ContentBox unusable - site and admin are down with the same error

I do get to the login screen, but when entering the correct credentials I get the following. Incorrect credentials provides a good message saying that credentials were incorrect.

Oops! exception Encountered

Application Execution Exception

Error Type: Expression : [N/A]

Error Messages: The key specified is not a valid key for this encryption: Illegal key size or default parameters.

Use the generateSecretKey method to generate a valid key for this operation.

Tag Context:

ID:

CF_CFPAGE

LINE:

290

Template:

D:\home\mysite.com\wwwroot\modules\contentbox\model\security\SecurityService.cfc

ID:

CF_UDFMETHOD

LINE:

271

Template:

D:\home\mysite.com\wwwroot\modules\contentbox\model\security\SecurityService.cfc

ID:

CF_TEMPLATEPROXY

LINE:

44

Template:

D:\home\mysite.com\wwwroot\modules\contentbox-security\handlers\security.cfc

ID:

CFINVOKE

LINE:

756

Template:

D:\home\mysite.com\wwwroot\coldbox\system\web\Controller.cfc

ID:

CF_UDFMETHOD

LINE:

640

Template:

D:\home\mysite.com\wwwroot\coldbox\system\web\Controller.cfc

ID:

CF_TEMPLATEPROXY

LINE:

236

Template:

D:\home\mysite.com\wwwroot\coldbox\system\Coldbox.cfc

ID:

CF_TEMPLATEPROXY

LINE:

103

Template:

D:\home\mysite.com\wwwroot\Application.cfc

Framework Snapshot

Current Event:

contentbox-security:security.login

Current Layout:

N/A (Module: )

Current View:

N/A

Bug Date:

06/28/2013 10:58:24 AM

Coldfusion ID:

JSessionID=9B2663750A021A4162C17E1DB7E62D75.cfusion

Template Path :

D:\home\ mysite.com\wwwroot\index.cfm

Path Info :

/cbadmin/security/login

Host & Server:

www. mysite.com NTC54-stl

Query String:

Browser:

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/29.0.1547.3 Safari/537.36

Remote Address:

164.159.60.2

Form variables:

Session Storage:

Cookies:

CONTENTBOX_REMEMBER_ME:

“admin”

CFID:

364950

CFTOKEN:

7e93a6a9d1c021e6-72FF7930-5056-8771-545A5375C75DF443

JSESSIONID:

9B2663750A021A4162C17E1DB7E62D75.cfusion

Stack Trace:

coldfusion.runtime.Encryptor$InvalidEncryptionKeyException: The key specified is not a valid key for this encryption: Illegal key size or default parameters.

at coldfusion.runtime.Encryptor.processCipherWork(Encryptor.java:546)

at coldfusion.runtime.Encryptor.decrypt(Encryptor.java:343)

at coldfusion.runtime.Encryptor.decrypt(Encryptor.java:307)

at coldfusion.runtime.Encryptor.decrypt(Encryptor.java:284)

at coldfusion.runtime.CFPage.Decrypt(CFPage.java:5363)

at coldfusion.runtime.CFPage.Decrypt(CFPage.java:5336)

at cfSecurityService2ecfc19904286$funcDECRYPTIT.runFunction(D:\home\ mysite.com\wwwroot\modules\contentbox\model\security\SecurityService.cfc:290)

at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:472)

at coldfusion.runtime.UDFMethod$ArgumentCollectionFilter.invoke(UDFMethod.java:368)

at coldfusion.filter.FunctionAccessFilter.invoke(FunctionAccessFilter.java:55)

at coldfusion.runtime.UDFMethod.runFilterChain(UDFMethod.java:321)

at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:220)

at coldfusion.runtime.CfJspPage._invokeUDF(CfJspPage.java:2659)

at cfSecurityService2ecfc19904286$funcGETREMEMBERME.runFunction(D:\home\ mysite.com\wwwroot\modules\contentbox\model\security\SecurityService.cfc:271)

at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:472)

at coldfusion.runtime.UDFMethod$ReturnTypeFilter.invoke(UDFMethod.java:405)

