Secure CFFTP

I am trying to connect to an FTP server usinfg CFFTP. The
server requires a secure connection. Does CFFTP support secure
connections?
Thanks.

No. Unfortunately.
Regards,
Chris

Similar Messages

Secure cfftp with Coldfusion 7

Does anyone have an innovative way to get Coldfusion 7 to do secure cfftp? I sure cant afford to upgrade right now. I would even settle for a tag at a reasonable cost if you know where I can find it. Many thanks for your help.
Brian

You may use the secure version of zehon ftp for Java 1.4. It is free!
Zehon goes one better and even gives you a tutorial and code samples . I hope my code in this previous thread will get you started:
http://forums.adobe.com/message/2540803#2540803

Problem with secure cfftp

I'm getting ArrayIndeOutOfBoundsException error when i try connecting secure ftp using this syntax:
<CFFTP
SERVER="sftp.abc.com"
USERNAME="abc"
PASSWORD="pwd"
action="open"
connection="myConnection"
secure="yes">
Am i doing anything wrong?

Can this issue be reproduced? Does it occur only with html attachment or is it with any attachment?
You can check to see if .html files are being blocked by outlook.
Open up the registry editor (Start > type: regedt32 > Enter)
Navigate to the following key
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Outlook\Security
Look for "Level1Remove".
Right-click > Modify > Review the list of extensions being blocked.
If you see ".html;" there, remove it and try again.
John

Secure CFFTP Error

I am receiving the following error when trying to make a
secure ftp connection using cfftp in ColdFusion 8
java.lang.OutOfMemoryError: Java heap space
I had 1 gb ram in the server with plans to upgrade anyway so
it is now up to 3 gb with the max heap set to 1400mb (tried 1800,
1600, 1500 and CF wouldn't start, finally started at 1400) after
getting the settings changed I ran the template and it appeared to
create the connection (had another error later on in the file) but
it only worked that one time.
Does anyone know why this is happening. If it is really a
memory issue does anyone know how to get CF to start with the
advertised max heap size of 1.8 gb?
Thanks

I was getting the same error and after about a week of
troubleshooting I found the problem to be with the JSch class that
shipped with ColdFusion 8 which is version 0.1.28. I found looking
through the change log for JSch that in version 0.1.29 they fixed a
bug that related to having long banners, which our company has a
very long warning banner. So, I stopped the ColdFusion/JRun
services and renamed the existing jsch-0.1.28m.jar file to
jsch-0.1.28m.jar.orig and put the latest available version which as
of this posting was 0.1.37 into the same folder. Then I restarted
JRun and ColdFusion and I was able to do a secure FTP without
getting the java.lang.OutOfMemoryError message.
I just installed ColdFusion 8.0.1 and the version of JSch is
still 0.1.28, hopefully the next update will have a newer version.
You can download the latest JSch library from
http://www.jcraft.com/jsch/

CFFTP Secure Issue

I want to have a CF page connect to a client's server and
download some files. I am required to do it using secure FTP (FTP
with SSL).
When I connect for the first time with FTP client software it
downloads and installs a certificate. Do I use this certificate
(that the FTP client software downloaded) as the certificate for
CFFTP? If so where do I get the passphrase and fingerprint?
I'm having a really tough time finding help with this and the
documentation seems awfully thin. All help will be much
appreciated...

I'm having a similar issue with coldfusion 10 but the suggested solution does not help me.
I now get an error that says "The system cannot find the path foo.txt"
With the failifexists="true" (the default setting), it creates the file with zero length then fails. With failifexists="false", it doesn't seem to create the file at all and just errors on filenotfound.
I am doing CF Lockdown - but the coldfusion user absolutely has change privileges to that folder.

