[Esapi-user] [OWASP-ESAPI] ESAPI 2.0r6 web application failure

Jim Manico jim.manico at owasp.org
Sun Apr 25 02:47:54 EDT 2010


Kevin,_*
*_
Thanks for digging in so deeply and providing our users such fantastic 
support.

Kevin++
- Jim
> Sean,
>
> OK, the bad news... I took your code, both the part where you were
> encrypting the properties and where you were decrypting them and storing
> them in props, and I was unable to get them to fail. The only thing that
> I did not do was to use the Spring framework in any manner.
>
> I think I sent you email the other day that discussed the serialVersionUid
> incompatibility. That might be an issue. If it is, you could just try
> re-encrypting things again, and then try your test to retrieve the properties.
> Also, make sure you are using the same Encryptor.MasterKey and other Encryptor
> properties for both encrypting and decrypting the properties. The easiest thing
> is to make sure you are using the same ESAPI.properties file for both. And make
> sure some old version of ESAPI.properties file is not in some Tomcat cache
> somewhere.
>
> Secondly, I'd advise you to set the log4j level to 'Debug' to provide more
> verbose debugging. That will provide output on details of the attempted
> encryption and decryption which you might find useful (at least more so
> than the exception stack trace you sent below).
>
> If that doesn't get you anywhere, I could provide you with a special
> version of the ESAPI jar where I've made some of the exception messages
> that are logged a bit more explicit and have a bit more context. Running with
> that could provide some additional details.
>
> I will take a look at your code with the debugger as long as you are using
> Eclipse. If you want me to look at it, you'll have to export it to archived
> zip file and email it to me because I really don't want to try to track down
> all your dependencies, etc.  Anyway, let me know how you wish to proceed
> as I have not been able to duplicate your problem. All works as expected from
> my tests where I tried to emulate your tests, but neither do I see anything
> that you are doing incorrectly.
>
> Finally, I was wrong about the extraneous '\' characters before the '=' in
> the padding for the base64-encoded values. Turns out it looks like the
> Properties class is putting that there. But it's OK; I checked it out testing
> it that way and it all works. So that was just a red herring.
>
> Let me know how you wish to proceed as I am still willing to help. (Figure I
> might learn something too! ;-)
>
> Regards,
> -kevin
>
> sean wrote:
>    
>> Kevin --
>>
>> Here's the stacktrace.
>>
>> org.owasp.esapi.errors.EncryptionException: Property retrieval failure
>>      at
>> org.owasp.esapi.reference.crypto.DefaultEncryptedProperties.getProperty(DefaultEncryptedProperties.java:83)
>>
>>      at
>> utils.MyPropertyPlaceholderConfigurer.loadProperties(MyPropertyPlaceholderConfigurer.java:26)
>>
>>      at
>> org.springframework.core.io.support.PropertiesLoaderSupport.mergeProperties(PropertiesLoaderSupport.java:161)
>>
>>      at
>> org.springframework.beans.factory.config.PropertyResourceConfigurer.postProcessBeanFactory(PropertyResourceConfigurer.java:69)
>>
>>      at
>> org.springframework.context.support.AbstractApplicationContext.invokeBeanFactoryPostProcessors(AbstractApplicationContext.java:640)
>>
>>      at
>> org.springframework.context.support.AbstractApplicationContext.invokeBeanFactoryPostProcessors(AbstractApplicationContext.java:615)
>>
>>      at
>> org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:405)
>>
>>      at
>> org.springframework.web.context.ContextLoader.createWebApplicationContext(ContextLoader.java:272)
>>
>>      at
>> org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:196)
>>
>>      at
>> org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:47)
>>
>>      at
>> org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3934)
>>
>>      at
>> org.apache.catalina.core.StandardContext.start(StandardContext.java:4429)
>>      at
>> org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045)
>>      at org.apache.catalina.core.StandardHost.start(StandardHost.java:722)
>>      at
>> org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045)
>>      at
>> org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
>>      at
