CF10 with Java 8

September 11, 2013, 11:30 pm

≫ Next: Coldfusion 11 cfheader or cfcontent 'failed to load PDF document'

≪ Previous: CF11 Update 5, IIS 7 - Server Unavailable

$

0

0

Hello,

 

Has anyone else tried to use CF with Java 8 preview? If you have tried Java 8 preview have you noticed anything interesting?

 

Something to share. Java 8 uses memory differently to Java 7 or 6 (reminder Java 6 is EOL). The non heap memory Permanent generation has been done away with and is now consumed in a new memory space called Metaspace. I guess that will mean CF folks will not see the dreaded “java.lang.OutOfMemoryError: PermGen space” in coldfusion-out.log anymore.

For interested readers here is my CF10 Summary part:

 

Server Settings > Settings Summary

System Information  
 
Server Product  ColdFusion 
Version  ColdFusion 10,284825 
Operating System  Windows 7   
OS Version  6.1   
Update Level  /C:/ColdFusion10/cfusion/lib/updates/chf10000010.jar   
Adobe Driver Version  4.1 (Build 0001)   

JVM Details

 

Java Version  1.8.0-ea   
Java Vendor  Oracle Corporation   
Java Vendor URL  http://java.oracle.com/   
Java Home  C:\Program Files\Java\jdk1.8.0\jre   
Java File Encoding  Cp1252   
Java Default Locale  en_AU   
User Dir  C:\ColdFusion10\cfusion\bin   
Java VM Specification Version  1.8   
Java VM Specification Vendor  Oracle Corporation   
Java VM Specification Name  Java Virtual Machine Specification   
Java VM Version  25.0-b48   
Java VM Vendor  Oracle Corporation   
Java VM Name  Java HotSpot(TM) Server VM   
Java Specification Version  1.8   
Java Specification Vendor  Oracle Corporation   
Java Specification Name  Java Platform API Specification   
Java Class Version  52.0   

 

For those more curious about Java memory heap, non heap spaces and garbage collection here is a portion of CF10 verbose Java 8 log:

{Heap before GC invocations=25 (full 11):
PSYoungGen      total 116736K, used 58624K [0x25840000, 0x30300000, 0x30300000)
  eden space 58624K, 100% used [0x25840000,0x29180000,0x29180000)
  from space 58112K, 0% used [0x2ca40000,0x2ca40000,0x30300000)
  to   space 58112K, 0% used [0x29180000,0x29180000,0x2ca40000)
ParOldGen       total 349440K, used 349401K [0x10300000, 0x25840000, 0x25840000)
  object space 349440K, 99% used [0x10300000,0x258364e0,0x25840000)
Metaspace total 39432K, used 38121K, reserved 11104K
  data space     39432K, used 38121K, reserved 11104K
545.052: [Full GC (Ergonomics) [PSYoungGen: 58624K->0K(116736K)] [ParOldGen: 349401K->38999K(276992K)] 408025K->38999K(393728K), [Metaspace: 38121K->38111K(11104K)], 0.2856262 secs] [Times: user=0.45 sys=0.00, real=0.29 secs]
Heap after GC invocations=25 (full 11):
PSYoungGen      total 116736K, used 0K [0x25840000, 0x30300000, 0x30300000)
  eden space 58624K, 0% used [0x25840000,0x25840000,0x29180000)
  from space 58112K, 0% used [0x2ca40000,0x2ca40000,0x30300000)
  to   space 58112K, 0% used [0x29180000,0x29180000,0x2ca40000)
ParOldGen       total 276992K, used 38999K [0x10300000, 0x21180000, 0x25840000)
  object space 276992K, 14% used [0x10300000,0x12915c00,0x21180000)
Metaspace total 39418K, used 38111K, reserved 11104K
  data space     39418K, used 38111K, reserved 11104K
}

 

To have something to compare switching CF10 back to Java 7 with no other JVM alterations verbose log portion for similar usage says:

 