CFFTP, CFLDAP and securing passwords

Good afternoon. I have several applications which use tags
such as CFFTP and CFLDAP. These applications do not prompt for user
input, but rather automatically supply the application with the
username and password required from a DB lookup. Currently, the
passwords are stored in plain text in the DB (SQL 2K)...yes, I
know...HORRIBLE!!! How do I secure these passwords or at least
secure passing the passwords to the tags, so that they are not in
plain text? Since I am automatically supplying these passwords, I
can't use salting and hashing, right? Your expedient assistance is
greatly appreciated. Thank you.
Chris

Hi Chris,
You should really be storing your passwords with a one-way
hash in your database but that won't help with the SFTP problem. If
you are using SFTP the passwords are not sent to the server in
plain text anyway, the only difference is that you are giving it
over to the sftp tag from a query column, which is in plain text
anyway. If I understand correctly you would want to retrieve the
usernam and password from the database, encrypt the password, pass
the username, password and encryption key to a function that would
then unencrypt the password and pass it to the SFTP tag? You have
to give an unencrypted password to the tag since I imagine the
password on the server is also not encrypted.
That seems like a lot of overhead for absolutely no increase
in security.

How to get a file with CFFTP

I am trying to grab a file and move it to the coldfusion server using <CFFTP> The server in which I am trying to grab the file is a sftp server. I am running coldfusion 8. When I run my code, I dont get an error, I just get a blank white screen, yet the file has not been moved. I will post my code below, does anyone know what I am doing wrong?

 <cftry>
 <cfftp action="open"
 connection="ftpServer"
 server="server.com"
 username = "username"
 password = "password"
 fingerprint = "11:11:B5:F2:11:AF:C2:E2:31:11:D3:B4:11:83:11:11"
 timeout="20"
 port="22"
 secure = "yes" />
 <cfcatch>
 <cfset throwFileTransferFailed("Could not open connection. Message: " & cfcatch.Message & ". Detail: " & cfcatch.Detail)>
 </cfcatch>
 </cftry>

 <cftry>
 <cfftp
 action="getFile"
 connection="ftpServer"
 server="server.com"
 username="username"
 password="password"
 remotefile="TEST_20100816.csv"
 localfile="C:\WENS_DEV\pdf\"
 failIfExists="no">
 <cfcatch>
 <cfset throwFileTransferFailed("Could not open connection. Message: " & cfcatch.Message & ". Detail: " & cfcatch.Detail)>
 </cfcatch>
 </cftry>

how do I tellif the CF service has sufficient rights?
Now my code looks like this and I am still getting an error. I cant figure it out.
 <cfftp action="open"
 connection="ftpServer"
 server="server.com"
 username = "username"
 password = "password"
 fingerprint = "11:11:11:11:11:11:11:11:11"
 timeout="30"
 port="22"
 secure = "yes" />
 <cfftp
 action="getFile"
 connection="ftpServer"
 remotefile="TEST_20100816.csv"
 localfile="C:\WENS_DEV\pdf\TEST_20100816.csv"
 failIfExists="no">

CFFTP Usage

I am trying to utlitize cfftp in the following scenario:
1. user logs into our website.
2. user clicks link to .cfm template which uses cfftp to
display contents of their personal directory (located on our ftp
server, which is a different physical machine.)
<cfftp connection = "#session.customerid#session"
server = "ftpserver.mydomain.com"
username = "#session.customerid#"
password = "#session.password#"
action = "LISTDIR"
stopOnError = "Yes"
name = "PDFDirectory"
directory = "/pdfdir">
3. I'd like to create an ftp link for each pdf filename which
will open the specific file from the ftp server
Steps 1 and 2 are working fine. I can log into our website
and see the list of files in the directory. Step 3 is the one that
isn't working the way I thought it would. The only way I can get it
to work is to include the username/password in the ftp link:
ftp://username
[email protected]/pdfdir/file1.pdf
For security reasons, I don't want to do that. (I've tried
both hard-coding the ftp link and I've tried using the URL Query
Column from my "listdir" query object. )
I thought that once the connection to the FTP server was
open, I wouldn't need to specify the username/password again within
that cfm page. However, it seems that each of these URL's (ftp
links) is a new connection to the FTP server.
Is there another way to do what I'm trying to do - open the
file via ftp link without having to include the username/password
within the URL?
Many thanks.

