Hi Alvaro, Hi Michael,

I had the same problems here. Disabling the myfaces encryption removed the 
badpadding exception. 

@ViewExpiredException: this simply means that your session is timed out. You 
can use a servlet filter which checks if the session is ok and if not creates a 
new one - or you can define your own myfaces error handler which redirects the 
user to the default page when it catches a ViewExpiredException.

These tricks helped me to avoid the view expired exception and the crypto bad 
padding exception.

Please consider that client side state saving with disabled encryption may be a 
security problem. When using the server side saving look for 
NotSerializableExceptions in your logfile.

Regards

Felix

-----Original Message-----
From: alvaro tovar [mailto:[email protected]] 
Sent: Thursday, February 12, 2009 10:11 PM
To: MyFaces Discussion
Subject: Re: BadPadding Exception and more

hello
i have this error when the session is time out, but i don't kown how i
can solve this.
regards

2009/2/12 Heiß Michael <[email protected]>:
>
> Hi,
>
> I have created a webapplication using myfaces 1.2.6 / tomahawk 1.1.8 and
> richfaces 3.2.2 and tested this application successfully using a local
> tomcat 6 webserver.
> Now i tried to depoly the application to our windows 2003 x64 testserver who
> also runs tomcat 6, but now i got one error message after the other.
>
> When i call an action or actionListener i get and BadPaddingException or
> ViewExpiredException every time.
> I have read the issue MYFACES-1838 but the workarounds (set secret, turn off
> encryption, server side state saving) did not help me. Even they lead to new
> exceptions that tells me that the stream header is currupt.
> (StreamCorruptedException)
>
> Now i simply do not know where to search for errors, because the application
> is working on my local server tomcat server without problems.
>
> Thanks in advance,
> Michael
> --
> View this message in context: 
> http://www.nabble.com/BadPadding-Exception-and-more-tp21984713p21984713.html
> Sent from the MyFaces - Users mailing list archive at Nabble.com.
>
>

Reply via email to