February 6, 2007

Server to Server Certificate Presentation

Filed under: ColdFusion, Java — Phillip Holmes @ 12:25 pm

Some application service providers and payment systems (such as Global Collect) require you to present a mutually agreed upon SSL certificate to them in order to authenticate and use their services. This is certainly a one-off scenario and that is what the I.T. posts on my blog are all about.

The code below is written in Java and called as a servlet via ColdFusion (which is another API for Java). Anyway, it presents the certificate via a direct call to the path. During my research on this challenge, I also saw that you can use the Java certificate store to present the certificate. However, I could never get ColdFusion to do this. I followed recommendations by Sun documentation and other blogs but after spending days trying to figure it out, I just settled for calling the direct path to the certificate.

There are a couple advantages to the 'direct path' method (aside from the fact that it works 100% of the time). First, you could actually just make the path an argument in the function and keep the key wherever on the box. Secondly, the 'direct path' call relieves the server admininistrator of having to import the SSL key to the java certificate store for every new client or update ones that are there. This would make a shared host scenario hard to manage. This way, users can just FTP their certs up and supply the path to the servlet.

Anyway, enough rambling... here it is.. Hope it helps you.

PLAIN TEXT

CODE:

  1. /*
  2. *
  3. * Created on April 05, 2006, 10:10 AM
  4. * Author: Phillip B. Holmes
  5. */
  6.  
  7.  
  8. import java.net.*;
  9. import java.io.*;
  10.  
  11. public class ReadHttpsURL {
  12.     public static String uri;
  13.     public static String XML;
  14.    
  15.     public static void main(String args[]){
  16.        ReadHttpsURL obj = new ReadHttpsURL();
  17.        obj.readit(uri,XML);
  18.     }
  19.    
  20.       public String readit(String uri, String XML) {
  21.         try{
  22.             System.setProperty("javax.net.ssl.keyStore", "d:\\cfusion\\runtime\\jre\\lib\\security\\ssmt.pfx");
  23.             System.setProperty("javax.net.ssl.keyStorePassword", "your_certs_password");
  24.             System.setProperty("javax.net.ssl.keyStoreType", "pkcs12");
  25.             System.setProperty("java.protocol.handler.pkgs","com.sun.net.ssl.internal.www.protocol");
  26.             String message;
  27.             URL url = new URL(uri);
  28.            
  29.             URLConnection conn = url.openConnection();
  30.             conn.setDoOutput(true);
  31.             conn.setRequestProperty("Content-Type", "text/xml");
  32.             BufferedWriter out = new BufferedWriter(new OutputStreamWriter(conn.getOutputStream()));
  33.  
  34.             out.write(XML);
  35.             out.flush();
  36.  
  37.             // Get the response
  38.             BufferedReader in = new BufferedReader(new InputStreamReader(conn.getInputStream()));
  39.             String line;
  40.             StringBuffer sb = new StringBuffer();
  41.             while ((line = in.readLine()) != null) {
  42.                sb.append(line);
  43.             }
  44.             message = sb.toString();
  45.  
  46.             in.close();
  47.             out.close();
  48.            
  49.             return message;
  50.  
  51.         } catch (Exception e) {
  52.               String message = "exception: " + e.getMessage();
  53.               return message;
  54.         }
  55.    }
  56. }

March 3, 2006

try, catch, finally within cfscript

Filed under: ColdFusion, Java — Phillip Holmes @ 11:40 pm

Whenever I look at my blog's statistics, I always see cf'ers searching for try catch examples within cfscript. So far, the ColdFusion portion of my blog has featured 'one off' code for odd situations and such. I completely forgot that most people that are looking for examples like try catch instead. What I've decided to do here is feature a little more than my stats log has requested by listing a try catch a couple languages so you can see how CF stands up to a full blown programming languages like Java or C#.

