ColdFusion

I'm trying to get HTTPS to work for accessing the CF2023 Administrator using a signed certificate. It works fine for a self-signed certificate but I want to use a signed certificate. Self-signed certificate works with this Connector code in server.xml:<Connector port="8216" protocol="HTTP/1.1" SSLEnabled="true" scheme="https" secure="true" keystoreFile="/appl/ColdFusion2023/tomcat.keystore" keystorePass="slfjdslfjsdlfj" keyAlias="tomcat" clientAuth="false" sslProtocol="TLSv1.3" /> I've tried a few things for the signed certificate and neither seem to be working (error - The device or resource is not set up to accept connections on port "8216":<Connector port="8216" protocol="HTTP/1.1" SSLEnabled="true" scheme="https" secure="true" keystoreFile="/appl/ColdFusion2023/jre/lib/security/cacerts" keystorePass="slfjdslfjsdlfj" keyAlias="mycertalias" clientAuth="false" sslProtocol="TLSv1.3" /> <Connector protocol="org.apache.coyote.http11.Http11Protocol" port

I have an CF 2018 Standard install on a windows server. I set up a new install of CF2018 on Azure windows server. I'm trying use the same license. The current install will not be used anymore so that can be disabled if possible.  I don't see any way to disable the license on the old install. I don't see a link to Licensing & Activation and CF Admininstrator.  When I try to add the same license on the Azure server I get a message "Important notice about last submission..." and it just sits like that without doing anything.  How can I get that license to work on the new server?  I used commandbox to install cf2018 on the new server.  

 I'm using vs code with the cfbuilder plugin and using commandbox as my development server.  I am getting an error when I start cfbuilder in vscode that cfbuilder requires a version of Java greater than 7.  I already had a version greater than 7 but I clicked on the download Java button in the error and reinstalled it.  However I still get the error.  When I enter "java -version" in the VSCode terminal it responds:java version "23.0.2" 2025-01-21Java(TM) SE Runtime Environment (build 23.0.2+7-58)Java HotSpot(TM) 64-Bit Server VM (build 23.0.2+7-58, mixed mode, sharing) Not sure what to do. -Rick

I'm trying to work with the Adobe ColdFusion docker images on an Apple M3.  I have a `docker-compose.yml` file that contains the following:services: coldfusion: image: adobecoldfusion/coldfusion:latest container_name: coldfusion hostname: coldfusion platform: linux/amd64 ports: - "80:8500" - "443:8443" environment: - "acceptEULA=YES" - "installModules=all" - "password=P@ssword" - "enableSecureProfile=false" - "TZ=US/Pacific" volumes: - ./app:/app networks: - docker_network...which should be pretty straightforward.  However, when I start the container, the docker logs say this:2025-02-11 10:15:31 Start Time: 18:15:31 2025-02-11 10:15:31 Updating webroot to /app 2025-02-11 10:15:31 Configuring virtual directories 2025-02-11 10:15:32 Updating password 2025-02-11 10:15:32 Skipping language updation 2025-02-11 10:15:32 Serial Key: Not Provided 2025-02-11 10:15:32 Previous Serial Key: Not Provid

The latest vulnerability for Tomcat CVE-2025-24813 is reported to affect all Tomcat versions prior to 9.0.99.  From the CVE - The vulnerability exists due to insufficient validation of user-supplied input when handling file uploads via HTTP PUT requests. A remote attacker can send a specially crafted HTTP PUT request to the server and gain access to sensitive information or even execute arbitrary code. I manage both a CF 2021 and a CF 2023 installation, which as you know are on Tomcat 9.0.93.  Both use Tomcat for the CF Admin console, but the hosted apps run on an external Apache web server.  We have HTTP PUT disabled in Apache config using <LimitExcept> directive. I'm aware it is futile asking when Adobe will put out an update to Tomcat (although if you _do_ have info, I'd be glad to hear it), but I was hoping to get answers to the following: 1. Are apps hosted on Apache vulnerable via the AJP Connector to Tomcat?  2. Is CF Admin

Hi,Our users do not want to see the debugging info.Error on server 1: Error on server 2:User wants to see the error as on Server 2 for security reason.I have compared all the config, and have tried to check/uncheck some debug settings, but no luck.Can anyone help on this?Thanks in advance. James

Hello Team, We are trying to wrap up Dev testing. 1 main issue that we can't fix and could cause us to rollback end of this week has to do with newer version of Tomcat. In ColdFusion (2021 release) Update 15 (release date: August 20, 2024), we’ve upgraded Tomcat from version 9.0.85 to version 9.0.93 We continue to get this: (below) Our code generating multiple PDF's. We have tried org.apache.catalina.connector.RECYCLE_FACADES=true in catalina.propterties file NO Difference andalso tried: server.xml file NO Difference. PLEASE HELP, if anyone has any other ideas. <Service name="Catalina">        <Connector            discardFacades="false"</Service> ERROR:                at coldfusion.tagext.lang.ThreadTag.terminateThread(ThreadTag.java:341)      &nbsp

