How to add TLS 1.2 in cfhttp tag in ColdFusion 10

Question

I am using ColdFusion 10. How can I specify my connection is TLS 1.1, TLS 1.0, etc. Can I use the cfhttp tag?

How to add TLS 1.2 in cfhttp

Answer 1

The easiest way that I've found so far to use native CF 10 tags and TLS 1.2 is to upgrade the JDK/JRE to 1.8 on the CF server.

I've been using ColdFusion 10 with Server JRE 1.8 u151 for a while now.

You can download the Server JRE here: http://www.oracle.com/technetwork/java/javase/downloads/server-jre8-downloads-2133154.html

For my Windows Server, I just unzip/tar the server-jre-8u151-windows-x64.tar.gz file to "C:\Program Files\Java". This creates a folder named jdk1.8.0_151.

1. Log into your CF Administrator
2. Server Settings > Java and JVM
3. Set [Java Virtual Machine Path] to C:/Program Files/Java/jdk1.8.0_151/jre
4. Add this phrase to [JVM Arguments]: -Dhttps.protocols=TLSv1.2
5. Submit Changes

After you restart ColdFusion, it will now be using Server JRE 1.8u151 and force SSL to use TLS 1.2.