You are viewing limited content. For full access, please sign in.

Question

Question

Caught exception CryptographicException, Message: Bad Key in WebLink

asked on August 12, 2024

I am seeing this error on one of my WebLink servers over and over again. The Operation value is not always the same, but everything seems to be. What would be causing this error?

Log Name:      Laserfiche-Portal-Server/Operational
Source:        Laserfiche-Portal-Server
Date:          8/12/2024 11:45:00 AM
Event ID:      14
Task Category: ImportantWarning
Level:         Warning
Keywords:      Session0,Session1,Session2,Session3
User:          IIS APPPOOL\WebLinkAppPool
Computer:      XXXX
Description:
Operation: /WebLink/FolderListingService.aspx/GetColumnInfo
  Message: Exception encountered, stack trace:
  WebLinkControls.HttpHandlers.BaseIHttpHandlerClass.ProcessRequest
  System.Web.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute
  System.Web.HttpApplication.ExecuteStepImpl
  System.Web.HttpApplication.ExecuteStep
  System.Web.PipelineStepManager.ResumeSteps
  System.Web.HttpApplication.BeginProcessRequestNotification
  System.Web.HttpRuntime.ProcessRequestNotificationPrivate
  System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper
  System.Web.Hosting.PipelineRuntime.ProcessRequestNotification
  System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion
  System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion
  System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper
  System.Web.Hosting.PipelineRuntime.ProcessRequestNotification
Exception details:
  Caught exception CryptographicException, Message: Bad Key.

  Stack trace:    at System.Security.Cryptography.NativeHmac.AppendData(Byte[] data, Int32 offset, Int32 count)
   at System.Security.Cryptography.HashAlgorithm.ComputeHash(Byte[] buffer)
   at Web.Util.Security.BreachDefense.ProtectJson(String json)
   at WebLinkControls.HttpHandlers.BaseIHttpHandlerClass.WriteToResponseStream(HttpContext context, Object serviceReturnObject)
   at WebLinkControls.HttpHandlers.BaseIHttpHandlerClass.ProcessRequest(HttpContext context)

  Session: kcywclst

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Laserfiche-Portal-Server" Guid="{7DCFE07A-D2F9-5FCB-2720-8B35AC94BD41}" />
    <EventID>14</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>65520</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000f00000000000</Keywords>
    <TimeCreated SystemTime="2024-08-12T18:45:00.069124200Z" />
    <EventRecordID>239940</EventRecordID>
    <Correlation />
    <Execution ProcessID="3040" ThreadID="1292" />
    <Channel>Laserfiche-Portal-Server/Operational</Channel>
    <Computer>XXXX</Computer>
    <Security UserID="XXXX" />
  </System>
  <EventData>
    <Data Name="message">Operation: /WebLink/FolderListingService.aspx/GetColumnInfo
  Message: Exception encountered, stack trace:
  WebLinkControls.HttpHandlers.BaseIHttpHandlerClass.ProcessRequest
  System.Web.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute
  System.Web.HttpApplication.ExecuteStepImpl
  System.Web.HttpApplication.ExecuteStep
  System.Web.PipelineStepManager.ResumeSteps
  System.Web.HttpApplication.BeginProcessRequestNotification
  System.Web.HttpRuntime.ProcessRequestNotificationPrivate
  System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper
  System.Web.Hosting.PipelineRuntime.ProcessRequestNotification
  System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion
  System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion
  System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper
  System.Web.Hosting.PipelineRuntime.ProcessRequestNotification
Exception details:
  Caught exception CryptographicException, Message: Bad Key.

  Stack trace:    at System.Security.Cryptography.NativeHmac.AppendData(Byte[] data, Int32 offset, Int32 count)
   at System.Security.Cryptography.HashAlgorithm.ComputeHash(Byte[] buffer)
   at Web.Util.Security.BreachDefense.ProtectJson(String json)
   at WebLinkControls.HttpHandlers.BaseIHttpHandlerClass.WriteToResponseStream(HttpContext context, Object serviceReturnObject)
   at WebLinkControls.HttpHandlers.BaseIHttpHandlerClass.ProcessRequest(HttpContext context)

  Session: kcywclst
</Data>
  </EventData>
</Event>

We are using WebLink version 11.0.2307.136.

0 0

Answer

SELECTED ANSWER
replied on August 12, 2024

In a previous post, they said to have your VAR get you the fix. It's pretty simple to do. You can see if it was done or not by checking the version of C:\Program Files\Laserfiche\WebLink\WebLink\Web Files\bin\Web.Util.dll. It should be 10.5.0.0 for the fixed one. Reference KB1014527.

0 0

Replies

replied on August 12, 2024

Is this server running with the fix for the IIS crash caused by May's Windows updates?

0 0
replied on August 12, 2024

That is a mighty fine question. I'm not familiar with that fix, so how would I check?

0 0
SELECTED ANSWER
replied on August 12, 2024

In a previous post, they said to have your VAR get you the fix. It's pretty simple to do. You can see if it was done or not by checking the version of C:\Program Files\Laserfiche\WebLink\WebLink\Web Files\bin\Web.Util.dll. It should be 10.5.0.0 for the fixed one. Reference KB1014527.

0 0
replied on August 12, 2024

Ah, yes. Still waiting on my SP to get me the fix.

0 0
replied on August 12, 2024

Yeah, this is one of the event log messages that indicates the .NET Framework update IIS crash issue: The May 14, 2024 Cumulative Update for .NET Framework May Cause Reliability Issues with the Laserfiche Web Client and Laserfiche WebLink. - Knowledge Base

0 0
replied on August 13, 2024

The hotfix KB1014527 seems to have fixed the bad key event log messages.

2 0
You are not allowed to follow up in this post.

Sign in to reply to this post.