-
1. Re: Error in CF Admin mail test
carl type3 May 22, 2014 12:09 AM (in response to Karl Krist)Hi Karl,
Perhaps the neo-mail.xml file in \cfusion\lib has been corrupted. Don't suppose you have a spare neo-mail.xml file or spare CF install you can get another file from? Take care to make a copy of first since I could be wrong. You may need to restart CF to re-read the replaced neo-mail.xml file if you elect to take that solution.
Any errors in CF logs application log that relate to this?
HTH, Carl.
-
2. Re: Error in CF Admin mail test
BKBK May 27, 2014 4:25 AM (in response to Karl Krist)Karl,
There is apparently a problem with cryptography. Have you introduced new settings for SSL or certificates? It might help to include the following flag in the JVM settings in the ColdFusion Administrator:
-Dcoldfusion.disablejsafe=true
As they say, every cloud has a silver lining. The error leads to the discovery that the following URL can be accessed through the web: fpsadapt.ucdavis.edu/CFIDE/administrator/mail/index.cfm.
You should restrict access to the CFIDE directory. Otherwise, your site will be vulnerable to attack.
-
3. Re: Error in CF Admin mail test
Karl Krist May 27, 2014 11:43 AM (in response to BKBK)BK-
Thanks for letting me know about this.
I've blocked the CF Admin by IP address (from within the CF Admin). Is that strong enough for security?
-
4. Re: Error in CF Admin mail test
Karl Krist May 27, 2014 11:44 AM (in response to carl type3)Ha! Oddly I have two other exact duplicates of this server. I'll grab a copy from elsewhere. Thanks for letting me know about this possibility.
-
5. Re: Error in CF Admin mail test
BKBK May 27, 2014 1:58 PM (in response to Karl Krist)Karl Krist wrote:
I've blocked the CF Admin by IP address (from within the CF Admin). Is that strong enough for security?Restricting access by IP is good. You should, however, extend the restriction to the CFIDE folder, rather than just to the ColdFusion Administrator.
One common way to do this is through the web server. You would then restrict access, by IP, to:
/CFIDE/administrator/
/CFIDE/adminapi/
/CFIDE/componentutils/
-
6. Re: Error in CF Admin mail test
Charlie Arehart May 31, 2014 9:03 AM (in response to Karl Krist)Karl, is your problem still happening?
If so, are you sure that your web site (is it IIS) is set so that the CFIDE it points to is the one inside CF11? We see from the screenshot you shared that inside the stack trace it points to the page as running in some /CFIDE folder (as if it’s the root of a file system—and it’s odd, because there’s no drive reference, which would be there normally on Windows.)
Normally, it should point to the coldfusion11\cfusion\wwwroot\CFIDE folder, which is where CF11 puts that folder by default. If your web site is pointing at some other folder for that, it could simply be that your Admin was using a different version of code for that mail settings page than CF11 is expecting you to use.
Let us know if that helps.
/charlie
-
7. Re: Error in CF Admin mail test
Karl Krist Jun 2, 2014 9:31 AM (in response to Charlie Arehart)Charlie-
I pulled the neo-mail file from a different server...but unfortunately our servers are already syncing between each other, and the other two servers have the same potentially bad file.
We will re-install CF into the default folder on C:, then we'll try this again.
Thanks for your help and suggestions.
Karl