The CFFTP tag has its own connection between ColdFusion and
the FTP server, one connection per set of credentials.
The FTP hyperlink is a distinct connection between the user's
browser and the FTP server, completely excluding ColdFusion server.
I don't know of a way to provide a direct link to the file as
it is located on the FTP server without providing the credentials
in the URL. However, the obvious answer is to copy the file local
to the ColdFusion server and send a redirect to the client
(cflocation) to point their browser at the local file. Then
(assuming CFMX 7) using Application.cfc's onSessionEnd event,
discard the previously copied file off the server.

Cfftp and Winscp

Gentlemen,
I am writing a script to connect o a remote SFTP server. The server that I am trying to login to requires a "private key" which is a file that the remote authentication process uses to log you in. In Winscp I browse to the file that is my key. That is in addition to my host server name, username and password. Using cfftp I can specify the host, the username and the password but I don't know what to do when it comes to this file which is my key: filename.ppk.
Any thoughts anybody?
And I need to pass that file so my connection gets established.
Thanks!
Ysais.

Thanks Mack, Now I am trying to extablish a secure FTP connection and my code is complaining about the attribute connection. I am really troubled since I need to specify a connection name to be able to reuse my connection again. This is my code:
<cftry>
<cfftp action="open" connection="VeratadFtpConnection" fingerprint="#variables.fingerprint#" key=\\server\path\key.ppk passphrase="passphrase" secure="no" server="ftp.server.com" stoponerror="no" username="someuser">
<cfcatch type="any">
<cfoutput>
#cfcatch.Message# 
#cfcatch.Detail# 
#cfcatch.Type# 
</cfoutput>
</cfcatch>
</cftry>

Cfftp connection attribute issue

Hi community!
I am trying to extablish a secure FTP connection and my code is complaining about the attribute connection. I am really troubled since I need to specify a connection name to be able to reuse my connection again. This is my code:
<cftry>
<cfftp action="open" connection="VeratadFtpConnection" fingerprint="#variables.fingerprint#" key=\\server\path\key.ppk passphrase="passphrase" secure="no" server="ftp.server.com" stoponerror="no" username="someuser">
<cfcatch type="any">
<cfoutput>
#cfcatch.Message# 
#cfcatch.Detail# 
#cfcatch.Type# 
</cfoutput>
</cfcatch>
</cftry>
I'd appreciate any thoughts!
Thanks!

Go to Multiprovider change mode.
Go to Nav. Attribs Tab - selection the desired Nav. Attribs.
Go to Identification tab - Select the desired Nav. Attribs.
Good Luck,
AT

CFFTP SFTP Connection problems - CF8

I have run into a brick wall trying to make the secure
connection.
My code is as follows
<cfftp action = "open"
username = "MyUser"
connection = "MyConnection"
password = "MyPassword"
fingerprint = "fi:ng:er:pr:in:th:er:e"
server = "IP Address"
port="22"
secure = "yes">
I have confirmed the fingerprint (technically not required)
and the port.
Using FileZilla and the same parameters, I can make the SFTP
connection with no problem.
Yet in CF8 on my CrystalTech hosted account, I can't. I am
working with their support team, but have been unsuccessful for
several days.
Has anyone actually ever done this in real life? I am falling
days behind on this project.

As it turns out, the webhost serving CF8 (CrystalTech) has
blocked port 22 traffic. Port 22 is the standard port for SFTP
traffic. I am working with the support team there trying to get
them to permit traffic on this port. It doesn't look hopeful. I
have now lost a good 20+ days on this issue.
Does anyone have a workaround for using SFTP in CFFTP on a
CF8 server? Need to move a file from the CF8 server to a different
server - different location... securely.

