Java proxy - http.nonProxyHosts issue

Question

Hi,
I have a test code that connects to a URL. I want the local URLs to be connected without proxy server. But It ends with the following error
C:\temp>java -Dhttp.nonProxyHosts="192.168.10.150|*.mycompany.local|localhost" ProxyTest
Exception in thread "main" java.io.IOException: Unable to tunnel through proxy.
Proxy returns "HTTP/1.0 403 Forbidden"
at sun.net.www.protocol.http.HttpURLConnection.doTunneling(HttpURLConnec
tion.java:1648)
at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect
(AbstractDelegateHttpsURLConnection.java:164)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLCon
nection.java:1172)
at sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(Http
sURLConnectionImpl.java:234)
at ProxyTest.main(ProxyTest.java:17)
The following is my code
import java.net.*;
import java.io.*;
public class ProxyTest
     public static void main(String[] args) throws Exception
          System.setProperty("nonProxyHosts", "192.168.10.150|localhost");
          Authenticator.setDefault(new ProxyAuth("pandian", "pandian"));
          URL url = new URL("https://192.168.8.150/");
          SocketAddress addr = new InetSocketAddress("192.168.8.100", 808);
          Proxy proxy = new Proxy(Proxy.Type.HTTP, addr);
          HttpURLConnection con = (HttpURLConnection) url.openConnection(proxy);
          InputStream is = con.getInputStream();
          int i=-1;
          while ((i=is.read())!=-1)
               System.out.print((char)i);
          is.close();
class ProxyAuth extends Authenticator
     private String user, password;
public ProxyAuth(String user, String password) { 
this.user = user;
this.password = password;
protected PasswordAuthentication getPasswordAuthentication() { 
return new PasswordAuthentication(user, password.toCharArray());
The same code executes for any URLs those are not blocked by the proxy server.
Any guess?
Edited by: user3749193 on Aug 10, 2011 2:40 AM
Edited by: user3749193 on Aug 10, 2011 3:18 PM