{Heap before GC invocations=24 (full 9):
PSYoungGen      total 116480K, used 65026K [0x1d360000, 0x27e00000, 0x27e00000)
  eden space 58240K, 100% used [0x1d360000,0x20c40000,0x20c40000)
  from space 58240K, 11% used [0x24520000,0x24bc09b8,0x27e00000)
  to   space 58240K, 0% used [0x20c40000,0x20c40000,0x24520000)
PSOldGen        total 205184K, used 35647K [0x07e00000, 0x14660000, 0x1d360000)
  object space 205184K, 17% used [0x07e00000,0x0a0cfc90,0x14660000)
PSPermGen       total 58880K, used 45819K [0x03e00000, 0x07780000, 0x07e00000)
  object space 58880K, 77% used [0x03e00000,0x06abec70,0x07780000)
530.568: [GC [PSYoungGen: 65026K->5223K(116480K)] 100673K->45573K(321664K), 0.0220773 secs] [Times: user=0.05 sys=0.00, real=0.02 secs]
Heap after GC invocations=24 (full 9):
PSYoungGen      total 116480K, used 5223K [0x1d360000, 0x27e00000, 0x27e00000)
  eden space 58240K, 0% used [0x1d360000,0x1d360000,0x20c40000)
  from space 58240K, 8% used [0x20c40000,0x21159d78,0x24520000)
  to   space 58240K, 0% used [0x24520000,0x24520000,0x27e00000)
PSOldGen        total 205184K, used 40350K [0x07e00000, 0x14660000, 0x1d360000)
  object space 205184K, 19% used [0x07e00000,0x0a567a60,0x14660000)
PSPermGen       total 58880K, used 45819K [0x03e00000, 0x07780000, 0x07e00000)
  object space 58880K, 77% used [0x03e00000,0x06abec70,0x07780000)
}

 

I should add Java 8 is preview and not officially support by Adobe CF so do not install it on your CF production or any environment that you rely on.

 

Java 8 release is expected March 2014. That might seem a long way off but like the previous Java 7 release can creep up on you rather quickly.

 

Regards, Carl.

---

Coldfusion 11 cfheader or cfcontent 'failed to load PDF document'

June 20, 2014, 2:58 pm

≫ Next: CF10 Java 7.51 - "Missing required permissions manifest attribute"

≪ Previous: CF10 with Java 8

$

0

0

I have a website that worked fine with Coldfusion 10 and now I have updated to Coldfusion 11 and this code doesn't work:

 

<cfheader name="content-disposition" value="inline; filename=#vPublicFile#" />

<cfcontent type="application/pdf" file="#DownloadFolder##qryDownload.fileNameOnserver#" deleteFile="no" />

 

If I type in the URL directly to the PDF file it loads fine, but if I try to get it through this code then I get the message "failed to load PDF document".  Even if I change the code to allow me to save the file, I get a saved file but it won't open in acrobat.

 

I know the code is working code, I tried it with Coldfusion 10 again just to make sure.  Something about 11 is stopping it from working.  Any ideas?

CF10 Java 7.51 - "Missing required permissions manifest attribute"

March 21, 2014, 8:21 am

≫ Next: Yet another CFIDE vulnerability!

≪ Previous: Coldfusion 11 cfheader or cfcontent 'failed to load PDF document'

$

0

0

Our clients are reporting that after they update to Java 7.51 they are now getting the following error:

 

"Missing required permissions manifest attribute in main jar: CFIDE/classes/cfapplets.jar"

 

Is this something Adobe is supposed to fix? 

 

Having my users add an exception to their browsers is NOT an option for us.

 

thanks!

Yet another CFIDE vulnerability!

May 14, 2013, 8:52 am

≫ Next: CF 10 Hotfix 16 - Browser Caching Problems

≪ Previous: CF10 Java 7.51 - "Missing required permissions manifest attribute"

$

0

0

 

RE: http://www.adobe.com/support/security/advisories/apsa13-03.html

 

Open letter to Adobe…

 

 

Adobe,

 

Please assign someone to trend all the ColdFusion vulnerabilities for the last five years. I am certain you'll find that a vast majority of them revolve around the CFIDE directory. Idea: Instead of endlessly patching the CFIDE modules every time a vulnerability is found or exploited, if you were to eliminate the CFIDE directory ColdFusion would probably be one of the more secure web platforms on the market. Just a thought.

