CAS 4.1.9 error, Unable to correctly extract the Initialization Vector or ciphertext

[Yan Zhou]

Hi there,

Running CAS 4.1.9 overlay, intermittently seeing this error repeatedly.  Any idea what could be wrong?

Thanks,

Yan

this is my host.name in cas.properties.

host.name=qacas01.qa.medplus.com

2016-08-29 14:23:34,871 ERROR [org.jasig.cas.util.BinaryCipherExecutor] - Unable to correctly extract the Initialization Vector or ciphertext.

org.apache.shiro.crypto.CryptoException: Unable to correctly extract the Initialization Vector or ciphertext.

        at org.apache.shiro.crypto.JcaCipherService.decrypt(JcaCipherService.java:378)

        at org.jasig.cas.util.BinaryCipherExecutor.decode(BinaryCipherExecutor.java:120)

        at org.jasig.cas.util.BinaryCipherExecutor.decode(BinaryCipherExecutor.java:42)

        at org.jasig.cas.web.flow.CasWebflowCipherBean.decrypt(CasWebflowCipherBean.java:58)

        at org.jasig.spring.webflow.plugin.EncryptedTranscoder.decode(EncryptedTranscoder.java:105)

        at org.jasig.spring.webflow.plugin.ClientFlowExecutionRepository.getFlowExecution(ClientFlowExecutionRepository.java:90)

        at org.springframework.webflow.executor.FlowExecutorImpl.resumeExecution(FlowExecutorImpl.java:168)

        at org.springframework.webflow.mvc.servlet.FlowHandlerAdapter.handle(FlowHandlerAdapter.java:228)

        at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:959)

        at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:893)

        at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:967)

        at org.springframework.web.servlet.FrameworkServlet.doPost(FrameworkServlet.java:869)

        at javax.servlet.http.HttpServlet.service(Unknown Source)

        at org.springframework.web.servlet.FrameworkServlet.service(FrameworkServlet.java:843)

        at javax.servlet.http.HttpServlet.service(Unknown Source)

        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Unknown Source)

        at org.apache.catalina.core.ApplicationFilterChain.doFilter(Unknown Source)

        at org.apache.tomcat.websocket.server.WsFilter.doFilter(Unknown Source)

        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Unknown Source)

        at org.apache.catalina.core.ApplicationFilterChain.doFilter(Unknown Source)

        at org.apache.catalina.filters.CorsFilter.handleSimpleCORS(Unknown Source)

        at org.apache.catalina.filters.CorsFilter.doFilter(Unknown Source)

        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Unknown Source)

        at org.apache.catalina.core.ApplicationFilterChain.doFilter(Unknown Source)

        at org.jasig.cas.security.RequestParameterPolicyEnforcementFilter.doFilter(RequestParameterPolicyEnforcementFilter.java:250)

        at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:344)

        at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:261)

        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Unknown Source)

        at org.apache.catalina.core.ApplicationFilterChain.doFilter(Unknown Source)

        at org.jasig.inspektr.common.web.ClientInfoThreadLocalFilter.doFilter(ClientInfoThreadLocalFilter.java:62)

        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Unknown Source)

        at org.apache.catalina.core.ApplicationFilterChain.doFilter(Unknown Source)

        at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:85)

        at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)

        at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:344)

        at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:261)

        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Unknown Source)

        at org.apache.catalina.core.ApplicationFilterChain.doFilter(Unknown Source)

        at org.apache.catalina.core.StandardWrapperValve.invoke(Unknown Source)

        at org.apache.catalina.core.StandardContextValve.invoke(Unknown Source)

        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(Unknown Source)

        at org.apache.catalina.core.StandardHostValve.invoke(Unknown Source)

        at org.apache.catalina.valves.ErrorReportValve.invoke(Unknown Source)

        at org.apache.catalina.valves.AccessLogValve.invoke(Unknown Source)

        at org.apache.catalina.valves.RemoteIpValve.invoke(Unknown Source)

        at org.apache.catalina.core.StandardEngineValve.invoke(Unknown Source)

        at org.apache.catalina.connector.CoyoteAdapter.service(Unknown Source)

        at org.apache.coyote.http11.AbstractHttp11Processor.process(Unknown Source)

        at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(Unknown Source)

        at org.apache.tomcat.util.net.AprEndpoint$SocketWithOptionsProcessor.run(Unknown Source)

        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)

        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)

        at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(Unknown Source)

        at java.lang.Thread.run(Thread.java:745)

Caused by: java.lang.NullPointerException

        at java.lang.System.arraycopy(Native Method)

        at org.apache.shiro.crypto.JcaCipherService.decrypt(JcaCipherService.java:370)

        ... 53 more

[Colin Wilkinson]

We are getting the same issue in production, did you manage to solve this