at coldfusion.runtime.UDFMethod$ArgumentCollectionFilter.invoke(UDFMethod.java:368)

at coldfusion.filter.FunctionAccessFilter.invoke(FunctionAccessFilter.java:55)

at coldfusion.runtime.UDFMethod.runFilterChain(UDFMethod.java:321)

at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:220)

at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:655)

at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:444)

at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:414)

at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2432)

at cfsecurity2ecfc1989621061$funcLOGIN.runFunction(D:\home\ mysite.com\wwwroot\modules\contentbox-security\handlers\security.cfc:44)

at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:472)

at coldfusion.runtime.UDFMethod$ArgumentCollectionFilter.invoke(UDFMethod.java:368)

at coldfusion.filter.FunctionAccessFilter.invoke(FunctionAccessFilter.java:55)

at coldfusion.runtime.UDFMethod.runFilterChain(UDFMethod.java:321)

at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:518)

at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:660)

at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:469)

at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2373)

at coldfusion.tagext.lang.InvokeTag.doEndTag(InvokeTag.java:402)

at coldfusion.runtime.CfJspPage._emptyTcfTag(CfJspPage.java:2800)

at cfController2ecfc1363775195$funcINVOKER.runFunction(D:\home\mysite.com\wwwroot\coldbox\system\web\Controller.cfc:756)

at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:472)

at coldfusion.filter.SilentFilter.invoke(SilentFilter.java:47)

at coldfusion.runtime.UDFMethod$ReturnTypeFilter.invoke(UDFMethod.java:405)

at coldfusion.runtime.UDFMethod$ArgumentCollectionFilter.invoke(UDFMethod.java:368)

at coldfusion.filter.FunctionAccessFilter.invoke(FunctionAccessFilter.java:55)

at coldfusion.runtime.UDFMethod.runFilterChain(UDFMethod.java:321)

at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:220)

at coldfusion.runtime.CfJspPage._invokeUDF(CfJspPage.java:2659)

at cfController2ecfc1363775195$funcRUNEVENT.runFunction(D:\home\mysite.com\wwwroot\coldbox\system\web\Controller.cfc:640)

at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:472)

at coldfusion.filter.SilentFilter.invoke(SilentFilter.java:47)

at coldfusion.runtime.UDFMethod$ReturnTypeFilter.invoke(UDFMethod.java:405)

at coldfusion.runtime.UDFMethod$ArgumentCollectionFilter.invoke(UDFMethod.java:368)

at coldfusion.filter.FunctionAccessFilter.invoke(FunctionAccessFilter.java:55)

at coldfusion.runtime.UDFMethod.runFilterChain(UDFMethod.java:321)

at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:518)

at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:660)

at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:469)

at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2373)

at cfColdbox2ecfc171007924$funcPROCESSCOLDBOXREQUEST.runFunction(D:\home\mysite.com\wwwroot\coldbox\system\Coldbox.cfc:236)

at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:472)

at coldfusion.runtime.UDFMethod$ReturnTypeFilter.invoke(UDFMethod.java:405)

at coldfusion.runtime.UDFMethod$ArgumentCollectionFilter.invoke(UDFMethod.java:368)

at coldfusion.filter.FunctionAccessFilter.invoke(FunctionAccessFilter.java:55)

at coldfusion.runtime.UDFMethod.runFilterChain(UDFMethod.java:321)

at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:220)

at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:655)

at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:444)

at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:414)

at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2432)

at cfApplication2ecfc1610141360$funcONREQUESTSTART.runFunction(D:\home\mysite.com\wwwroot\Application.cfc:103)

at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:472)

at coldfusion.runtime.UDFMethod$ReturnTypeFilter.invoke(UDFMethod.java:405)

at coldfusion.runtime.UDFMethod$ArgumentCollectionFilter.invoke(UDFMethod.java:368)

at coldfusion.filter.FunctionAccessFilter.invoke(FunctionAccessFilter.java:55)

at coldfusion.runtime.UDFMethod.runFilterChain(UDFMethod.java:321)

at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:220)

at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:655)