Secure, Remote File Storage

I have a general architecture question that I wanted to pose
to everyone for feedback. I have an Extranet application based on
CF 6.1 Enterprise which is designed to provide basic document
management services by allowing people to upload and download
files. The application is designed with CF and IIS on the same
server, with a firewall, reverse proxy, etc. in front of the
server. I have a security concern with the application in that the
files that are uploaded are stored on the Extranet server. This was
originally done as it was the easiest solution and made the Verity
indexing of the document easy. However, I'd like to move the
documents off of the server for security reasons, but 1) still give
people the ability to upload and download docs through the Extranet
CD application and 2) still index the documents to allow user
searches. My question is how have others of you done similar stuff?
What is the best way to move the files (cfftp, mapped OS drive,
etc.)? Does indexing the files require a separate Verity K2
license? If I recall, Verity K2 is something like $65k, which
wouldn't be my first choice. Any thoughts?

Kim - thanks for the quick response. Indeed, I think that a
mapped drive is likely the easiest, quickest solution. I'm not
sure, however, how much additional security it affords if the
Extranet server was to become compromised. I suspect using FTP to
transfer the files may be more secure. What I'm wondering if there
are other ways (maybe more typical or more secure) and what can be
done to effectively index the documents for searchability without a
costly Verity K2 implementation. Perhaps FTP and Verity K2 is the
answer, but I'm interested in feedback from people that have
tackled this problem like you. Thanks again.