>> org.apache.catalina.core.StandardService.start(StandardService.java:516)
>>      at
>> org.apache.catalina.core.StandardServer.start(StandardServer.java:710)
>>      at org.apache.catalina.startup.Catalina.start(Catalina.java:583)
>>      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>>      at
>> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>>
>>      at
>> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>>
>>      at java.lang.reflect.Method.invoke(Method.java:597)
>>      at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:288)
>>      at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413)
>> Caused by: java.lang.NullPointerException
>>      at java.io.ByteArrayInputStream.<init>(ByteArrayInputStream.java:89)
>>      at
>> org.owasp.esapi.crypto.CipherTextSerializer.convertToCipherText(CipherTextSerializer.java:213)
>>
>>      at
>> org.owasp.esapi.crypto.CipherTextSerializer.<init>(CipherTextSerializer.java:52)
>>
>>      at
>> org.owasp.esapi.crypto.CipherText.fromPortableSerializedBytes(CipherText.java:150)
>>
>>      at
>> org.owasp.esapi.reference.crypto.DefaultEncryptedProperties.getProperty(DefaultEncryptedProperties.java:78)
>>
>>      ... 24 more
>> org.owasp.esapi.errors.EncryptionException: Property retrieval failure
>>      at
>> org.owasp.esapi.reference.crypto.DefaultEncryptedProperties.getProperty(DefaultEncryptedProperties.java:83)
>>
>>      at
>> utils.MyPropertyPlaceholderConfigurer.loadProperties(MyPropertyPlaceholderConfigurer.java:26)
>>
>>      at
>> org.springframework.core.io.support.PropertiesLoaderSupport.mergeProperties(PropertiesLoaderSupport.java:161)
>>
>>      at
>> org.springframework.beans.factory.config.PropertyResourceConfigurer.postProcessBeanFactory(PropertyResourceConfigurer.java:69)
>>
>>      at
>> org.springframework.context.support.AbstractApplicationContext.invokeBeanFactoryPostProcessors(AbstractApplicationContext.java:640)
>>
>>      at
>> org.springframework.context.support.AbstractApplicationContext.invokeBeanFactoryPostProcessors(AbstractApplicationContext.java:615)
>>
>>      at
>> org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:405)
>>
>>      at
>> org.springframework.web.context.ContextLoader.createWebApplicationContext(ContextLoader.java:272)
>>
>>      at
>> org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:196)
>>
>>      at
>> org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:47)
>>
>>      at
>> org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3934)
>>
>>      at
>> org.apache.catalina.core.StandardContext.start(StandardContext.java:4429)
>>      at
>> org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045)
>>      at org.apache.catalina.core.StandardHost.start(StandardHost.java:722)
>>      at
>> org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045)
>>      at
>> org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
>>      at
>> org.apache.catalina.core.StandardService.start(StandardService.java:516)
>>      at
>> org.apache.catalina.core.StandardServer.start(StandardServer.java:710)
>>      at org.apache.catalina.startup.Catalina.start(Catalina.java:583)
>>      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>>      at
>> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>>
>>      at
>> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>>
>>      at java.lang.reflect.Method.invoke(Method.java:597)
>>      at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:288)
>>      at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413)
>> Caused by: java.lang.NullPointerException
>>      at java.io.ByteArrayInputStream.<init>(ByteArrayInputStream.java:89)
>>      at
>> org.owasp.esapi.crypto.CipherTextSerializer.convertToCipherText(CipherTextSerializer.java:213)
>>
>>      at
>> org.owasp.esapi.crypto.CipherTextSerializer.<init>(CipherTextSerializer.java:52)
>>
>>      at
>> org.owasp.esapi.crypto.CipherText.fromPortableSerializedBytes(CipherText.java:150)
>>
>>      at
>> org.owasp.esapi.reference.crypto.DefaultEncryptedProperties.getProperty(DefaultEncryptedProperties.java:78)
>>
>>      ... 24 more
>> DEBUG [EVENT SUCCESS Anonymous:null at unknown ->
>> /Tendryll-20100128/CipherTextSerializer] convertToCipherText: vers =
>> -8336461450400112793
>> WARN  [SECURITY FAILURE Anonymous:null at unknown ->