Answer 1

By going through your code, i could see change in only below below line:
Present code
>
          Authenticator.setDefault(new ProxyAuth("eguser", "egurkha"));
          URL url = new URL("http://192.168.10.100/");
earlier Code:
>
          Authenticator.setDefault(new ProxyAuth("eguser", "egurkha"));
          URL url = new URL("http://192.168.8.100/");
That means still your using proxy to access the urls. And earlier you were trying to access the proxy server, by below code:
SocketAddress addr = new InetSocketAddress("192.168.8.100", 808);
HttpURLConnection con = (HttpURLConnection) url.openConnection(proxy);
Proxy proxy = new Proxy(Proxy.Type.HTTP, addr);Regarding below error, it says the site you are trying to access is not having valid certificate/ the certificate is not trusted by your truststore.
C:\temp>java ProxyTest
Exception in thread "main" javax.net.ssl.SSLHandshakeException: sun.security.val
idator.ValidatorException: PKIX path building failed: sun.security.provider.cert
path.SunCertPathBuilderException: unable to find valid certification path to req
uested targetEDiting:: To Add to your trust store run the below Program
* Copyright 2006 Sun Microsystems, Inc.  All Rights Reserved.
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
*   - Redistributions of source code must retain the above copyright
*     notice, this list of conditions and the following disclaimer.
*   - Redistributions in binary form must reproduce the above copyright
*     notice, this list of conditions and the following disclaimer in the
*     documentation and/or other materials provided with the distribution.
*   - Neither the name of Sun Microsystems nor the names of its
*     contributors may be used to endorse or promote products derived
*     from this software without specific prior written permission.
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
* IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
* THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
* PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR
* CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
* EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
* PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
* PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
* LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
* NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
* SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
import java.io.*;
import java.net.URL;
import java.security.*;
import java.security.cert.*;
import javax.net.ssl.*;
public class InstallCert {
    public static void main(String[] args) throws Exception {
     String host;
     int port;
     char[] passphrase;
     if ((args.length == 1) || (args.length == 2)) {
         String[] c = args[0].split(":");
         host = c[0];
         port = (c.length == 1) ? 443 : Integer.parseInt(c[1]);
         String p = (args.length == 1) ? "changeit" : args[1];
         passphrase = p.toCharArray();
     } else {
         System.out.println("Usage: java InstallCert <host>[:port] [passphrase]");
         return;
     File file = new File("jssecacerts");
     if (file.isFile() == false) {
         char SEP = File.separatorChar;
         File dir = new File(System.getProperty("java.home") + SEP
              + "lib" + SEP + "security");
         file = new File(dir, "jssecacerts");
         if (file.isFile() == false) {
          file = new File(dir, "cacerts");
     System.out.println("Loading KeyStore " + file + "...");
     InputStream in = new FileInputStream(file);
     KeyStore ks = KeyStore.getInstance(KeyStore.getDefaultType());
     ks.load(in, passphrase);
     in.close();
     SSLContext context = SSLContext.getInstance("TLS");
     TrustManagerFactory tmf =
         TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
     tmf.init(ks);
     X509TrustManager defaultTrustManager = (X509TrustManager)tmf.getTrustManagers()[0];
     SavingTrustManager tm = new SavingTrustManager(defaultTrustManager);
     context.init(null, new TrustManager[] {tm}, null);
     SSLSocketFactory factory = context.getSocketFactory();
     System.out.println("Opening connection to " + host + ":" + port + "...");
     SSLSocket socket = (SSLSocket)factory.createSocket(host, port);
     socket.setSoTimeout(10000);
     try {
         System.out.println("Starting SSL handshake...");
         socket.startHandshake();
         socket.close();
         System.out.println();
         System.out.println("No errors, certificate is already trusted");
     } catch (SSLException e) {
         System.out.println();
         e.printStackTrace(System.out);
     X509Certificate[] chain = tm.chain;
     if (chain == null) {
         System.out.println("Could not obtain server certificate chain");
         return;
     BufferedReader reader =
          new BufferedReader(new InputStreamReader(System.in));
     System.out.println();
     System.out.println("Server sent " + chain.length + " certificate(s):");
     System.out.println();
     MessageDigest sha1 = MessageDigest.getInstance("SHA1");
     MessageDigest md5 = MessageDigest.getInstance("MD5");
     for (int i = 0; i < chain.length; i++) {
         X509Certificate cert = chain;
     System.out.println
          (" " + (i + 1) + " Subject " + cert.getSubjectDN());
     System.out.println(" Issuer " + cert.getIssuerDN());
     sha1.update(cert.getEncoded());
     System.out.println(" sha1 " + toHexString(sha1.digest()));
     md5.update(cert.getEncoded());
     System.out.println(" md5 " + toHexString(md5.digest()));
     System.out.println();
     System.out.println("Enter certificate to add to trusted keystore or 'q' to quit: [1]");
     String line = reader.readLine().trim();
     int k;
     try {
     k = (line.length() == 0) ? 0 : Integer.parseInt(line) - 1;
     } catch (NumberFormatException e) {
     System.out.println("KeyStore not changed");
     return;
     X509Certificate cert = chain[k];
     String alias = host + "-" + (k + 1);
     ks.setCertificateEntry(alias, cert);
     OutputStream out = new FileOutputStream("jssecacerts");
     ks.store(out, passphrase);
     out.close();
     System.out.println();
     System.out.println(cert);
     System.out.println();
     System.out.println
          ("Added certificate to keystore 'jssecacerts' using alias '"
          + alias + "'");
private static final char[] HEXDIGITS = "0123456789abcdef".toCharArray();
private static String toHexString(byte[] bytes) {
     StringBuilder sb = new StringBuilder(bytes.length * 3);
     for (int b : bytes) {
     b &= 0xff;
     sb.append(HEXDIGITS[b >> 4]);
     sb.append(HEXDIGITS[b & 15]);
     sb.append(' ');
     return sb.toString();
private static class SavingTrustManager implements X509TrustManager {
     private final X509TrustManager tm;
     private X509Certificate[] chain;
     SavingTrustManager(X509TrustManager tm) {
     this.tm = tm;
     public X509Certificate[] getAcceptedIssuers() {
     throw new UnsupportedOperationException();
     public void checkClientTrusted(X509Certificate[] chain, String authType)
          throws CertificateException {
     throw new UnsupportedOperationException();
     public void checkServerTrusted(X509Certificate[] chain, String authType)
          throws CertificateException {
     this.chain = chain;
     tm.checkServerTrusted(chain, authType);
Edited by: 833545 on Aug 12, 2011 3:32 PM