 

For users of ColdFusion, my advice is to remove the CFIDE virtual directory from all your public facing sites. If your site requires the CFIDE/scripts directory, point the CFIDE virtual directory to an empty directory and then create a "scripts" virtual directory under it and point it to the original /CFIDE/scripts location. Poof -- probably 80% or more of the CF vulnerabilities avoided.

 

ColdFusion is a great platform and can be very secure -- minus the CFIDE.

 

CF 10 Hotfix 16 - Browser Caching Problems

May 20, 2015, 7:26 am

≫ Next: Cold Fusion 11 email

≪ Previous: Yet another CFIDE vulnerability!

$

0

0

Hi all,

 

On our Windows 2003 (32-bit) test server, I had CF10 with the Mandatory Update installed on it. I patched CF to Hotfix 16, and then suddenly we saw problems where people couldn't log into the site - they kept on getting redirected back to the login page. Tweaking browser settings and clearing browser cache seemed to alleviate the problems but I'm wondering if this is a common problem for this update, or if there was a simple step that I missed. Any help is appreciated!

Cold Fusion 11 email

May 8, 2015, 5:00 am

≫ Next: Help me figure this hack out.

≪ Previous: CF 10 Hotfix 16 - Browser Caching Problems

$

0

0

Hi,

 

The following message in the email log file:

 

An exception occurred when setting up mail server parameters. This exception was caused by: coldfusion.mail.MailSpooler$SpoolLockTimeoutException: A timeout occurred while waiting for the lock on the mail spool directory

 

There have been some issues with connecting to the email server.

 

Per my research, the email spool is on disk. I cannot find the location.

 

In the CF administrator, there are no emails undelivered.

 

When try to send an email from the production server, the email times out.

 

Using Cold Fusion 11.

 

Is there a return code that be checked within the Cold Fusion code?

 

 

Thanks,

 

 

Mike

Help me figure this hack out.

December 28, 2012, 8:56 am

≫ Next: One CFFUNCTION calling another in same CFC - using "this" isn't working

≪ Previous: Cold Fusion 11 email

$

0

0

So as i was opening my presents with my family Christmas morning when my web server emailed me to let me know that a file had been created in my /CFIDE/ folder. This file was h.cfm and it was a nifty little tool used to scan files - copy files - dump SQL passwords - run commands - upload files ect....

 

My setup is CF9.0.1 on win server 2008 with mySQL5.5 . The servers only purpose is to host a few websites for my company. I poured over my IIS logs and could not find any trace of a connection to the webserver while this was happening. I then started looking at the http.log file in coldfusion server and found that it contained 2 entries at the time of the attack. Both looked like this... note i've removed the IP of the server. This file is the file that was uploaded to my server.

 

25-Dec-2012    6:54 AM    Information    jrpp-6969  Starting HTTP request {URL='http://IPAddress:80/CFIDE/h9.txt', method='get'} 

 

There was nothing before this connection and nothing after it.  It looks like some how my server was told to make a call to here.  Nothing in any logs regarding the use of the h.cfm, no loggs in IIS showing suspicious page hit before and nothign suspicious after.

 

Am i missing something??? this is driving me nuts! The other weird thing about this attack was that they didn't touch any websites they copied the ColdFusion9\updater_backup\ folder and a few other odd things off the server.

 

Any insight into anything that went on would be helpful... even if it's just a guess that points me in the right direction.

 

Thanks,

JB.

One CFFUNCTION calling another in same CFC - using "this" isn't working

May 20, 2015, 12:23 pm

≫ Next: Pass ColdFusion variable to the JavaScript window

≪ Previous: Help me figure this hack out.

$

0

0

Hello, all,

 

I've got a CFC (let's call it test.cfc) that is supposed to handle a lot of  internal calls to other CFFUNCTIONs.

