SFTP Issue on ColdFusion 2016

Question

We recently migrated our applications from ColdFusion 9 to ColdFusion 2016. One of our applications SFTPs files using cfftp tag.

We noticed that CFFTP tag with ColdFusion 2016 no longer works. We worked with our internal IT team and the remote SFTP server team to resolve all issues with firewall and when we connect with WINSCP from our end, we were able to successfully connect to the remote server but when we use CFFTP from ColdFusion 2016, it seems stuck in the CFFTP tag. It does not even time out.

Initially we thought it's the same code as CF9 and since CFFTP worked in CF9, it should work in CF 2016 but it did not. Later we realized that some of the tags were deprecated and we corrected that and ran the tests. But our efforts were in vain.

We get this error message in the FTP log: "Information","ajp-nio-8016-exec-1","06/20/18","14:06:00","","Starting FTP request {action='open'}"

We used the below code to connect:

<cfftp action = "open"
        connection = "myConnection1"
        fingerprint="aa:bb:cc:dd:ee:ff:gg:hh:ii:jj:kk:ll:mm:nn:oo"
        passive="yes"
        password="xxxxx"
        port="22"
        secure = "yes"
        server = "1.1.1.1"  
        stopOnError = "yes" 
        timeout="30"
        username = "xyz">

We are currently stuck unable to SFTP through ColdFusion.

Please assist.

KP

Answer 1

I believe this was a known bug that was fixed in ColdFusion 2016 (you can use the updater tool). More specifically it was an outdated jar file. Other versions of ColdFusion have fixed this by copying the updated jar file in CF2016 and placing it in the bin folder of the older CF version.

Try running the CF updater to see if it fixes your issue. If it doesn't, make sure you are using an updated JRE (there are specific fixes that won't take affect unless you are running a more recent 1.8 JRE).