>> /Tendryll-20100128/IntrusionDetector] Cannot deserialize byte array into
>> CipherText object
>> org.owasp.esapi.errors.EncryptionException: Cannot deserialize byte
>> array into CipherText object
>>      at
>> org.owasp.esapi.crypto.CipherTextSerializer.convertToCipherText(CipherTextSerializer.java:281)
>>
>>      at
>> org.owasp.esapi.crypto.CipherTextSerializer.<init>(CipherTextSerializer.java:52)
>>
>>      at
>> org.owasp.esapi.crypto.CipherText.fromPortableSerializedBytes(CipherText.java:150)
>>
>>      at
>> org.owasp.esapi.reference.crypto.DefaultEncryptedProperties.getProperty(DefaultEncryptedProperties.java:78)
>>
>>      at
>> utils.MyPropertyPlaceholderConfigurer.loadProperties(MyPropertyPlaceholderConfigurer.java:36)
>>
>>      at
>> org.springframework.core.io.support.PropertiesLoaderSupport.mergeProperties(PropertiesLoaderSupport.java:161)
>>
>>      at
>> org.springframework.beans.factory.config.PropertyResourceConfigurer.postProcessBeanFactory(PropertyResourceConfigurer.java:69)
>>
>>      at
>> org.springframework.context.support.AbstractApplicationContext.invokeBeanFactoryPostProcessors(AbstractApplicationContext.java:640)
>>
>>      at
>> org.springframework.context.support.AbstractApplicationContext.invokeBeanFactoryPostProcessors(AbstractApplicationContext.java:615)
>>
>>      at
>> org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:405)
>>
>>      at
>> org.springframework.web.context.ContextLoader.createWebApplicationContext(ContextLoader.java:272)
>>
>>      at
>> org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:196)
>>
>>      at
>> org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:47)
>>
>>      at
>> org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3934)
>>
>>      at
>> org.apache.catalina.core.StandardContext.start(StandardContext.java:4429)
>>      at
>> org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045)
>>      at org.apache.catalina.core.StandardHost.start(StandardHost.java:722)
>>      at
>> org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045)
>>      at
>> org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
>>      at
>> org.apache.catalina.core.StandardService.start(StandardService.java:516)
>>      at
>> org.apache.catalina.core.StandardServer.start(StandardServer.java:710)
>>      at org.apache.catalina.startup.Catalina.start(Catalina.java:583)
>>      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>>      at
>> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>>
>>      at
>> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>>
>>      at java.lang.reflect.Method.invoke(Method.java:597)
>>      at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:288)
>>      at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413)
>> Caused by: java.io.InvalidClassException: This serialized byte stream
>> not compatible with loaded CipherText class. Version read =
>> -8336461450400112793; version from loaded CipherText class = 20100122
>>      at
>> org.owasp.esapi.crypto.CipherTextSerializer.convertToCipherText(CipherTextSerializer.java:220)
>>
>>      ... 27 more
>> WARN  [SECURITY FAILURE Anonymous:null at unknown ->
>> /Tendryll-20100128/IntrusionDetector] Couldn't decrypt property
>> org.owasp.esapi.errors.EncryptionException: Property retrieval failure
>>      at
>> org.owasp.esapi.reference.crypto.DefaultEncryptedProperties.getProperty(DefaultEncryptedProperties.java:83)
>>
>>      at
>> utils.MyPropertyPlaceholderConfigurer.loadProperties(MyPropertyPlaceholderConfigurer.java:36)
>>
>>      at
>> org.springframework.core.io.support.PropertiesLoaderSupport.mergeProperties(PropertiesLoaderSupport.java:161)
>>
>>      at
>> org.springframework.beans.factory.config.PropertyResourceConfigurer.postProcessBeanFactory(PropertyResourceConfigurer.java:69)
>>
>>      at
>> org.springframework.context.support.AbstractApplicationContext.invokeBeanFactoryPostProcessors(AbstractApplicationContext.java:640)
>>
>>      at
>> org.springframework.context.support.AbstractApplicationContext.invokeBeanFactoryPostProcessors(AbstractApplicationContext.java:615)
>>
>>      at
>> org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:405)
>>
>>      at
>> org.springframework.web.context.ContextLoader.createWebApplicationContext(ContextLoader.java:272)
>>
>>      at
>> org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:196)
>>
