68
Chapter 4: Web Server Management
5
The JavaScript validation used by the
cfform
tag references the CFIDE/scripts/cfform.js file.
However in a multi-homed environment, each virtual website may not contain this directory
and file. Either copy this file and store it in your virtual website’s web root in a CFIDE/scripts
directory or modify all
cfform
tags to use the
scriptsrc
attribute to specify the location of the
cfform.js file.
6
Ensure that Cache Web Server Paths is disabled in the Caching page of the ColdFusion MX
Administrator (in the J2EE configuration on JRun, set the
cacheRealPath
attribute to false for
the ProxyService in the jrun.xml file).
7
Test each virtual server to ensure that CFM pages are served correctly.
SSL
The web server connectors supports the use of secure sockets layer (SSL) between the web server
and a ColdFusion server. This is typically not necessary, since the web server is behind a firewall in
most production configurations. However, for maximum security, you can use SSL with the web
server connector.
To enable SSL for the web server connector:
1
Generate a keystore using the following Java
keytool
command. For example:
keytool -genkey -dname "cn=<server name or IP address>, ou=CFEngineering,
o=Macromedia, L=Newton, ST=MA, C=US" -keyalg rsa -keystore <keystore name>
2
When prompted, enter appropriate passwords that are six or more characters in length.
3
Rerun
keytool
to add certificates to the keystore.
Note:
In a production environment you would obtain a signed certificate from a certificate
authority.
4
Open the
cf_root
/runtime/servers/default/SERVER-INF/jrun.xml file in a text editor and set
the ProxyService
keyStore
,
keyStorePassword
, and
trustStore
(optional) attributes to
appropriate values. The
keyStore
and
trustStore
attributes should be the paths and filenames
of the keystore and truststore files.
5
Download and build OpenSSL. The OpenSSL distribution is available at http://openssl.org in
a tar.gz file. You must download the distribution and build it for your operating system based
on the included installation instructions. Place the compiled OpenSSL code in a directory that
is in your system path, such as
cf_root
/runtime/servers/lib.
6
Open the web server connector configuration file (for example, jrun.ini, httpd.conf, or
magnus.conf) and set the
ssl
property to true.
Note:
If using Apache virtual hosts, the
ssl
property must be outside of any
VirtualHost
directives.
To use SSL with the built-in web server, enable the SSLService in the
cf_root
/runtime/servers/
default/SERVER-INF/jrun.xml file and set the
keyStore
,
keyStorePassword
, and
trustStore
attributes to appropriate values.
Summary of Contents for COLDFUSION MX 61 - CONFIGURING AND ADMINISTERING COLDFUSION...
Page 1: ...Configuring and Administering ColdFusion MX...
Page 8: ...8 Contents...
Page 10: ...10 Introduction...
Page 12: ......
Page 36: ...36 Chapter 2 Basic ColdFusion MX Administration...
Page 56: ...56 Chapter 3 Data Source Management...
Page 74: ...74 Chapter 5 Administering Security...
Page 84: ......
Page 132: ...132 Chapter 9 Indexing Collections with Verity Spider...
Page 142: ...142 Chapter 10 Searching Collections with K2 Server...
Page 148: ...148 Chapter 11 Searching Collections with the rcvdk Utility...