Reading cookie value : Using URL Rewrite Provider module – Unable to validate at System.Web.Configuration.MachineKeySection.EncryptOrDecryptData

by

The good thing about this is that the error is a general decryption error and not one with URL Rewrite itself, so that gives you a wider area to search for help. The mechanics of URL Rewrite seem to be right.

Decrypting means that it must be encrypted by the same method as you’re decrypting it. So it has to be the right cookie and the right decryption method.

Since you’re not checking which cookie that you’re reading from, you could get unexpected results if the wrong cookie is first in the list of cookies.

Here are some steps that I recommend to troubleshoot this:

  • Create a simple URL Rewrite rule that will give you the value of your cookie. I created a rule to do that in my example below. You can test it by going to yoursite.com/getcookie. It should redirect to yoursite.com/?Cookie={cookievalue}
  • Then you can test your code outside of the URL Rewrite provider. You can create a simple console app or winforms app to test the rest of the code.
  • I recommend adding a check for the existence of the cookie and then a check again for the 2nd value. For example: if (cookievalues[1] != null).
  • When developing the decryption method, you don’t have to worry about URL Rewrite. As long as it works in a test app in .NET then you should be set.
<rule name="Get cookie value" stopProcessing="true">
    <match url="^getcookie" />
    <action type="Redirect" url="/?Cookie={HTTP_COOKIE}" appendQueryString="false" redirectType="Found" />
</rule>

More Related Contents:

  1. Cannot open database “test” requested by the login. The login failed. Login failed for user ‘xyz\ASPNET’
  2. Restarting (Recycling) an Application Pool
  3. How to get the current user in ASP.NET MVC
  4. How to force HTTPS using a web.config file
  5. CSS, Images, JS not loading in IIS
  6. Error – Unable to access the IIS metabase
  7. An ASP.NET setting has been detected that does not apply in Integrated managed pipeline mode
  8. How to delete Cookies from windows.form?
  9. Specified argument was out of the range of valid values. Parameter name: site
  10. Why is HttpContext.Current null?
  11. Changing project port number in Visual Studio 2013
  12. How to implement “Access-Control-Allow-Origin” header in asp.net
  13. Can you prevent your ASP.NET application from shutting down?
  14. Using Cookie in Asp.Net Mvc 4
  15. C# keep session id over httpwebrequest
  16. How do you clear cookies using asp.net mvc 3 and c#?
  17. C# Encryption to PHP Decryption
  18. Setting Culture for ASP.NET MVC application on VS dev server and IIS
  19. How to delete cookies on an ASP.NET website
  20. Check if Cookie Exists
  21. ASP.NET Core 1.0 on IIS error 502.5 – Error Code 0x80004005
  22. How do I route images using ASP.Net MVC routing?
  23. Programmatically create a web site in IIS using C# and set port number
  24. Starting and stopping IIS Express programmatically
  25. Access to the path is denied when saving image
  26. Cookie Confusion with FormsAuthentication.SetAuthCookie() Method
  27. Accept Cookies in WebClient?
  28. I’ve been hacked. Evil aspx file uploaded called AspxSpy. They’re still trying. Help me trap them‼
  29. Leverage browser caching in IIS (google pagespeed issue)
  30. ASP.NET Core – Authorization Using Windows Authentication

Leave a Comment