>>      at
>> org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:47)
>>
>>      at
>> org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3934)
>>
>>      at
>> org.apache.catalina.core.StandardContext.start(StandardContext.java:4429)
>>      at
>> org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045)
>>      at org.apache.catalina.core.StandardHost.start(StandardHost.java:722)
>>      at
>> org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045)
>>      at
>> org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
>>      at
>> org.apache.catalina.core.StandardService.start(StandardService.java:516)
>>      at
>> org.apache.catalina.core.StandardServer.start(StandardServer.java:710)
>>      at org.apache.catalina.startup.Catalina.start(Catalina.java:583)
>>      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>>      at
>> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>>
>>      at
>> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>>
>>      at java.lang.reflect.Method.invoke(Method.java:597)
>>      at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:288)
>>      at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413)
>> Caused by: org.owasp.esapi.errors.EncryptionException: Cannot
>> deserialize byte array into CipherText object
>>      at
>> org.owasp.esapi.crypto.CipherTextSerializer.convertToCipherText(CipherTextSerializer.java:281)
>>
>>      at
>> org.owasp.esapi.crypto.CipherTextSerializer.<init>(CipherTextSerializer.java:52)
>>
>>      at
>> org.owasp.esapi.crypto.CipherText.fromPortableSerializedBytes(CipherText.java:150)
>>
>>      at
>> org.owasp.esapi.reference.crypto.DefaultEncryptedProperties.getProperty(DefaultEncryptedProperties.java:78)
>>
>>      ... 24 more
>> Caused by: java.io.InvalidClassException: This serialized byte stream
>> not compatible with loaded CipherText class. Version read =
>> -8336461450400112793; version from loaded CipherText class = 20100122
>>      at
>> org.owasp.esapi.crypto.CipherTextSerializer.convertToCipherText(CipherTextSerializer.java:220)
>>
>>      ... 27 more
>> org.owasp.esapi.errors.EncryptionException: Property retrieval failure
>>      at
>> org.owasp.esapi.reference.crypto.DefaultEncryptedProperties.getProperty(DefaultEncryptedProperties.java:83)
>>
>>      at
>> utils.MyPropertyPlaceholderConfigurer.loadProperties(MyPropertyPlaceholderConfigurer.java:36)
>>
>>      at
>> org.springframework.core.io.support.PropertiesLoaderSupport.mergeProperties(PropertiesLoaderSupport.java:161)
>>
>>      at
>> org.springframework.beans.factory.config.PropertyResourceConfigurer.postProcessBeanFactory(PropertyResourceConfigurer.java:69)
>>
>>      at
>> org.springframework.context.support.AbstractApplicationContext.invokeBeanFactoryPostProcessors(AbstractApplicationContext.java:640)
>>
>>      at
>> org.springframework.context.support.AbstractApplicationContext.invokeBeanFactoryPostProcessors(AbstractApplicationContext.java:615)
>>
>>      at
>> org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:405)
>>
>>      at
>> org.springframework.web.context.ContextLoader.createWebApplicationContext(ContextLoader.java:272)
>>
>>      at
>> org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:196)
>>
>>      at
>> org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:47)
>>
>>      at
>> org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3934)
>>
>>      at
>> org.apache.catalina.core.StandardContext.start(StandardContext.java:4429)
>>      at
>> org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045)
>>      at org.apache.catalina.core.StandardHost.start(StandardHost.java:722)
>>      at
>> org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045)
>>      at
>> org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
>>      at
>> org.apache.catalina.core.StandardService.start(StandardService.java:516)
>>      at
>> org.apache.catalina.core.StandardServer.start(StandardServer.java:710)
>>      at org.apache.catalina.startup.Catalina.start(Catalina.java:583)
>>      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>>      at
>> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>>
>>      at
>> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>>
>>      at java.lang.reflect.Method.invoke(Method.java:597)
>>      at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:288)