Coldfusion 9 CFFTP Tag

Hi, hope somebody can help!
I'm running an evaluation on the new Coldfusion 9 and trying to use the <CFFTP> tag to connect to a remote SFTP server. The server version is:-
SSH-2.0-OpenSSH_4.7p1 Debian-8ubuntu1.2
My Code is:-
<cfftp action = "open"
username = "myusername"
connection = "MyConnection"
password = "mypassword"
server = "myserver.com"
secure = "yes">
Successful: <cfoutput>#cfftp.succeeded#</cfoutput>
<cfdump var ="#MyConnection#" label="connection">
This is what is returned:-
An error occurred while establishing an sFTP connection.
Verify your connection attributes: username, password, server, fingerprint, port, key, connection, proxyServer, and secure (as applicable). Error: Session.connect: java.io.IOException: invalid data.
The error occurred in /Applications/ColdFusion9/wwwroot/test/sftp.cfm: line 12
10 :
11 : server = "10.1.3.43"
12 : secure = "yes">
13 :
14 : Successful: <cfoutput>#cfftp.succeeded#</cfoutput>
Resources:
Check the ColdFusion documentation to verify that you are using the correct syntax.
Search the Knowledge Base to find a solution to your problem.
Browser
Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_1; en-us) AppleWebKit/531.9 (KHTML, like Gecko) Safari/412.0
Remote Address
0:0:0:0:0:0:0:1%0
Referrer
Date/Time
13-Oct-09 11:32 PM
Stack Trace
at cfsftp2ecfm1948882534.runPage(/Applications/ColdFusion9/wwwroot/test/sftp.cfm:12) at cfsftp2ecfm1948882534.runPage(/Applications/ColdFusion9/wwwroot/test/sftp.cfm:12)
com.jcraft.jsch.JSchException: Session.connect: java.io.IOException: invalid data
 at com.jcraft.jsch.Session.connect(Unknown Source)
 at com.jcraft.jsch.Session.connect(Unknown Source)
 at coldfusion.tagext.net.SftpHandler.getConnection(SftpHandler.java:265)
 at coldfusion.tagext.net.SftpHandler.createConnection(SftpHandler.java:76)
 at coldfusion.tagext.net.FtpTag.doStartTag(FtpTag.java:675)
 at coldfusion.runtime.CfJspPage._emptyTcfTag(CfJspPage.java:2722)
 at cfsftp2ecfm1948882534.runPage(/Applications/ColdFusion9/wwwroot/test/sftp.cfm:12)
 at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:231)
 at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:416)
 at coldfusion.filter.CfincludeFilter.invoke(CfincludeFilter.java:65)
 at coldfusion.filter.ApplicationFilter.invoke(ApplicationFilter.java:363)
 at coldfusion.filter.RequestMonitorFilter.invoke(RequestMonitorFilter.java:48)
 at coldfusion.filter.MonitoringFilter.invoke(MonitoringFilter.java:40)
 at coldfusion.filter.PathFilter.invoke(PathFilter.java:87)
 at coldfusion.filter.ExceptionFilter.invoke(ExceptionFilter.java:70)
 at coldfusion.filter.ClientScopePersistenceFilter.invoke(ClientScopePersistenceFilter.java:28)
 at coldfusion.filter.BrowserFilter.invoke(BrowserFilter.java:38)
 at coldfusion.filter.NoCacheFilter.invoke(NoCacheFilter.java:46)
 at coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:38)
 at coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22)
 at coldfusion.filter.CachingFilter.invoke(CachingFilter.java:53)
 at coldfusion.CfmServlet.service(CfmServlet.java:200)
 at coldfusion.bootstrap.BootstrapServlet.service(BootstrapServlet.java:89)
 at jrun.servlet.FilterChain.doFilter(FilterChain.java:86)
 at coldfusion.monitor.event.MonitoringServletFilter.doFilter(MonitoringServletFilter.java:42)
 at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:46)
 at jrun.servlet.FilterChain.doFilter(FilterChain.java:94)
 at jrun.servlet.FilterChain.service(FilterChain.java:101)
 at jrun.servlet.ServletInvoker.invoke(ServletInvoker.java:106)
 at jrun.servlet.JRunInvokerChain.invokeNext(JRunInvokerChain.java:42)
 at jrun.servlet.JRunRequestDispatcher.invoke(JRunRequestDispatcher.java:286)
 at jrun.servlet.ServletEngineService.dispatch(ServletEngineService.java:543)
 at jrun.servlet.http.WebService.invokeRunnable(WebService.java:172)
 at jrunx.scheduler.ThreadPool$DownstreamMetrics.invokeRunnable(ThreadPool.java:320)
 at jrunx.scheduler.ThreadPool$ThreadThrottle.invokeRunnable(ThreadPool.java:428)
 at jrunx.scheduler.ThreadPool$UpstreamMetrics.invokeRunnable(ThreadPool.java:266)
 at jrunx.scheduler.WorkerThread.run(WorkerThread.java:66)
I've tried running this from both a Mac and Windows platform.
Incidentally, I also took the example from the Adobe Coldfusion 9 live docs and got the same error.
If I can't get this to work then it's a show stopper for the use of CF within our environment.
Best Regards,
Carl Bourne
Message was edited by: CarlB Just tried using the above to connect to a SSH (SSH-2.0-OpenSSH_5.2) server running on MAC OSX. I got the same error.

That did not fix my problem specifically, but it is related, and it gave me enough insight to find a work-around without changing jar files.
It seems that ColdFusion loads "com.rsa.jsafe.provider.JsafeJCE" as the default security provider at startup. Perhaps there is something wrong with this provider like the “BC” provider mentioned in your link. Working with that, I was able to dump my providers into an array where the first array position represents the default provider and shows JsafeJCE as the default:
<cfset providerMethods = CreateObject('java','java.security.Security')>
You can dump the providers:
<cfdump var="#providerMethods.getProviders()#">
I then made a copy of the provider like:
<cfset jSafeProvider = providerMethods.getProvider('JsafeJCE')>
I then removed it from the provider array:
<cfset providerMethods.removeProvider('JsafeJCE')>
I then made my sFTP call and this time it was successful.
<cfftp action="open"
 secure="true”…
I then put the provider back into the array in position 1 – the default:
<cfset providerMethods.insertProviderAt(jSafeProvider,1)>
I can’t say I know exactly what’s wrong and I certainly don’t want to remove the JsafeJCE provider from the default position for forever. I’ll let Adobe come up with a true fix, but for now, this provides me with a work-around so I can use sFTP. I’m sure JsageJCE is used/required for some other encryption, so you’ll have to watch for other issues while it’s not part of the provider array. The quicker you can get it out/in, probably the better. My sFTP only runs a few times, so I feel OK with the possible side effects. Maybe someone can take it from here and find a better solution and not a simple work-around.

