I had a hard time configuring SSL on my local CF8 running with the integrated JRun (Developer Edition). I followed the common instructions for enabling SSL on CF (like here and here) but in the end I always kept getting strange error messages like "sec_error_bad_signature" in the browser when I accessed CF via https.

Finally, I found that the error was related to the Java JRE. When I switched the JRE from the one shipping with CF8 (1.6.0_04-b12) to a Java 5 JRE ( 1.5.0_16-b02) the error went away and SSL works like a charm. I'm not yet sure if this is a bug in the JRE or CF8 but for my testing purposes it's just fine now.

Dirk.