TechNote (Archived)

ColdFusion MX 6.0 requires updated Cryptographic Libraries on 7/28/2005

Issue

Macromedia ColdFusion MX 6.0 included the Sun Java Runtime Environment version 1.3.1_03-b03 and the Sun Java Cryptography Extensions version 1.2.1. The certificate used to sign JCE 1.2.1 expired on July 28, 2005.

After this date, when ColdFusion MX 6.0 compiles an encrypted ColdFusion page, ColdFusion will display Error Occurred While Processing Request.

An example is when accessing a previously unaccessed ColdFusion Administrator page, or a previously unaccessed page produced with the cfencode utility.

If Robust Exception Information is enabled - the stack trace for this error looks like:

 java.lang.NoClassDefFoundError at javax.crypto.Cipher.getInstance([DashoPro-V1.2-120198]) at coldfusion.compiler.TemplateReader.decrypt(Unknown Source) at coldfusion.compiler.TemplateReader.(Unknown Source) at coldfusion.compiler.NeoTranslationContext.getPageReader(Unknown Source) at coldfusion.compiler.NeoTranslator.translateJava(Unknown Source) ...

Solution

ColdFusion MX 6.0 users should install the free ColdFusion MX 6.1 Upgrade.

Additional Information

If a ColdFusion MX 6.0 system has not been upgraded to version 6.1 and the system cannot be immediately upgraded to version 6.1, a workaround is available until the upgrade can be performed:

Stop ColdFusion MX.
Download cfmx60jce.zip.(191K)
Unzip cfmx60jce.zip into the cf_root/lib directory, overwriting existing files.
For example: C:\CFusionMX\lib on Windows,/opt/coldfusionmx/lib on Unix
Restart ColdFusion MX.