 

I had read that using "this.functionName(args);" should work.

 

However, for some reason it isn't.  I still have to use "components.compName().functionName(args);" for it to work.  Pseudo-code:

 

<cffunction name="functionA" access="private" output="no" returntype="any">    <cfquery name="getThese" datasource="#application.thisDSN#">      SELECT * FROM tableA ORDER BY ID    </cfquery>    <cfreturn getThese /></cffunction>

and

<cffunction name="functionB" access="private" output="yes" returntype="void">    <cfset tmp = this.functionA() /><cfoutput>#tmp#</cfoutput></cffunction>

This produces the error: Ensure that the name is correct and that the component or interface exists.

 

But the following works just fine:

 

<cffunction name="functionB" access="private" output="yes" returntype="void">    <cfset tmp = components.test().functionA() /><cfoutput>#tmp#</cfoutput></cffunction>

Any suggestions as to why "new this.test().functionA();" doesn't work?

 

V/r,

 

^_^

---

Pass ColdFusion variable to the JavaScript window

July 13, 2010, 11:48 am

≫ Next: Deploy Coldfusion 11 on IBM Websphere ND 8.5.5.

≪ Previous: One CFFUNCTION calling another in same CFC - using "this" isn't working

$

0

0

Hi everyone,

 

I have a java script window that is will open when user click on the link, my problem is that how I can pass a ColdFusion variable to the window. I am using ColdFusion 7 so I can not use cfwindow.what shold I put on the *** place??? I tried to put EntityId in the call place javascript:poponload(EntityId );   and function poponload(EntityId ), doesn’t 't work either so please let me know if you know how to do this.

 

My code:

 

<SCRIPT language="javascript">

function poponload()

{

window.open ('test.cfm?test='*** ,'mywindow','menubar=1,resizable=1,width=350,height=250');

}

</SCRIPT>

 

<body>

<cfform>

<cfset EntityId ="#form.EntityId#"> /I want to pass EntityId  to the javascript window

</cfif>

<a href="javascript:poponload();">Find IDs</a>

</cfform>

</body>

Deploy Coldfusion 11 on IBM Websphere ND 8.5.5.

May 20, 2015, 6:03 am

≫ Next: What is the phone # for ColdFusion pay per incident support?

≪ Previous: Pass ColdFusion variable to the JavaScript window

$

0

0

Hello,

 

 

we try to deploy Coldfusion11 on IBM Websphere ND  8.5.5 following document:  https://wikidocs.adobe.com/wiki/display/coldfusionen/Installing+the+JEE+Configuration#Inst allingtheJEEConfiguration-DeployColdFusion11onWebSphere7or8AS

Deploy fine, it's seems, but when we try to access Coldfusion administator we received this error:

 

 

Error 500: javax.servlet.ServletException: Filter [CFClickJackFilterSameOrigin]: coldfusion.bootstrap.BootstrapFilter was found, but is corrupt:

 

 

Somebody know where is the problem?

 

 

Thanks for avanced.

 

José Antonio Chao.

What is the phone # for ColdFusion pay per incident support?

May 21, 2015, 10:30 am

≫ Next: Invalid content type

≪ Previous: Deploy Coldfusion 11 on IBM Websphere ND 8.5.5.

$

0

0

What is the phone # for ColdFusion pay per incident support? Your website says to call 800-642-3623 http://www.adobe.com/support/programs/developer/sdk_server.html but there is NO OPTION for COLDFUSION!  ** HELP **

Invalid content type

May 1, 2007, 6:59 am

≫ Next: Font's for CFDocument PDF not consistent

≪ Previous: What is the phone # for ColdFusion pay per incident support?

$

0

0

I have a form that allows the user to upload a photo.
It works fine.
However, the CF logs are showing repeated errors on the processing page, like so:

Invalid content type: ""application/x-www-form-urlencoded"".<br>CFFILE action=""upload"" requires forms to use enctype=""multipart/form-data""

I added a try/catch around the cffile tag to try and generate more information about the browser, submitting page, etc., but have yet to determine why this error is being generated.

