System.Security.Cryptography.CryptographicException

[cotepatrice]

I have an exception in the session key management, As soon as the session is expired, instead of redirecting me to Identity Server, it pops an ugly ASP.NET error page (below). I've read some of your posts, but I must say that I'm not in a web farm, there's no load balancing and no session server. Do you have an idea ? I do have the same problem within the Identity Server by the way. It doesn't redirect me back to login page after the session expires. The only way to make it work again afterward is to empty cache, close and reopen the browser (IE 11 on the server).

Error occurred during a cryptographic operation. Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.Security.Cryptography.CryptographicException: Error occurred during a cryptographic operation.

Source Error:

An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.

Stack Trace:

[CryptographicException: Error occurred during a cryptographic operation.] System.Web.Security.Cryptography.HomogenizingCryptoServiceWrapper.HomogenizeErrors(Func`2 func, Byte[] input) +246 System.IdentityModel.Tokens.SessionSecurityTokenHandler.ApplyTransforms(Byte[] cookie, Boolean outbound) +173 System.IdentityModel.Tokens.SessionSecurityTokenHandler.ReadToken(XmlReader reader, SecurityTokenResolver tokenResolver) +756 System.IdentityModel.Tokens.SessionSecurityTokenHandler.ReadToken(Byte[] token, SecurityTokenResolver tokenResolver) +100 System.IdentityModel.Services.SessionAuthenticationModule.ReadSessionTokenFromCookie(Byte[] sessionCookie) +668 System.IdentityModel.Services.SessionAuthenticationModule.TryReadSessionTokenFromCookie(SessionSecurityToken& sessionToken) +164 System.IdentityModel.Services.SessionAuthenticationModule.OnAuthenticateRequest(Object sender, EventArgs eventArgs) +173 System.Web.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +80 System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +165

[brockallen]

Did this help?

http://brockallen.com/2013/02/20/suppressing-session-token-validation-exceptions-in-wif-and-thinktecture-identitymodel/

[cotepatrice]

I will have to test with a rebuild of the source code. For know, the version we deploy is the latest release. Thanks for the tip.