ColdFusion 2021 Throws an error when attempting to edit an existing SP Configuration

[Scott_Stewart3951]

This server is running ColdFusion 2021 Update 18. I'm attempting to edit an existing Service provider in the SP Configuration section of the Administrator. 
the page throws the following error in the Application log: 

"Error","http-nio-8544-exec-5","04/17/25","08:40:48","cfadmin","Variable KEYSTOREPATH is undefined. The specific sequence of files included or processed is: F:\ColdFusion2021\cfusion\wwwroot\CFIDE\administrator\security\spedit.cfm, line: 487"

and a similar error in the coldfusion-out log: 

"Error","http-nio-8544-exec-5","04/17/25","08:40:48","cfadmin","Variable KEYSTOREPATH is undefined. The specific sequence of files included or processed is: F:\ColdFusion2021\cfusion\wwwroot\CFIDE\administrator\security\spedit.cfm, line: 487"

When I orginally configured this the keystore entry was present. The configuration works, our developers are able to write code against the SP Config, but editing it is not possible. 

[Anshul_Nautiyal]

Hi @Scott_Stewart3951,

Thank you for reaching out. I am moving your query to the appropriate community where product experts can better assist you with this issue.

In the meantime, you may find the following resources helpful:

• SAML Integration Guide

• ColdFusion Configuration and Troubleshooting FAQs

• Using SAML in ColdFusion

Please feel free to follow up if you have any additional questions.

Regards,
^AN

[Scott_Stewart3951]

Thank you Anshul, where is it being moved to?

[BKBK]

Thank you Anshul, where is it being moved to?

By Scott_Stewart3951

To the ColdFusion forum, naturally.

[BKBK]

The error message suggests that ColdFusion is missing the Keystore Path. In the ColdFusion Administrator, go to the page Security > SP Configuration. Examine the form for the Service Provider. Make sure that the field Keystore Path is filled.

[Scott_Stewart3951]

if the form would render I would do that. The form is the problem, I can't edit the SP Config if the form itself throws an error

[BKBK]

Do I understand correctly that:

1.  the configuration works even though you get the error message "Variable KEYSTOREPATH is undefined."?
2.  the form fails to display when you click on the Edit button?
   

    

   
   
   

[Scott_Stewart3951]

Yes.  Working with our Azure team, I had to make changes to the config several times before it worked. The next time I went in to edit, the form wouldn't render and threw the error mentioned above.

[BKBK · Accepted solution]

That's clear. Thanks for clarifying.

You could do the following test:

1.  Save a back-up of the file /lib/neo-saml.xml (at a location outside ColdFusion).
2.  Open the file in an editor, and enter or change the value of the element signKeystorePath. For example, on my installation, the element is defined as: 
   

   <var name='signKeystorePath'>
   	<string>C:\ColdFusion2025\cfusion\lib\saml\2tUUDSy2ie.p12</string>
   </var>​

3.  Use the modified file to replace the exising file /lib/neo-saml.xml
4.  Restart ColdFusion, then verify whether the issue has been resolved. 

[Scott_Stewart3951]

Progess. 
"Error","http-nio-8544-exec-9","04/18/25","09:37:55","cfadmin","Variable KEYSTOREPSWD is undefined. The specific sequence of files included or processed is: F:\ColdFusion2021\cfusion\wwwroot\CFIDE\administrator\security\spedit.cfm, line: 500"
Can I assume that the variable name is signKeystorePswd?

[BKBK]

Yes, I am also guessing that the variable name is signKeystorePswd. Now, see whether you can edit the form in the administrator. 

For example, what I would do is enter xxx as the value of signKeystorePswd in the test /lib/neo-saml.xml file. I would then restart ColdFusion. I am hoping that the form would then be available, although ColdFusion would tell me the password is incorrect. I would then enter the correct password in the form.

[Scott_Stewart3951]

same error: 
"Error","http-nio-8544-exec-6","04/18/25","09:59:32","cfadmin","Variable KEYSTOREPSWD is undefined. The specific sequence of files included or processed is: F:\ColdFusion2021\cfusion\wwwroot\CFIDE\administrator\security\spedit.cfm, line: 500"

[BKBK]

Do you mean that the form still doesn't appear when you click on the edit button?

[Scott_Stewart3951]

While I can rebuild the neo-saml.xml file, this seems to be happening everytime I make a change to the service provider settings.

I've opened up a bug tracker: 

https://tracker.adobe.com/#/view/CF-4226362

[Scott_Stewart3951]

These are the correct variable names:

this.security.samlsettings.sp = [{

        name: 'sp1',

        entityId: 'admin1',

        acsURL: 'http://localhost:89/App1/response.cfm',

        sloURL: 'http://localhost:89/App1/logout.cfm',

        ACSBINDING: 'post',

        SLOBINDING: 'post',

        SIGNREQUESTS: true,

        WANTASSERTIONSSIGNED: true,

        LOGOUTRESPONSESIGNED: true,

        SIGNKEYSTOREPATH: 'C:/okta.p12',

        SIGNKEYSTOREPASSWORD: 'abcdef',

        SIGNKEYSTOREALIAS: 'selfsigned',

        REQUESTSTORE: 'Redis'

    }];

[Dave Watts]

This is a long shot, but do you think you might have run out of space in your Azure container while making all these changes? It's weird that it worked intermittently.

[Scott_Stewart3951]

Hey Dave,  no, the CFAdmin borked a save to neo-saml.xml. Once I had all the variables back in the xml file it worked

[BKBK]

Hi @Scott_Stewart3951 , it's a relief to hear that the issue is resolved.

[Dave Watts]

You should post the solution and mark it as the correct answer, if you have time.