HTTP authentication

For Http authentication,you can read the following article.It will show you how to implement http basic authentication in coldfusion application.

http://coldfusion.sys-con.com/read/230503_1.htm

You can follow the steps which is given below to implement SSL certificate for https:

Step 1.

Visit www.verisign.com and click on Try Free SSL Trail. Once here, enter the required details and move on till you see an enrollment form.

Step 2.

In the enrollment form you shall be asked to enter the CSR (Certificate Signing Request) of the server.

Follow the steps below to generate a CSR

1. Under Administrative Tools, open Internet Services Manager.

2. Open the Properties window by right-clicking on the name of the Web site you wish to secure.

3. Click the Directory Security tab.

4. Click Server Certificate in the Secure communications section. If you have not used this option before the Edit button will not be active.

5. Select Create a new certificate

6. Select Prepare the request now, but send it later. VeriSign only accepts CSR’s through the enrollment process forms. We do not accept CSR's via email.

7. Complete the information requested by the IIS Certificate Wizard to create a private key that is stored locally on your server and a public key (the Certificate Signing Request) that you will use during the enrollment process. You have now created a public/private key pair.

8. Click Finish to exit the IIS Certificate Wizard. A CSR file has been generated.

9. Go back to the Enrollment form.

10. To copy and paste the information into the enrollment form, open the file in Notepad

11. Upon submitting the form successfully, you shall be acknowledged about the same and an order number will be displayed to you.

12. Now wait for the Trail SSL Certificate to reach you by email (this normally takes less than a minute).

Step 2.

Upon receiving the SSL Certificate through email, copy the same and save in into a file with “.cer” extension. (Remember the location where you have save it)

Note : The Certificate that you received now strictly corresponds the CSR that you sent. In the event of the CSR changing in the meantime, you would not be able to proceed further, and you may have the enroll once again with the changed CSR. Also, Verisign expects a different CSR everytime you enroll. This can be achieved by giving a different value for the Department field while creating the CSR (For eg. If you had given a value “Microsoft Dept” earlier, change it to “Microsoft Dept1” this time. This change is sufficient to generate a different CSR)

Step 3.

“This Root CA Certificate is used during the testing phase of the Trial VeriSign Secure Site SSL Certificate. This will need to be installed into each browser that will be used to test the SSL Certificate”

Follow the steps below to install the certificate into a browser

1. Open a Microsoft IE Browser.

2. Go to Tools > Internet Options > Content > Certificates

3. Click Import. A certificate manager Import Wizard will appear. Click Next.

4. Browse to the location of the recently stored root (done in step 2). Select ALL files for file type.

5. Select the certificate and click Open.

6. Click Next.

7. Select “Automatically select the certificate store based on the type of the certificate”. Click Ok.

8. Click Next then Finish.

9. When prompted and asked if you wish to add the following certificate to the root store, click Yes.

Step 4.

Installing the SSL Certificate

Follow the steps below to install the SSL Certificate

1. Open the Internet Services Manager (IIS). Click Start > All Programs > Administrative Tools > Internet Information Services (IIS) Manger.

2. Under Web Sites, right-click your web site and select Properties.

3. Click the Directory Security tab.

4. Under Secure Communications, click Server Certificate.

5. The Web Site Certificate Wizard will open, click Next.

6. Choose Process the Pending Request and Install the Certificate, then click Next.
Important: The pending request must match the response file. If you deleted the pending request in error you must generate a new CSR and replace this certificate.

7. Select the location of the certificate response file, and then click Next.

8. Read the summary screen to be sure that you are processing the correct certificate and then click Next.
You see a confirmation screen.

9. After you read this information, click Next.

Stop and start your Web server prior to any testing. Be sure to assign your site an SSL port (443 by default). If you do not specify an IP address when installing your SSL Certificate, the same ID will be used for all virtual servers created on the system. If you are hosting multiple sites on a single server, you can specify that the ID only be used for a particular server IP address.

2 Replies

Know the answer? Post it — somebody with the same question will find it here.

