SSLCertificateInstall()

edit

install certificates of a specific host

SSLCertificateInstall( host=string, port=number, cacertPath=any, password=string );

Returns: void

Argument Description Default
host
string, required
edit

host to get Certificates from

port
number, optional
edit

port of the host, default is 443

443

cacertPath
any, optional
edit

Path to custom cacert file

Alias: path, cacert

Introduced: 7.0.0.234

password
string, optional
edit

Password for cacert database

Introduced: 7.0.0.234

Usage Notes

edit

Lucee 5 bundled a caerts file, which caused problems as it was never updated and root certs change, causing SSL errors for normal websites with valid certs.

Lucee 6 by default uses the JVM cacerts file, which currently doesn't work with this function LDEV-917

To use the old behaviour, use lucee.use.lucee.SSL.TrustStore=true or LUCEE_USE_LUCEE_SSL_TRUSTSTORE=true

Examples

edit
dump(SSLCertificateInstall("google.com"));

See also