Does anyone know of a browser that would modify the enctype attribute?
Could someone be attempting to upload a file NOT of type JPG, so that when the cffile tag runs it geneates this error?

Any insight would be greatly appreciated.
Thanks,
bh

Font's for CFDocument PDF not consistent

August 22, 2013, 1:38 pm

≫ Next: CF11 install linux failure...Launching installer... JRE libraries are missing or not compatible....

≪ Previous: Invalid content type

$

0

0

I have identical CFM file's on 2 different servers which generate a PDF.

 

I use a style tag like this:

<style type="text/css">

td    {

    font-family : Arial;

    color : Black;

    font-style : normal;

    font-weight : normal;

    font-size : 10pt;

    text-decoration : none;

    text-align: center;

    }

th    {

    font-family : Arial;

    color : Black;

    font-style : normal;

    font-weight : normal;

    font-size : 10pt;

    text-decoration : none;

    text-align: center;

    }

td.left    {

    font-family : Arial;

    color : Black;

    font-style : normal;

    font-weight : normal;

    font-size : 10pt;

    text-decoration : none;

    text-align: left;

    }

th.right    {

    font-family : Arial;

    color : Black;

    font-style : normal;

    font-weight : normal;

    font-size : 10pt;

    text-decoration : none;

    text-align: left;

    }

</style>

 

But this displays differently on separate servers.  Why would the font's look different?

 

<table  width="100%" cellpadding="0" cellspacing="0">

    <tr>

        <th class="right">RESERVATION : </th>

        <td class="left"> </td>

    </tr>

</table>

 

Thanks,

Steve

CF11 install linux failure...Launching installer... JRE libraries are missing or not compatible....

June 14, 2014, 9:32 am

≫ Next: CF11 Site wide error handler setup

≪ Previous: Font's for CFDocument PDF not consistent

$

0

0

CF11 install linux failure

Expected: bundled JRE should work on Ubuntu 13.1

 

 

Launching installer...

 

 

JRE libraries are missing or not compatible....

 

# java -version

java version "1.7.0_55"

OpenJDK Runtime Environment (IcedTea 2.4.7) (7u55-2.4.7-1ubuntu1~0.13.10.1)

OpenJDK 64-Bit Server VM (build 24.51-b03, mixed mode)

CF11 Site wide error handler setup

April 30, 2015, 8:54 am

≫ Next: Why 404 on isapi_redirect.dll via Jakarta on CF11 Windows 2012?

≪ Previous: CF11 install linux failure...Launching installer... JRE libraries are missing or not compatible....

$

0

0

Hi

 

... can't seem to get the site wide error handler to work on my new CF11 server....

 

I built a simple error handler cfm page and put it into my CF server root (not the site root) and created a test.cfm with an intentional CF error (a cfinclude tag that points to a missing file) that I put into my site root.

 

In CF admin I pointed the Site wide error handler to my error handler page and clicked submit, and CF admin came back with a confirmation message saying all is well.

 

Any Coldfusion errors are still being handled by the default template and not my custom error page. Does anyone know anything else I could try?

 

Thanks in advance,

 

Rich

---

Why 404 on isapi_redirect.dll via Jakarta on CF11 Windows 2012?

October 9, 2014, 3:10 pm

≫ Next: What IP address does CF use to connect to my SQL Server?

≪ Previous: CF11 Site wide error handler setup

$

0

0

I had a lot of trouble getting a fairly complicated site to function with CF11 on Windows 2012 (I'm moving from CF8 on Windows 2003). After several days I noticed update 1; once I applied that, I was able to get beyond the 404

 

Now I'm trying to add a second site and I'm back to the 404s. I can access the main page with a domain name by not specifying index.cfm.

http://www.mydomain.com:80/jakarta/isapi_redirect.dll

Detailed Error Information:

Module    IIS Web Core

Notification    MapRequestHandler

Handler    ISAPI-dll

Error Code    0x80070002

Requested URL    http://www.mydomai.com:80/jakarta/isapi_redirect.dll

Physical Path    C:\ColdFusion11\config\wsconfig\1\isapi_redirect.dll

Logon Method    Anonymous

Logon User    Anonymous

 

The Configuration Wizard

Created a folder 1 in cfroot\config\wsconfig, that contains all connector-related files.