-----

A Java or C# try catch would go something like this:

PLAIN TEXT

CODE:

  1. try {
  2.      // the code you want to try to run
  3.      } catch (SomeException e) {
  4.     // code to run when their is an error
  5. }
  6. finally {
  7.   // This is code that runs regardless of the error.
  8. }

-----

This is the ColdFusion equivalent:

PLAIN TEXT

CODE:

  1. try {
  2.      foo = 1;
  3.      } catch(any excpt) {
  4.      foo = 2;
  5. }

-----

PLAIN TEXT

CODE:

  1. function finally() {
  2.      foo = 3;
  3.      return foo;
  4. }
  5. try {
  6.      foo = 1;
  7.      } catch(any excpt) {
  8.      foo = 2;
  9. }
  10. foo = finally();

-----

So, there it is! I hope that helps those folks out there looking for that example! Thanks for visiting and please come back often as I update frequently.

January 29, 2006

Email Validation with CFMX & Java

Filed under: ColdFusion, Java — Phillip Holmes @ 3:59 pm

This little gadget will not only validate the syntax of an email address of a user, but also will use java.net.InetAddress to make sure the domain they are using is valid. This is a handy tool to cut down the number of fake email addresses your application may receive. I have included the source for you to review and change if you like.

You may want to add the ability to actually validate the account as well as the domain. This is possible by using Javamail or other third party classes to instantiate VRFY() function or like functionality on the address, but I do not recommend this because some servers disable this command.

I compiled emailValidator.jar using Netbeans 4.0. I found that the latest version of Netbeans will not create compilations that are compatible with CFMX. I suspect this is due to the latest JVM update. Testing so far has revealed that CFMX will only run under Sun's JVM version 1.4.2_10 and under. So, in other words CFMX does not support J2SE 5.0 as of this post. However, I am sure that will be included in an updater of CFMX 7 or future iteration of CFMX. Here are all the J2SE 1.4.2 downloads and reference docs. That page also has the JRE.

Anyway, enough said.. here it is. You'll need winrar to decompress it.

January 21, 2006

java.nio.charset.Charset

Filed under: ColdFusion, Java — Phillip Holmes @ 1:48 pm

Sun's Charset class reference

Every so often, you may have to deal with international data that has not been stored properly in an ntext or nvarchar field. Generally, this data will be stored as ascii representations of unicode or NCRs. So, when you need to display this in the browser as a certain language type, you'll need to tell ColdFsuion or Java what charset the data is to be displayed in and what you'll need to store it as when you insert or update.

Here is a scaled down working example of how to do this with ColdFusion using the Java Charset class. This example will loop over your query data and convert it to the Charset you specify. This example is used in the context of a function call and the beginning and ending character sets are passed in as arguments.

PLAIN TEXT

CODE:

  1. jcharset = CreateObject('java', 'java.nio.charset.Charset');
  2.     for(i=1;i LTE listLen(qSQL.columnlist); i=i+1 ) {
  3.         // get column
  4.         strTemp = ListGetAt(qSQL.columnlist,i);
  5.         // set variant holder of the data
  6.         vntText = qSQL[strTemp];
  7.         // instantiate instance of jcharset with orginal encoding as arg
  8.         charsetBefore = jcharset.forName(arguments.charsetA);
  9.         // instantiate instance jcharset with new encoding as arg
  10.         charsetAfter =  jcharset.forName(arguments.charsetB);
  11.         // convert text to byte array with original encoding
  12.         charBytes = charsetBefore.encode(vntText);
  13.         // decode with new encoding assign to struct member
  14.         'ret.data.#strTemp#' = charsetAfter.decode(charBytes).ToString();
  15.     }

Keep in mind that you'll need the starting and ending character sets as your arguments. Here are a few charsets as examples
Latin: CP1252:
Chinese Simplified: GB2312
Chinese Traditional: Big5
Chinese Taiwan: Big5
Japanese: Shift_JIS
Korean: EUC-KR
Czech: ISO-8859-2

The Holmes Blog