>>      at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413)
>> Caused by: org.owasp.esapi.errors.EncryptionException: Cannot
>> deserialize byte array into CipherText object
>>      at
>> org.owasp.esapi.crypto.CipherTextSerializer.convertToCipherText(CipherTextSerializer.java:281)
>>
>>      at
>> org.owasp.esapi.crypto.CipherTextSerializer.<init>(CipherTextSerializer.java:52)
>>
>>      at
>> org.owasp.esapi.crypto.CipherText.fromPortableSerializedBytes(CipherText.java:150)
>>
>>      at
>> org.owasp.esapi.reference.crypto.DefaultEncryptedProperties.getProperty(DefaultEncryptedProperties.java:78)
>>
>>      ... 24 more
>> Caused by: java.io.InvalidClassException: This serialized byte stream
>> not compatible with loaded CipherText class. Version read =
>> -8336461450400112793; version from loaded CipherText class = 20100122
>>      at
>> org.owasp.esapi.crypto.CipherTextSerializer.convertToCipherText(CipherTextSerializer.java:220)
>>
>>      ... 27 more
>> INFO  Destroying singletons in
>> org.springframework.beans.factory.support.DefaultListableBeanFactory at 691177:
>> defining beans
>> [org.springframework.orm.jpa.support.PersistenceAnnotationBeanPostProcessor#0,userService,roleService,contactUsService,countryService,provinceService,jobPostingService,employmentTypeService,orderTransactionService,notificationService,resumeService,searchService,mailService,paymentService,openidService,propertyConfigurer,reCaptcha,entityManagerFactory,dataSource,transactionManager,org.springframework.aop.config.internalAutoProxyCreator,org.springframework.transaction.annotation.AnnotationTransactionAttributeSource#0,org.springframework.transaction.interceptor.TransactionInterceptor#0,org.springframework.transaction.config.internalTransactionAdvisor,org.springframework.security.access.method.DelegatingMethodSecurityMetadataSource#0,org.springframework.security.access.vote.AffirmativeBased#0,org.springframework.security.access.intercept.aopalliance.MethodSecurityInterceptor#0,org.springframework.security.methodSecurityMetadataSourceAdvisor,org.springframework.security.web.Port
>>      
> MapperImpl#0,org.springframework.security.web.context.HttpSessionSecurityContextRepository#0,org.springframework.security.web.authentication.session.SessionFixationProtectionStrategy#0,org.springframework.security.authentication.ProviderManager#0,org.springframework.security.access.vote.AffirmativeBased#1,org.springframework.security.web.access.intercept.FilterSecurityInterceptor#0,org.springframework.security.web.access.DefaultWebInvocationPrivilegeEvaluator#0,org.springframework.security.authentication.AnonymousAuthenticationProvider#0,org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices#0,org.springframework.security.authentication.RememberMeAuthenticationProvider#0,org.springframework.security.web.savedrequest.HttpSessionRequestCache#0,org.springframework.security.openid.OpenIDAuthenticationFilter#0,org.springframework.security.openid.OpenIDAuthenticationProvider#0,org.springframework.security.config.http.UserDetailsServiceInjectionBeanP
> ostProcessor#0,org.springframework.security.filterChainProxy,org.springframework.security.authentication.dao.DaoAuthenticationProvider#0,org.springframework.security.authentication.DefaultAuthenticationEventPublisher#0,org.springframework.security.authenticationManager];
>    
>> root of factory hierarchy
>> ERROR Context initialization failed
>> org.springframework.beans.factory.BeanDefinitionStoreException: Invalid
>> bean definition with name 'dataSource' defined in ServletContext
>> resource [/WEB-INF/applicationContext.xml]: Could not resolve
>> placeholder 'database.driver'
>>      at
>> org.springframework.beans.factory.config.PropertyPlaceholderConfigurer.processProperties(PropertyPlaceholderConfigurer.java:272)
>>
>>      at
>> org.springframework.beans.factory.config.PropertyResourceConfigurer.postProcessBeanFactory(PropertyResourceConfigurer.java:75)
>>
>>      at
>> org.springframework.context.support.AbstractApplicationContext.invokeBeanFactoryPostProcessors(AbstractApplicationContext.java:640)
>>
>>      at
>> org.springframework.context.support.AbstractApplicationContext.invokeBeanFactoryPostProcessors(AbstractApplicationContext.java:615)
>>
>>      at
>> org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:405)
>>
>>      at