I have the full Adobe suite; it's costing me over $50 a month and I rarely use it.I have a couple of sites coded in ColdFusion.Is there a decent replacement for Dreamweaver that includes CF in it?  Since I am not a programmer, ideally this will include a visual editor like I have in Dreamweaver.Thank youViews 

I have a Redhat 9.5 Server where i have apache as web server. which is working fine.Downloaded the installer file (ColdFusion_2023_GUI_WWEJ_linux64.bin). Did the install, but when trying to access the tomcat pages for the administration part (port 8500) , i get a error 404. even on <ip>:8500 When checking the log file i see an error message that it cant find the apache tomcat native library for openssl not sure if this is causing the issue i have at this moment or an other strange issue any help is appreciated regards eddy

HelloI'm 74 and have had a long relationship with CF (I met the Allaire brothers in person) & have had a long-time customer for whom I built a comprehensive Real Estate Appraisal app 12 years ago and am still keeping it updated when he requests any new functionality, etc.They have a long time strong relationship with local mortgage lenders and cover a substantial area of RI and Southeastern MA.It is physically located in Rhode Island.This is a web-based intranet in use by several employees there.I host the site.It's just a matter of a few months now when this client will probably want some "new blood" and most CF developers are way overpriced.Let me know what you think a fair price would be to take over upkeep and occasional edits/issues.There are several thousand records - SQL Server.This wold need to be OK'd by the president of the comapny, but  don't see any issues.Thanks for your interest, Norman B.

I am unable to create a CF Server in Visual Studio Code Adobe ColdFusion Builder Extension. Configuration and steps are listed below I followed during installation:   Environment installing on Operating: System MacOS Monterey (version 12.6) Processor: 4 GHz Quad-Core Intel Core i7 (Late 2015) Visual Studio Code Version 1.72.0 Coldfusion Builder Extension version 1.0.443 Java(TM) SE Runtime Environment 18.9 (build 11.0.16+11-LTS-199) Java HotSpot(TM) 64-Bit Server VM 18.9 (build 11.0.16+11-LTS-199, mixed mode)   System requirements macOS: macOS 12. Java 11 as the recommended JDK. Version 1.68 of VS Code or above.   MACOS Installation Note: macOS 10.15 Catalina and above uses zsh shell. I followed steps below using both the Terminal Windows in VS Code, (when it did not appear to work work) then I tried again using the Mac’s Terminal Window) zsh shell Downloaded and installed (jdk-11.0.16_macos-x64_bin.dmg) Created zsh environment file: touch ~/.zshenv Located th

On ColdFusion 2016 local developer edition running SQL Server 2022 I cannot set up my datasource and getting the following error: "Connection verification failed for data source: XXXYYYjava.sql.SQLNonTransientConnectionException: [Macromedia][SQLServer JDBC Driver][SQLServer]Cannot open database "aveglass" requested by the login. The login failed.The root cause was that: java.sql.SQLNonTransientConnectionException: [Macromedia][SQLServer JDBC Driver][SQLServer]Cannot open database "aveglass" requested by the login. The login failed." I can query the database successfully directly in the SSMS. Checked permissions, other settings. Using Windows authentication.

I have an application client side both in php and cf code which does simliar things. Both post to cf server 2021 upadate 18. i believe the update 18 is cuasing the issue but i would have to roll back to 17 to test this. In my logs everything was fine until 2/20/2025 and in my installer downloads on the CF server i see on 2/19 i downloaded update 18 so i assume it was intalled on the 19th or early on 20th of feb. Every since then I have the problem. I am not 100% certain that is the issue but if that makes sense to anyone let me know. Now for the issue. To be clear If i encrypt on a CF server which front end app is (also update 18) and then decrpt on 2nd CF server update 18th this still works even after update 18 installed on 2/20. My issue is with PHP front end. I am encrypting with php page and posting to cf server (same one as the cf front end app) and this now does not work. Both php and cf front end worked fine before update 18. For Cf front end i am using basic: function

Hi All,Is there a way to make the SonarQube for vscode extension (https://marketplace.visualstudio.com/items?itemName=SonarSource.sonarlint-vscode) work with .cfm files?  Thank you

Cant connect Adobe Admin Panel my MariaDB.  i have to connect to an external Database. its a MariaDB 11.4.4. Versioni only have in the admin to select :Apache Derby ClientApache Derby EmbeddedMicrosoft SQL ServerMysql (DataDirect)Mysql 5otherPostgeSQL How i can connect to MariaDB 11.4.4Where i can find the KDBC Connector to download. on MariaDB Site i cant find a .JAR file like Mysql....Who can help me? Kindly Regards Thorsten I have Coldfusion 2016 , Ubuntu 18 

