tls1.2 - How to add TLS 1.2 in cfhttp tag in ColdFusion 10

Question

I am using ColdFusion 10. How can I specify my connection is TLS 1.1, TLS 1.0, etc. Can I use the cfhttp tag?

How to add TLS 1.2 in cfhttp tag using ColdFusion?

Answer 1

ColdFusion 10 will handle the TLS 1.2 protocol using CFHTTP without any issues as long as you are running Coldfusion on Java 1.8.0_nn. You need to upgrade your Java version. Also see this article I wrote on which SSL/TLS protocols are usable for each ColdFusion/Java version combinations.

https://www.trunkful.com/index.cfm/2014/12/8/Preventing-SSLv3-Fallback-in-ColdFusion

To install a new Java version I always install the JDK in a non-default location that is only used for ColdFusion. ie C:javajdk1.8.0_nn This way you know it's for ColdFusion and not for the OS. Of course if you're on Linux then the location would be different, but you'd know that already.

Regards, Wil