SSLCertificateInstall()

install certificates of a specific host

SSLCertificateInstall( host=string, port=number, cacertPath=any, password=string );

Returns: void

Argument Description Default
host
string, required

host to get Certificates from
port
number, optional

port of the host, default is 443

443
cacertPath
any, optional

Path to custom cacert file

Alias: path, cacert

Introduced: 7.0.0.234
password
string, optional

Password for cacert database

Introduced: 7.0.0.234

Usage Notes

Lucee 5 bundled a caerts file, which caused problems as it was never updated and root certs change, causing SSL errors for normal websites with valid certs.

Lucee 6 by default uses the JVM cacerts file, which currently doesn't work with this function LDEV-917

To use the old behaviour, use lucee.use.lucee.SSL.TrustStore=true or LUCEE_USE_LUCEE_SSL_TRUSTSTORE=true

Examples

dump(SSLCertificateInstall("google.com"));

See also