at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:444)

at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:414)

at coldfusion.runtime.AppEventInvoker.invoke(AppEventInvoker.java:108)

at coldfusion.runtime.AppEventInvoker.onRequestStart(AppEventInvoker.java:278)

at coldfusion.filter.ApplicationFilter.invoke(ApplicationFilter.java:417)

at coldfusion.filter.RequestMonitorFilter.invoke(RequestMonitorFilter.java:48)

at coldfusion.filter.MonitoringFilter.invoke(MonitoringFilter.java:40)

at coldfusion.filter.PathFilter.invoke(PathFilter.java:112)

at coldfusion.filter.ExceptionFilter.invoke(ExceptionFilter.java:94)

at coldfusion.filter.ClientScopePersistenceFilter.invoke(ClientScopePersistenceFilter.java:28)

at coldfusion.filter.BrowserFilter.invoke(BrowserFilter.java:38)

at coldfusion.filter.NoCacheFilter.invoke(NoCacheFilter.java:46)

at coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:38)

at coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22)

at coldfusion.filter.CachingFilter.invoke(CachingFilter.java:62)

at coldfusion.CfmServlet.service(CfmServlet.java:219)

at coldfusion.bootstrap.BootstrapServlet.service(BootstrapServlet.java:89)

at sun.reflect.GeneratedMethodAccessor42.invoke(Unknown Source)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

at java.lang.reflect.Method.invoke(Method.java:601)

at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:274)

at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:271)

at java.security.AccessController.doPrivileged(Native Method)

at javax.security.auth.Subject.doAsPrivileged(Subject.java:536)

at org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:306)

at org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:166)

at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:299)

at org.apache.catalina.core.ApplicationFilterChain.access$000(ApplicationFilterChain.java:57)

at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:193)

at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:189)

at java.security.AccessController.doPrivileged(Native Method)

at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)

at coldfusion.monitor.event.MonitoringServletFilter.doFilter(MonitoringServletFilter.java:42)

at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:46)

at sun.reflect.GeneratedMethodAccessor43.invoke(Unknown Source)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

at java.lang.reflect.Method.invoke(Method.java:601)

at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:274)

at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:271)

at java.security.AccessController.doPrivileged(Native Method)

at javax.security.auth.Subject.doAsPrivileged(Subject.java:536)

at org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:306)

at org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:246)

at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:239)

at org.apache.catalina.core.ApplicationFilterChain.access$000(ApplicationFilterChain.java:57)

at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:193)

at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:189)

at java.security.AccessController.doPrivileged(Native Method)

at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)

at com.seefusion.Filter.doFilter(Filter.java:49)

at com.seefusion.SeeFusion.doFilter(SeeFusion.java:1500)

at sun.reflect.GeneratedMethodAccessor41.invoke(Unknown Source)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

at java.lang.reflect.Method.invoke(Method.java:601)

at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:274)

at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:271)

at java.security.AccessController.doPrivileged(Native Method)

at javax.security.auth.Subject.doAsPrivileged(Subject.java:536)

at org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:306)

at org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:246)

at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:239)

at org.apache.catalina.core.ApplicationFilterChain.access$000(ApplicationFilterChain.java:57)

at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:193)

at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:189)

at java.security.AccessController.doPrivileged(Native Method)

at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)

at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:224)

at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:169)

at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:472)

at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:168)

at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:98)

at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:928)

at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)

at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:414)

at org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:204)

at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:539)

at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:298)

at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)

at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)

at java.lang.Thread.run(Thread.java:722)

Extra Information Dump

[N/A]

We have fixed this already and patch release is coming soon. For now, don’t CHECK remember me button.

signature0.jpg

Luis F. Majano
CEO
Ortus Solutions, Corp
www.ortussolutions.com

ColdBox Platform: http://www.coldbox.org
Linked In: http://www.linkedin.com/pub/3/731/483
Blog: http://www.luismajano.com
IECFUG Manager: http://www.iecfug.com

Social: twitter.com/lmajano facebook.com/lmajano

Bingo! Thank you!

signature0.jpg