP. The jre/lib/secirty/cacerts file from the default CF 9 install works fine with the site but the one from JRE 1.7 does not. I was able to get the CFHTTP call to work by using the old cacert or by adding the cert with the keytool utility. So the good news is that the problem is not with Coldfusion it's with the cacerts from java 1.7.
Comment by External U.
15538 | May 15, 2013 04:58:51 PM GMT
Not able to repro this case. Please provide us code snippet to repro the issue, stack trace and cumulative hotfix version if any was applied to ColdFusion 9. With ColdFusion 9.0.2 Cumulative Hot fix 1, ColdFusion 9.0.2 was certified on JDK 1.7 Update 15.
Comment by Akhila K.
15539 | December 22, 2013 02:46:41 AM GMT
This bug is inactive for a while now, hence closing the same. Incase if user is still facing the issue and wants it to be fixed, please let us know and provide required information. We will look into it.Thanks
Comment by Akhila K.
15540 | December 03, 2014 02:24:27 AM GMT