Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

javax.crypto.BadPaddingException: Given final block not properly padded. Such issues can arise if a bad key is used during decryption. #71

Open
DamirVa opened this issue Jul 5, 2023 · 1 comment
Labels
bug The issue documents broken, incorrect, or confusing behavior severity-medium The issue has a minor impact on the main functionality

Comments

@DamirVa
Copy link

DamirVa commented Jul 5, 2023

I have ashv-4.4.1-bin
In this version app looks nice, stable and working like hell....
Respect on work.
However, one issu is still not properly solved-security....

Save passwords ... in conf- aware of the risk.
I work on several citrix servers (all different address and never the same login when returning).
When i failover login from one server to another, and try to open app i got:
javax.crypto.BadPaddingException: Given final block not properly padded. Such issues can arise if a bad key is used during decryption.
It is because security and saved passwords-OK.
Is it possible to allow app to start and then do not connect...the same as it was before behavior (in old releases).
Thx
Damir

@DamirVa
Copy link
Author

DamirVa commented Jul 5, 2023

Tried to delete password entry in conf file, so now security is ok, but app do not work again:

Exception in thread "main" excp.PasswordConfigException: Text for decryption could not be null.. Check password field of connProfile entity in configuration!

Then I have managed to add '' in password entry of configuration file.
But.
When I finally open an app, I have to put a value and, and SAVE it so file...so again next run will have probably bad password (server change) and execution will damaged for next round.
And then after save app do not connect but just save the conf.

Then i have to choose again configuration and then press "connect" button.

Now this is annoying indeed....
How to override this and do not insert every time all configuration definition ... but only password (which i can live with blank value)...anything to at least push us to do so many steps.

@DamirVa DamirVa mentioned this issue Jul 5, 2023
@akardapolov akardapolov added bug The issue documents broken, incorrect, or confusing behavior severity-medium The issue has a minor impact on the main functionality labels Jul 5, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug The issue documents broken, incorrect, or confusing behavior severity-medium The issue has a minor impact on the main functionality
Projects
None yet
Development

No branches or pull requests

2 participants