title: ColdFusion SSL authentication failure
body: <p>I have a simple cfhttp request (a login) going out to an SSL server:</p>
  
  <pre><code>&lt;cfhttp url="https://www2.[domain].com/api/user/login" method="POST" port="443" &gt;
      &lt;cfhttpparam type="formfield" name="username" value="[username]" &gt;
      &lt;cfhttpparam type="formfield" name="password" value="[password]" &gt;
  &lt;/cfhttp&gt;
  </code></pre>
  
  <p>The request fails before it begins, and the ColdFusion server says:</p>
  
  <blockquote>
    <p>I/O Exception: peer not authenticated</p>
  </blockquote>
  
  <p>Both development environments work smashingly. They receive the login session and then hand that to the collector process which successfully taps the remote web service for data.</p>
  
  <p>After I spent a day trying to get the correct certificate into the ColdFusion stores, I had the bright idea to actually compare them to the working development environments. I looked at them (<code>keytool -list</code>), and they are identical.</p>
  
  <p>Now that the obvious is absolved the questions I'm left with are twofold:</p>
  
  <ol>
  <li><strong>Is there some other certificate repository I need to check, or alternately, is there a place where I can get ColdFusion to tell me what certificate repository it needs to find the certificate IN (on the off chance it can and has been altered) or if that is even possible.</strong></li>
  <li>Identify and correct else could be causing this.</li>
  </ol>