Re: ViewExpiredException: MyFaces & PrimeFaces

SANTINI, Rafael Thu, 02 Sep 2010 07:34:07 -0700

Hi Leonardo,

I'm getting the following exception with theses two parameters:


 <context-param>
   <param-name>org.apache.myfaces.MAC_SECRET</param-name>
   <param-value>en05kt</param-value>
 </context-param>

 <context-param>
   <param-name>org.apache.myfaces.SECRET</param-name>
   <param-value>7yrjw9</param-value>
 </context-param>

02/09/2010 11:31:41 javax.faces.webapp._ErrorPageWriter handleThrowable
SEVERE: An exception occurred

javax.faces.FacesException: java.security.InvalidKeyException: Invalid keylength: 5 bytesatorg.apache.myfaces.shared_impl.util.StateUtils.encrypt(StateUtils.java:332)atorg.apache.myfaces.shared_impl.util.StateUtils.construct(StateUtils.java:237)atorg.apache.myfaces.renderkit.html.HtmlResponseStateManager.writeViewStateField(HtmlResponseStateManager.java:104)atorg.apache.myfaces.renderkit.html.HtmlResponseStateManager.writeState(HtmlResponseStateManager.java:94)atjavax.faces.render.ResponseStateManager.writeState(ResponseStateManager.java:67)atorg.apache.myfaces.application.jsp.JspStateManagerImpl.writeState(JspStateManagerImpl.java:510)atcom.sun.facelets.FaceletViewHandler.renderView(FaceletViewHandler.java:620)atorg.apache.myfaces.lifecycle.RenderResponseExecutor.execute(RenderResponseExecutor.java:41)atorg.apache.myfaces.lifecycle.LifecycleImpl.render(LifecycleImpl.java:140)atorg.apache.myfaces.custom.ppr.PPRLifecycleWrapper.render(PPRLifecycleWrapper.java:84)

       at javax.faces.webapp.FacesServlet.service(FacesServlet.java:187)

atorg.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)atorg.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)atorg.apache.myfaces.webapp.filter.ExtensionsFilter.doFilter(ExtensionsFilter.java:285)atorg.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)atorg.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)atorg.apache.myfaces.webapp.filter.ExtensionsFilter.doFilter(ExtensionsFilter.java:341)atorg.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)atorg.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)atorg.springframework.orm.hibernate3.support.OpenSessionInViewFilter.doFilterInternal(OpenSessionInViewFilter.java:198)atorg.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:76)atorg.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)atorg.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)atbr.com.biblioshop.seguranca.web.SegurancaFilter.doFilter(SegurancaFilter.java:100)atorg.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:236)atorg.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:167)atorg.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)atorg.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)atbr.com.biblioshop.framework.web.filters.CharsetFilter.doFilter(CharsetFilter.java:39)atorg.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)atorg.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)atorg.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)atorg.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)atorg.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)atorg.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)atorg.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)atorg.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)atorg.apache.coyote.http11.Http11AprProcessor.process(Http11AprProcessor.java:859)atorg.apache.coyote.http11.Http11AprProtocol$Http11ConnectionHandler.process(Http11AprProtocol.java:579)atorg.apache.tomcat.util.net.AprEndpoint$Worker.run(AprEndpoint.java:1555)

       at java.lang.Thread.run(Thread.java:619)
Caused by: java.security.InvalidKeyException: Invalid key length: 5 bytes
       at com.sun.crypto.provider.DESCipher.engineGetKeySize(DashoA13*..)
       at javax.crypto.Cipher.b(DashoA13*..)
       at javax.crypto.Cipher.a(DashoA13*..)
       at javax.crypto.Cipher.a(DashoA13*..)
       at javax.crypto.Cipher.a(DashoA13*..)
       at javax.crypto.Cipher.init(DashoA13*..)
       at javax.crypto.Cipher.init(DashoA13*..)

atorg.apache.myfaces.shared_impl.util.StateUtils.encrypt(StateUtils.java:314)

       ... 40 more

Thanks,

Rafael Santini

----- Original Message -----From: "Leonardo Uribe" <[email protected]>

To: "MyFaces Discussion" <[email protected]>
Sent: Thursday, September 02, 2010 11:05 AM
Subject: Re: ViewExpiredException: MyFaces & PrimeFaces

Hi

If the code fails there, means the MAC secret was reset.

Try set a MAC secret using the web param org.apache.myfaces.MAC_SECRET to
prevent that secret to be reinitialized when the application is restarted
(the same goes for org.apache.myfaces.SECRET). That should work.

regards,

Leonardo

2010/9/2 Jakob Korherr <[email protected]>

Hi,

Seems like the message authentication code (MAC) somehow fails, becausethe

first ViewExpiredException comes from this code:

if (!isMacEqual)
{
   throw new ViewExpiredException();
}

Can you try your code with MyFaces 2.0.0, please? We don't have the MAC
check in that version.