>> org.springframework.web.context.ContextLoader.createWebApplicationContext(ContextLoader.java:272)
>>
>>      at
>> org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:196)
>>
>>      at
>> org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:47)
>>
>>      at
>> org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3934)
>>
>>      at
>> org.apache.catalina.core.StandardContext.start(StandardContext.java:4429)
>>      at
>> org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045)
>>      at org.apache.catalina.core.StandardHost.start(StandardHost.java:722)
>>      at
>> org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045)
>>      at
>> org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
>>      at
>> org.apache.catalina.core.StandardService.start(StandardService.java:516)
>>      at
>> org.apache.catalina.core.StandardServer.start(StandardServer.java:710)
>>      at org.apache.catalina.startup.Catalina.start(Catalina.java:583)
>>      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>>      at
>> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>>
>>      at
>> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>>
>>      at java.lang.reflect.Method.invoke(Method.java:597)
>>      at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:288)
>>      at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413)
>> Apr 23, 2010 10:55:18 AM org.apache.catalina.core.StandardContext
>> listenerStart
>> SEVERE: Exception sending context initialized event to listener instance
>> of class org.springframework.web.context.ContextLoaderListener
>> org.springframework.beans.factory.BeanDefinitionStoreException: Invalid
>> bean definition with name 'dataSource' defined in ServletContext
>> resource [/WEB-INF/applicationContext.xml]: Could not resolve
>> placeholder 'database.driver'
>>      at
>> org.springframework.beans.factory.config.PropertyPlaceholderConfigurer.processProperties(PropertyPlaceholderConfigurer.java:272)
>>
>>      at
>> org.springframework.beans.factory.config.PropertyResourceConfigurer.postProcessBeanFactory(PropertyResourceConfigurer.java:75)
>>
>>      at
>> org.springframework.context.support.AbstractApplicationContext.invokeBeanFactoryPostProcessors(AbstractApplicationContext.java:640)
>>
>>      at
>> org.springframework.context.support.AbstractApplicationContext.invokeBeanFactoryPostProcessors(AbstractApplicationContext.java:615)
>>
>>      at
>> org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:405)
>>
>>      at
>> org.springframework.web.context.ContextLoader.createWebApplicationContext(ContextLoader.java:272)
>>
>>      at
>> org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:196)
>>
>>      at
>> org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:47)
>>
>>      at
>> org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3934)
>>
>>      at
>> org.apache.catalina.core.StandardContext.start(StandardContext.java:4429)
>>      at
>> org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045)
>>      at org.apache.catalina.core.StandardHost.start(StandardHost.java:722)
>>      at
>> org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045)
>>      at
>> org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
>>      at
>> org.apache.catalina.core.StandardService.start(StandardService.java:516)
>>      at
>> org.apache.catalina.core.StandardServer.start(StandardServer.java:710)
>>      at org.apache.catalina.startup.Catalina.start(Catalina.java:583)
>>      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>>      at
>> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>>
>>      at
>> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>>
>>      at java.lang.reflect.Method.invoke(Method.java:597)
>>      at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:288)
>>      at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413)
>>
>> -- Sean
>>
>> On 04/23/2010 12:56 PM, Kevin W. Wall wrote:
>>      
>>> Sean,
>>>
>>> Do you get an exception stack trace or any additional debug logging?
>>> -kevin
>>>
>>>        
>>
>>
>>      
>
>    


-- 
Jim Manico
OWASP Podcast Host/Producer
OWASP ESAPI Project Manager
http://www.manico.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.owasp.org/pipermail/esapi-user/attachments/20100424/098a722a/attachment.html 


More information about the Esapi-user mailing list