Thanks Charlie,
I do not want to run CF9 and CF11 at the same time.
The last security update applied for our CF9.0.1 was
http://helpx.adobe.com/coldfusion/kb/coldfusion-security-hotfix.html
1. Does it mean that the security issues you were referring to in your previous
e-mail(Separately, there’s another security issue which could hurt you
depending on the exact version of CF9 you were running. If it was 9.0.2, you’re
ok. If it was 9..0.0 or 9.0.1, then it depends on whether you had applied a
couple of security updates released in 2011 and 2012 (or the latest cumulative
hotfix for those releases which included them). If you did not, then when you
move to CF10 or 11, those will include the security fixes, and you may find
problems because of that changed behavior--which you WOULD have hit on 9 but
did not because you’d not applied those updates) may not apply to us since the
update was done in early 2012?
2. I am told to ask Edgeweb test this(install CF11 on Win 2008 server OS with
IIS) on one of their servers, see if our web applications work and if so
redirect users to the new server or change the IP address through the DNS when
everything works out well so that users access the new server. I do not know if
Edgeweb would provide help like that. What do you feel?
Regardless for a move like this we would need your help to ensure nothing goes
wrong. We just need to reserve a time on your calendar.
I appreciate all your assistance and time.
Thanks
From: Charlie Arehart <[email protected]>
To: [email protected]
Sent: Tuesday, December 23, 2014 4:40 PM
Subject: RE: [ACFUG Discuss] Moving from ColdFusion 9 standard to ColdFusion
11 standard
#yiv4227479217 #yiv4227479217 -- _filtered #yiv4227479217
{font-family:Helvetica;panose-1:2 11 6 4 2 2 2 2 2 4;} _filtered #yiv4227479217
{panose-1:2 4 5 3 5 4 6 3 2 4;} _filtered #yiv4227479217
{font-family:Calibri;panose-1:2 15 5 2 2 2 4 3 2 4;} _filtered #yiv4227479217
{font-family:Tahoma;panose-1:2 11 6 4 3 5 4 4 2 4;}#yiv4227479217
#yiv4227479217 p.yiv4227479217MsoNormal, #yiv4227479217
li.yiv4227479217MsoNormal, #yiv4227479217 div.yiv4227479217MsoNormal
{margin:0in;margin-bottom:.0001pt;font-size:12.0pt;}#yiv4227479217 a:link,
#yiv4227479217 span.yiv4227479217MsoHyperlink
{color:blue;text-decoration:underline;}#yiv4227479217 a:visited, #yiv4227479217
span.yiv4227479217MsoHyperlinkFollowed
{color:purple;text-decoration:underline;}#yiv4227479217
p.yiv4227479217MsoAcetate, #yiv4227479217 li.yiv4227479217MsoAcetate,
#yiv4227479217 div.yiv4227479217MsoAcetate
{margin:0in;margin-bottom:.0001pt;font-size:8.0pt;}#yiv4227479217
p.yiv4227479217msonormal, #yiv4227479217 li.yiv4227479217msonormal,
#yiv4227479217 div.yiv4227479217msonormal
{margin-right:0in;margin-left:0in;font-size:12.0pt;}#yiv4227479217
p.yiv4227479217msochpdefault, #yiv4227479217 li.yiv4227479217msochpdefault,
#yiv4227479217 div.yiv4227479217msochpdefault
{margin-right:0in;margin-left:0in;font-size:12.0pt;}#yiv4227479217
span.yiv4227479217msohyperlink {}#yiv4227479217
span.yiv4227479217msohyperlinkfollowed {}#yiv4227479217
span.yiv4227479217emailstyle17 {}#yiv4227479217 p.yiv4227479217msonormal1,
#yiv4227479217 li.yiv4227479217msonormal1, #yiv4227479217
div.yiv4227479217msonormal1
{margin:0in;margin-bottom:.0001pt;font-size:12.0pt;}#yiv4227479217
span.yiv4227479217msohyperlink1
{color:blue;text-decoration:underline;}#yiv4227479217
span.yiv4227479217msohyperlinkfollowed1
{color:purple;text-decoration:underline;}#yiv4227479217
span.yiv4227479217emailstyle171 {color:#1F497D;}#yiv4227479217
p.yiv4227479217msochpdefault1, #yiv4227479217 li.yiv4227479217msochpdefault1,
#yiv4227479217 div.yiv4227479217msochpdefault1
{margin-right:0in;margin-left:0in;font-size:10.0pt;}#yiv4227479217
span.yiv4227479217BalloonTextChar {}#yiv4227479217
span.yiv4227479217EmailStyle29 {color:#1F497D;}#yiv4227479217
.yiv4227479217MsoChpDefault {font-size:10.0pt;} _filtered #yiv4227479217
{margin:1.0in 1.0in 1.0in 1.0in;}#yiv4227479217 div.yiv4227479217WordSection1
{}#yiv4227479217 If your point 1 is indeed a question for us, the answer is
“yes”. That’s what I meant in saying “That could have problems due to web
server configuration issues.” It’s something that can very much be brittle. The
settings in IIS for CF9 are quite different from those for CF10 and 11, and
often folks will find that the way things were setup (by CF, in IIS) for 9 will
cause problems when 10/11 try to set things up. It’s as if Adobe did things in
a way that presumes a greenfield (no current CF9 config settings in IIS).
The best thing for most would be to run the web server config tool for 9 and
remove the old CF9 settings first, but even that may not be enough for some
people. And of course, if you want to run 9 and 10/11 at the same time, that’s
even tougher because then you can’t remove the old settings.
It’s too much to get into here, and I’ve been meaning to do a blog entry on it
(recently), but have been pressed for time. I’ll just say that if you do it,
and things don’t work, I can help you recover from it, perhaps in just minutes,
but I can’t easily explain it in email here.
You ask, “2. How do I find out if the security updates for 2012 were applied or
not? The server admins who might have done it are out of office now.”. See:
http://www.carehart.org/blog/client/index.cfm/2012/6/18/what_hotfixes_have_been_applied
And yes, I think you’ll find that Edgeweb would help you with this if you were
moving to their servers. If there was a level of help you needed, they would
likely refer you to me (I have a relationship with them, helping their clients
do server troubleshooting, as I do for anyone in the CF community. For more on
that, see the consulting page at carehart.org, but I see you saying in closing
that getting help is tough. Just know that it need not be on-site, and it need
not take long/be expensive. I can often help solve in minutes what may take
others hours on their own, as this is all I do all day each day. And I’m also
teaching you as we go, so it’s not just a solution but making you more
self-sufficient.)
Hope that helps.
/charlie
From: Chris [mailto:[email protected]]
Sent: Tuesday, December 23, 2014 12:40 PM
To: Charlie Arehart; [email protected]
Subject: Re: [ACFUG Discuss] Moving from ColdFusion 9 standard to ColdFusion 11
standard Charlie, Yes, this is very helpful. Thanks so much. I need to
upgrade the machine running CF9 to CF11. 1. Can this also cause web server
configuration issues? I will download CF11 with update 3 or later to ensure
the secure profile does not break/hinder any existing web applications. I am
running CF 9.0.1. 2. How do I find out if the security updates for 2012 were
applied or not? The server admins who might have done it are out of office now.
I will review the "What's new" documents for CF11 and try everything on a test
server. We are advised to go with Edgewebhosting but I do not know if they
would help with upgrades like this.
You are a valuable resource and your blogs are very helpful. I will reach out
to you, but the process of getting a consultant takes a while in my area.
Thanks again for all your advice and time.