Since an update was made on where my site is being hosted, i can't get the URL's to work.  Unfortunately my site was written over 20 years ago (not by me) , i do have experience with HTML and CSS, but cold fusion....well no.    From what I have seen is that it has something to do with Scoped Variables.  The URL's are showing in the browser, but it remains on the homepage.  I'm using a page to control most of my nav. So for example<a href="./inc_executive.cfm?show=executive">Executive & Coaches</a> simply resets to the homepage.Any help or suggestions would be appreciatedThanks

Part of my app provides various email content pages, which are called and populated with data, then prepared for sending through Postmark. In the following case, when a user shows interest in a job, s/he clicks a button labelled "Chase Job" which ultimate results in an email being sent to the job owner. When that button is clicked, jQuery handles it as follows: $('#chase-form .btnChase').on("click",function(e){ var clickedID = $(this).attr("id"); var chase = clickedID.split("_")[1]; var user_id = clickedID.split("_")[2]; var listing_id = clickedID.split("_")[3]; var message = $('#intro-message').val(); $(this).prop('disabled', true); jQuery.getJSON("/cfcs/listing.cfc?method=chaseJob&returnformat=json",{"chase":chase,"user_id":user_id,"listing_id":listing_id,"status":status,"message":message},function(res,code){ if(res == 1){ top.location.reload(true); } $('#chase-form .btnChase').removeAttr("disabled"); }); re

We have a shared cfc file that builds html elements, one of which calls a separate function in the file that builds a bound selection box. While testing a newer version of CF in our Dev environment we had been utilizing the following flag in our server settings:Encryption - = -Dcoldfusion.encryption.useCFMX_COMPATAsDefaultOnce we removed the flag, our bind element returns a 404 error, I assume due to the updated encryption in recent CF releases. Is there anything that needs to be done to make sure cfdiv bind will work with the udpated encryption?  

How to download cf2023 installer for migrating from cf20221 to cf 2023. CF trail version download no allows only cf2025 download.

I am trying to set a .cfm file insde of an iframe. within a .net website.It was working fine using CF 2016 but now that I am using CF 2023 it doesn't work anymore... thoughts?this is the page: https://www.transducertechniques.com/track-order.cfmThis is the page in an iframe - it throws a 404 errorhttps://www.transducertechniques.com/track-your-order.aspxhere is the iframe.  I used it with and without the full URL<iframe id="locator" src="https://www.transducertechniques.com/track-order.cfm" frameborder="0" scrolling="no" width="100%" height="243"></iframe>

Hello all,We were running on Update 11, and have a scheduled task that uses certificate file to connect.Before update it was working fine.Now after update we are getting this: ErrorCode82ErrorTextAlgorithm negotiation fail: algorithmName="cipher.c2s" jschProposal="aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com" serverProposal="aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc"ReturnValue82 Algorithm negotiation fail: algorithmName="cipher.c2s" jschProposal="aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com" serverProposal="aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc"SucceededNOSo obviously we are proposing algorithms that the remote server does not support.I cannot find anywhere to allow for aes256-CBC to be used on our end.So how I do I at least enable an algorithm that their server supports???   

Hi all. ColdFusion 2021 uses Java 11 and ColdFusion 2023 uses Java 17. Java 11 contained the Nashorn Scripting Engine, which is used in my CF 2021 code to run JavaScript on the back end, but Nashorn was removed from Java 17, so I'm looking for the best way to replace what it did in ColdFusion 2023. Has anyone else successfully done this? Apparently Nashorn is now available as a standalone package but I'm not a Java guy, so I don't know how to get it into a form that ColdFusion can use (maybe a jar file). Would anyone else know how to go about this? Another alternative is the GraalJS scripting engine, which I understand can duplicate what Nashorn did, but again, how can this be put into a ColdFusion-usable library or installation? Any help would be greatly appreciated!

Scheduled tasks on my server are not working. In scheduler.log I get:Connection Failure: Status code unavailableSome more logs: The each method was not found.Either there are no methods with the specified method name and argument types or the each method is overloaded with argument types that ColdFusion cannot decipher reliably. ColdFusion found 0 methods that match the provided arguments. If this is a Java object and you verified that the method exists, use the javacast function to reduce ambiguity. The specific sequence of files included or processed is: /opt/coldfusion2021/cfusion/wwwroot/CFIDE/administrator/scheduler/tasksstatus.cfc, line: 111Here are the server details

I have HTML code, containing dynamic variables, stored in a database in a field named "data',. An example of raw data in that field would be:   <a href="<cfoutput>#application.siteroot#</cfoutput>/?utm_campaign=transactional&utm_source=emails.logo&utm_medium=email"><img src="<cfoutput>#application.siteroot/logo10-180.png"></a>   Within a cfc, I have code that sets this data in a <cfcontent> tag as follows:   <cfsavecontent variable="emailBody"> <cfoutput>#vData#</cfoutput> </cfsavecontent>   However, when I tried to insert "emailBody" into an email and send it, the resulting email does not evaluate the variables in the email body and the email ends up looking like this:   What am I doing wrong?

Installed lockdown guide but it destroyed permissions on the websites. Does anyone have a manual lockdown guide for Cold Fusion 2023 Standard Edition?