Created a virtual directory Jakarta in cfroot\config\wsconfig (in IIS).

Added an entry, tomcat, under the ISAPI FILTERS. This points to cfroot\config\wsconfig

\1\isapi_redirect.dll.

Added an entry, tomcat, to  cfroot\config\wsconfig\1\isapi_redirect.dll with permission allowed under ISAPI and CGI Restrictions. It is applicable for global sites in IIS manager (I see the tomcat entry in IIS.ISAPI FILTERS.. not sure where ISAPI and CGI Restrictions are.)

Added the following isapi handlers: cfcHandler, cfmHandler, cfmlHandler, cfrHandler, and

cfswfHandler.

 

Makes me think I have to uninstall and reinstall CF 11, set up all the sites, run the connector wizard, then apply the update. That can't be true can it?

 

On this server, I'm serving pages off of C:\inetpub\wwwroot (a simpler setup than what I'd prefer which would be to serve off D:\inetpub\wwwroot so that the C drive is less accessible to web access)

 

Any ideas would be welcome.

What IP address does CF use to connect to my SQL Server?

May 21, 2015, 10:34 am

≫ Next: ColdFusion Trusted Keystore

≪ Previous: Why 404 on isapi_redirect.dll via Jakarta on CF11 Windows 2012?

$

0

0

I have one CF server that has a range of 20 IP addresses.  Our SQL Server is behind a firewall and we need to give it an IP address to allow access from the CF server to the SQL server.  CF is not picking the first IP or the last, it seems to have just picked one random IP address.

 

How do we configure or setup ONE IP for CF to use when communicating with our SQL SERVER? 

 

Please advise on any help & suggestions.

 

Thank you!

Ernie

ColdFusion Trusted Keystore

May 21, 2015, 6:47 pm

≫ Next: Error 500 after installing CF11 on Windows 8.1

≪ Previous: What IP address does CF use to connect to my SQL Server?

$

0

0

We're getting messages from PayPal about the need to update to a VeriSign G5 root certificate if we access their API.  We call the API with CFHTTP using ColdFusion 10.  Does anyone know if the G5 certificate is in the CF10 keystore?  Or, is this something that needs installed on the OS (Win 2008)?

Error 500 after installing CF11 on Windows 8.1

April 30, 2014, 8:35 am

≫ Next: ColdFusion 10 compatible with Java 8

≪ Previous: ColdFusion Trusted Keystore

$

0

0

I purchased a new laptop with Windows 8.1. I had a previous latop that had been upgraded to Windows 8.1 and ran CF10 perfectly fine. I made sure the necessary IIS modules were installed for CF. I installed CF11 using the "Run as administrator" option, just to be on safe side. Everything appeared to go smoothly and no hiccups occured. However, when I click to go CF admin page, I received an Error 500. I've made sure permissions on the folders are correct and allow for the IIS_USR a even IUSR. Any help would be greatly appreciated. I am sort of at a loss here.

The detailed information is as follows:

Detailed Error Information:

 

Module	IsapiModule
Notification	ExecuteRequestHandler
Handler	cfmHandler
Error Code	0x800700c1

 

 

Requested URL	http://127.0.0.1:80/CFIDE/administrator/index.cfm
Physical Path	D:\ColdFusion11\cfusion\wwwroot\CFIDE\administrator\index.cfm
Logon Method	Anonymous
Logon User	Anonymous

ColdFusion 10 compatible with Java 8

May 16, 2015, 7:12 pm

≫ Next: ColdFusion 9 on IIS 8 Windows Server 2012 R2

≪ Previous: Error 500 after installing CF11 on Windows 8.1

$

0

0

Will anyone point me to documentation that says ColdFusion 10 supports Java 8?

 

Thank you!