George George18y ago
Thanks Niradhip,

I am not developing CodeFusion project, and I am just developing an Http client using C#. Any ideas for samples like this?

regards,

George
Niradhip Chakraborty18y ago
For Http authentication,you can read the following article.It will show you how to implement http basic authentication in coldfusion application.

http://coldfusion.sys-con.com/read/230503_1.htm

You can follow the steps which is given below to implement SSL certificate for https:

Step 1.

Visit www.verisign.com and click on Try Free SSL Trail. Once here, enter the required details and move on till you see an enrollment form.

Step 2.

In the enrollment form you shall be asked to enter the CSR (Certificate Signing Request) of the server.

Follow the steps below to generate a CSR

1.             Under Administrative Tools, open Internet Services Manager.

2.             Open the Properties window by right-clicking on the name of the Web site you wish to secure.

3.             Click the Directory Security tab.

4.             Click Server Certificate in the Secure communications section. If you have not used this option before the Edit button will not be active.

5.            Select Create a new certificate

6.            Select Prepare the request now, but send it later. VeriSign only accepts CSR’s through the enrollment process forms. We do not accept CSR's via email.

7.             Complete the information requested by the IIS Certificate Wizard to create a private key that is stored locally on your server and a public key (the Certificate Signing Request) that you will use during the enrollment process. You have now created a public/private key pair.

8.             Click Finish to exit the IIS Certificate Wizard. A CSR file has been generated.

9.             Go back to the Enrollment form.

10.        To copy and paste the information into the enrollment form, open the file in Notepad

11.        Upon submitting the form successfully, you shall be acknowledged about the same and an order number will be displayed to you.

12.         Now wait for the Trail SSL Certificate to reach you by email (this normally takes less than a minute).

Step 2.

Upon receiving the SSL Certificate through email, copy the same and save in into a file with “.cer” extension. (Remember the location where you have save it)

Note : The Certificate that you received now strictly corresponds the CSR that you sent. In the event of the CSR changing in the meantime, you would not be able to proceed further, and you may have the enroll once again with the changed CSR. Also, Verisign expects a different CSR everytime you enroll. This can be achieved by giving a different value for the Department field while creating the CSR (For eg. If you had given a value “Microsoft Dept” earlier, change it to “Microsoft Dept1” this time. This change is sufficient to generate a different CSR)

Step 3.

“This Root CA Certificate is used during the testing phase of the Trial VeriSign Secure Site SSL Certificate. This will need to be installed into each browser that will be used to test the SSL Certificate”

Follow the steps below to install the certificate into a browser

1.             Open a Microsoft IE Browser.

2.             Go to Tools > Internet Options > Content > Certificates

3.             Click Import. A certificate manager Import Wizard will appear. Click Next.

4.             Browse to the location of the recently stored root (done in step 2). Select ALL files for file type.

5.             Select the certificate and click Open.

6.             Click Next.

7.             Select “Automatically select the certificate store based on the type of the certificate”. Click Ok.

8.             Click Next then Finish.

9.             When prompted and asked if you wish to add the following certificate to the root store, click Yes.

Step 4.

Installing the SSL Certificate

Follow the steps below to install the SSL Certificate

1.             Open the Internet Services Manager (IIS). Click Start > All Programs > Administrative Tools > Internet Information Services (IIS) Manger.

2.             Under Web Sites, right-click your web site and select Properties.

3.             Click the Directory Security tab.

4.             Under Secure Communications, click Server Certificate.

5.             The Web Site Certificate Wizard will open, click Next.

6.             Choose Process the Pending Request and Install the Certificate, then click Next.
Important: The pending request must match the response file. If you deleted the pending request in error you must generate a new CSR and replace this certificate.

7.             Select the location of the certificate response file, and then click Next.

8.             Read the summary screen to be sure that you are processing the correct certificate and then click Next.
You see a confirmation screen.

9.             After you read this information, click Next.

Stop and start your Web server prior to any testing. Be sure to assign your site an SSL port (443 by default). If you do not specify an IP address when installing your SSL Certificate, the same ID will be used for all virtual servers created on the system. If you are hosting multiple sites on a single server, you can specify that the ID only be used for a particular server IP address.