Coldfusion secure FTP & digital certificates

Hello !
I am currently in the process of developing a corporate CF intranet site that is behind a corporate firewall and part of the application will need to send a data file (FTP put) to a remote FTP server using secured FTP (FTPS). I have never used Coldfusion before for either secured or unsecured FTP. I am planning on using the CFFTP tag to open the connection and send the data file but I have a number of other questions regarding the use & installation of the digital certificates.:
Current development environment setup:
CF version 9 standard edition running on Windows Server 2008 R2
Microsoft IIS 7
Current production environment setup:
CF version 9 enterprise edition running on Windows Server 2008 R2
Microsoft IIS 7
1. The data file that is being created must be sent to a finanacial institution and they will be providing a digital certificate (p12 format) to me. What do I do with that certificate once I get it ? I have installed SSL certificates before on http web sites with IIS without any issues but I am not sure what to do with the certificate for secured FTP. Do I import the certificate into IIS using the MMC snap on or does the certificate need to be integrated into Coldfusion in some other way and if so, what needs to be done ?
2. What other steps need to be prior to being able to use the CFFTP tag for a secured FTP send ?
I would appreciate as much help as possible as I haven't used CF for FTP before.
Thank you.

Dave,
Thank you for answering.
1. I have imported the certificate into the cacerts file by using the following command:
 keytool -import -keystore ../lib/security/cacerts -alias x -file c:\downloads\y
 where x was the alias name I assigned and y was the certificate name (extension of 'der').
I tried importing a p12 and p7b certificate but neither of those worked. I received the message 'Not a valid X.509 Certificate' from the command. I then successfully imported a Base64 certificate (der). I believe the certificate has been successfully imported because I ran the following and it shows the MD5 fingerprint:
 keytool -list -alias x -keystore ../lib/security/cacerts
 where x is my alias name I assigned in the original import
2. I then ran the following CFM command replacing the '*'s with the appropriate server name, user name, and password
 <cfftp action="open" connection="conn1" secure="yes" server="********" username="******" password="*****" port="21"
 </cfftp>
 I am getting the CF error
An error occurred while establishing an sFTP connection.
Verify your connection attributes: username, password, server, fingerprint, port, key, connection, proxyServer, and secure (as applicable). Error: User Authentication failed.
Any suggestions or help would be appreciated.
Thank you.

Issue with CFFTP - Putfile

I took on a new position where I have the task of going through the previous developers code and making changes/fixes. I am currently looking over a page that is grabbing a file and putting it somewhere. My issue is, that I can't seem to figure out if the variables the previous developer has in place are being called from somewhere, or if they are just placeholders. There is reference to a function that is called "TransferFile", but as I don't have alot of experience with the CFFTP tag, I just cant tell what is going on. I have underlined the variables in question. Also I am wondering if anything special has to be done since I am putting the file through a SFTP connection. The server in which I am putting the file is a linux server. I will post the code below.

<cffunction name="transferFile" access="public" returnType="void" output="true" hint="Transfers the voice file to the Asterisk server via FTP.">
<cfset var ftpServer = "">

 <cfftp action="open"
 connection="sftpServer"
 server="#"
 username = "manyoh"
 password = "many"
 fingerprint = "#"
 timeout="60"
 port="22"
 secure = "yes" />

 <cfftp action="putFile"
 connection="ftpServer"
 localFile="#this.getDefaultPath() & this.getFileName()#"
 remoteFile="#this.getFileName()#" />

cfdumping the this scope will show you the file names.

Secure CFFTP

Similar Messages

Maybe you are looking for