CF7 Verisign SSL Update Causing PayPal Connection Failure

Author: Steven Neiland

Warning: This blog entry was written two or more years ago. Therefore, it may contain broken links, out-dated or misleading content, or information that is just plain wrong. Please read on with caution.

If you are trying to connect to the paypal api with ColdFusion 7 & IIS6 you may be experiencing a "connection failure" message. This is most likely caused by a Verisign Root SSL update in September 2009. Fortunately this is easy to fix. CF8+ is not affected.

For more information a description of the ssl update can be found at

Step 1: Download Root Certificates

Download the roots cert package and extract it your desktop.

Navigate to "{extracted folder}\VeriSign Root Certificates\Generation 2 (G2) PCAs" and copy "Class 3 Public Primary Certification Authority - G2.cer" to your "C" drive and rename it to "vs-g2-import.cer"

Step 2: Run the Coldfusion Keytool

Next we open a command prompt and running the following commands, replacing the relevent drive letters.

For Coldfusion 7 Standard

>CD c:\CFusionMX7\runtime\jre\bin
>keytool.exe -import -keystore C:\CFusionMX7\runtime\jre\lib\security\cacerts -storepass changeit -noprompt -trustcacerts -file C:\vs-g2-import.cer -alias vs-g2-import-09-09-30

For Coldfusion 7 Enterprise

>CD c:\jrun4\jre\bin\
>keytool.exe -import -keystore C:\jrun4\jre\lib\security\cacerts -storepass changeit -noprompt -trustcacerts -file C:\vs-g2-import.cer -alias vs-g2-import-09-09-30

Step 3: Restart and Test

At this stage all we need to do is to restart coldfusion.
"Control Panel" -> "Administrator Tools" -> "Services"
> select Coldfusion 7 and restart.

Reader Comments

  • Please keep comments on-topic.
  • Please do not post unrelated questions or large chunks of code.
  • Please do not engage in flaming/abusive behaviour.
  • Comments that contain advertisments or appear to be created for the purpose of link building, will not be published.

Archives Blog Listing