Regards,
Jakob

2010/9/1 SANTINI, Rafael <[email protected]>

> Hi Leonardo,
>
> Follow the complete log. I couldn't find any wrong.
>
> 01/09/2010 10:27:43 org.apache.catalina.core.AprLifecycleListener init
> INFO: The APR based Apache Tomcat Native library which allows optimal
> performance in production environments was not found on the
> java.library.path: C:\Arquivos de
>
programas\Java\jdk1.6.0_18\bin;.;C:\WINDOWS\Sun\Java\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\ARQUIV~1\Borland\Delphi5\Projects\Bpl;C:\ARQUIV~1\Borland\Delphi5\Bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Arquivos
> de programas\MySQL\MySQL Server
> 5.0\bin;C:\ferramentas\putty;C:\ferramentas\bzip2;C:\Arquivos de
> programas\Firebird\Firebird_2_0\bin;C:\Arquivos de
> programas\Java\jdk1.6.0_18\bin;C:\Arquivos de programas\MySQL\MySQL
Server
>
5.1\bin;C:\ARQUIV~1\Borland\Delphi6\Bin;C:\ARQUIV~1\Borland\Delphi6\Projects\Bpl;C:\Arquivos
> de programas\Microsoft SQL
> Server\80\Tools\BINN;C:\software\isis\cisis\bin;C:\Arquivos de
> programas\Arquivos comuns\Ahead\Lib\
> 01/09/2010 10:27:43 org.apache.coyote.http11.Http11Protocol init
> INFO: Initializing Coyote HTTP/1.1 on http-8080
> 01/09/2010 10:27:43 org.apache.catalina.startup.Catalina load
> INFO: Initialization processed in 234 ms
> 01/09/2010 10:27:43 org.apache.catalina.core.StandardService start
> INFO: Starting service Catalina
> 01/09/2010 10:27:43 org.apache.catalina.core.StandardEngine start
> INFO: Starting Servlet Engine: Apache Tomcat/6.0.29
> 01/09/2010 10:27:43 org.apache.catalina.startup.HostConfig
deployDescriptor
> INFO: Deploying configuration descriptor autocomplete.xml
> 01/09/2010 10:27:44 org.apache.catalina.core.StandardContext
> addApplicationListener
> INFO: The listener
> "org.apache.myfaces.webapp.StartupServletContextListener" is already
> configured for this context. The duplicate definition has been ignored.
> 01/09/2010 10:27:44
org.apache.myfaces.webapp.StartupServletContextListener
> dispatchInitializationEvent
> INFO: Checking for plugins:org.apache.myfaces.FACES_INIT_PLUGINS
> 01/09/2010 10:27:44 org.apache.myfaces.shared_impl.config.MyfacesConfig
> getBooleanInitParameter
> INFO: No context init parameter
> 'org.apache.myfaces.RENDER_CLEAR_JAVASCRIPT_FOR_BUTTON' found, using
default
> value false
> 01/09/2010 10:27:44 org.apache.myfaces.shared_impl.config.MyfacesConfig
> getBooleanInitParameter
> INFO: No context init parameter
> 'org.apache.myfaces.RENDER_HIDDEN_FIELDS_FOR_LINK_PARAMS' found, using
> default value false
> 01/09/2010 10:27:44 org.apache.myfaces.shared_impl.config.MyfacesConfig
> getBooleanInitParameter
> INFO: No context init parameter

> 'org.apache.myfaces.SAVE_FORM_SUBMIT_LINK_IE' found, using default> value

> false
> 01/09/2010 10:27:44 org.apache.myfaces.shared_impl.config.MyfacesConfig
> getBooleanInitParameter

> INFO: No context init parameter> 'org.apache.myfaces.VIEWSTATE_JAVASCRIPT'

> found, using default value false
> 01/09/2010 10:27:44 org.apache.myfaces.shared_impl.config.MyfacesConfig
> createAndInitializeMyFacesConfig
> INFO: Tomahawk jar not available. Autoscrolling, DetectJavascript,
> AddResourceClass and CheckExtensionsFilter are disabled now.
> 01/09/2010 10:27:44 org.apache.myfaces.shared_impl.config.MyfacesConfig
> createAndInitializeMyFacesConfig
> INFO: Starting up Tomahawk on the MyFaces-JSF-Implementation
> 01/09/2010 10:27:44 org.apache.myfaces.config.FacesConfigurator
> feedStandardConfig
> INFO: Reading standard config META-INF/standard-faces-config.xml
> 01/09/2010 10:27:44 org.apache.myfaces.config.FacesConfigurator
> feedClassloaderConfigurations
> INFO: Reading config :
>
jar:file:/C:/apache-tomcat-6.0.29/webapps/autocomplete/WEB-INF/lib/primefaces-1.1.jar!/META-INF/faces-config.xml
> 01/09/2010 10:27:44 org.apache.myfaces.config.FacesConfigurator
> feedWebAppConfig
> INFO: Reading config /WEB-INF/faces-config.xml