CFCHART no longer works after updating IIS to SSL

[glen_2501]

I started evaluating CF2025 a couple weeks ago. I set it up to function through IIS
The CF app we developed works as expected under HTTP, so we decided to get a SSL cert to make the server "legit" - after installing the SSL cert, CFCHART stopped appearing on the CFM page. Other basic CF content still appears (ie cfoutput), but not CFCHART

Web searches seem to indicate that this has been an issue since 2006 -- yet still exists today. Suggestions from back then don't work today however, since {a} the setup for IIS is not the same as it used to be back then, and {b} some of the files they reference back then no longer exist either. 

Who has the magic fix for this latest version of the long standing bug?

[Charlie Arehart · Accepted solution]

Use your browser dev tools feature. Look first at its network tab to watch communications from the browser to the server and back. Anything other than 200 status code? If so, right-click the url to "open in new tab". What detailed errors do you see? If none, what url is failing? 

Then second, look at the dev tools console tab. Any errors tracked there, which are UNIQUE to the request doing cfchart? What are the errors?

I appreciate you may have hoped for some cf coding or admin feature. There's not an inherent inability to serve charts (that I know of), so let's instead diagnose the error as above (unless someone offers a better fix). 

[glen_2501 · Accepted solution]

Thanks for the tip. Turns out there were a couple of issues. One that has been a known issue for a few versions now and an IIS security issue.

Known issue = DOCTYPE = HTML tag at the top of a page will stop HTML cfcharts from appearing when SSL is used. Apparently this has happened through a number of versions and then they end up patching it - the 2025 server has not been patched yet and seems to have inherited this bug again. It's odd that it does not affct it when non-secur HTTP is used

The second was that the CSP policy came into play on the HTTPS processing, that did not take effect on HTTP. This has also been (apparently) an issue on past versions that use connectors instead of directories for the scripting files from CF. On old versions of CF server (up to CF11 I think), the sites were setup with virtual directories relating directly to CFIDE which allowed the scripts and functions from CF to process as part of the native site. Since at least ver2016 it seems that CF only connects to IIS via connectors, and the CF content generated is technically being "fed" from a differet site and port, even though it is a site on the same Windows Server. Therefore we had to play with the CSP so it would allow content and Xscripting to be embedded in the webpage from "other sites".

It is now showing the CFCHART again under SSL

Thanks for the insight

[BKBK]

Thanks for your insights, @glen_2501 , and for sharing your solution.

[BKBK]

It would help if you could share with us an example of the cfchart code.

[jianpingt85715541]

Would you try to stop the CF service, then remove all files at ...\cfusion\wwwroot\WEB-INF\cfclasses, then start the service. It would work.