PROXY BASIC AUTHENTICATION

Question

Hello.
I'm facing problem during client connection throungth proxy.
The error messagge is:
java.io.IOException: Unable to tunnel through proxy. Proxy returns "HTTP/1.1 302 Moved Temporarily"
     at sun.net.www.protocol.http.HttpURLConnection.doTunneling(HttpURLConnection.java:923)
     at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(DashoA6275)
     at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:615)
     at sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(DashoA6275)
     at updateAuto.getInputStream(updateAuto.java:494)
     at updateAuto.downloadFile(updateAuto.java:422)
     at updateAuto.start(updateAuto.java:263)
     at Avvio.main(Avvio.java:8)
The question is: how i set the basic authentication? I found two example:
URL url= new URL(fileName);
URLConnection connection= url.openConnection();
connection.setRequestProperty("Proxy-Authorization","Basic " + new sun.misc.BASE64Encoder().encode(proxyUser + ":" + proxyPassword).getBytes()));
URL url= new URL(fileName);
URLConnection connection= url.openConnection();
connection.setRequestProperty("Proxy-Authorization", new sun.misc.BASE64Encoder().encode(proxyUser + ":" + proxyPassword).getBytes()));
So, i MUST specify the Basic before the user-password or not?
I'm in the rigth direction or i miss something?
Best regards
Gianluca Chiodaroli

Answer 1

I was also struggled to get this thing done for long time and finally mangaged to got through. Following code would demonstrate how you could connect to a https url through a proxy sever. You have to replace your proxy server, port, userid/password and your https URL in the appropriate places.
Also follow the instructions given in the java comments blocks to download the deigital certifactes of your https sites and configure them in the filestores.
I have tested this code with JDK 1.4
Good luck. Dushan Karawita
import com.sun.net.ssl.*;
import javax.commerce.util.BASE64Encoder;
import java.net.*;
import java.io.*;
import java.util.*;
* Title: HttpsPrototye
* Description: This will demonstrate how to connect to a https url through
* a proxy server. It is very difficult to find a proper documentation
* describing how to implement this feature.
* @auther : Dushan Karawita ([email protected])
public class HttpsPrototype {     
     * Performs the proxy tunneling to access the https url.
    public static void testHttps() {
        HttpsURLConnection httpsCon = null;
        DataInputStream dis = null;
        InputStream is = null;
        String response = null;
        String cookieString = null;
        URL sslUrl = null;
        try {
             * Sets the https proxy server and the https proxy port.
             * @todo: Replace the <proxy.server.com> with your proxy server's
             * IP address and replace with the correct port.
            System.setProperty("https.proxyHost", "<proxy.server.com>");
            System.setProperty("https.proxyPort", "80");
             * Add the route to your cacerts filestore (or a filestore of
             * your choice) you'll find ca certs at java_home$/jre/lib/security
             * Seems that if you dont add this java will not always find the
             * certificate required for to trust the SSL connection.
             * Note if you still get a CertificateException "could not find
             * trusted certificate" then you will need to import the public
             * certificate of the website you are connecting  to into the
             * keystore using,
          keytool -import -keystore cacerts -file thecert.cer -alias thecertname
             * This command will add the "thecert.cer" file to the "cacerts"
             * filestore (if not available, it will create it). Make sure you go
             * to the place where you want to place the filestore (cacerts) and
             * run the command since it will create it in the location it's been
             * run. You can use IE to download the certificate and save it in the
             * hard disk with following steps.
             * Tools -> Internet Options -> Content -> Certificates
             * -> Immediate Certification Autherities
             * and select the certificate from the list and select "Export" and
             * follow the wizard to install it into the local hard drive. If the
             * relavent certificate is not available in the list, try to import
             * the certificate by clicking on the padlock sign of the IE when
             * you go into the secure link.
             * Following is the example of how to import the certificate in your
             * filestore.
             * try the password as "changeit"
   E:\jdk1.4.1\jre\lib\security>keytool -import -keystore cacerts -file doit.cer
             * Enter keystore password:  changeit
             * Owner: CN=*.doit.com, OU=Domain Control Validated, OU=See
             * www.ffffssl.com/cps (c)04, OU=https://services.my-choicepoint.net
             * /getit.jsp?126600646, O=*.doit.com, C=NL
             * Issuer: CN=ChainedSSL CA, O=FreeSSL, C=US
             * Serial number: 2899e49
             * Valid from: Thu Jan 29 15:14:20 GST 2004 until: Sat Jan 29
             * 15:14:20 GST 2005
             * Certificate fingerprints:
             * MD5:  44:C5:AC:10:4A:34:6E:19:0D:3A:8A:32:B5:4F:A3:C4
             * SHA1: DA:D8:11:74:B6:BA:EB:D9:98:F2:12:AF:E9:4C:73:0B:4B:FA:1D:CF
             * Trust this certificate? [no]:  y
             * Certificate was added to keystore
             * E:\jdk1.4.1\jre\lib\security>
             * You have to set the filestore where you have imported your site's
             * certificates. Here we're setting the defualt jdk filestore since
             * we have imported the ncessary certificates into the same filestore.
             * You can give different filestore if you have created your
             * filestore in a different place.
            System.setProperty("javax.net.ssl.trustStore",
                    "E:/jdk1.4.1/jre/lib/security/cacerts");
             * Before connecting with a secure URL, we must do this first :
            java.security.Security.addProvider(
                    new com.sun.net.ssl.internal.ssl.Provider());
            System.setProperty("java.protocol.handler.pkgs",
                    "com.sun.net.ssl.internal.www.protocol");
             * The https URL which you want to access.
             * If you are using the JDK defualt filestore, it is a good idea to
             * test with the https://www.sun.com url
             * @todo: Replace your https url.
            sslUrl = new URL("https://www.sun.com");
             * Opens the https URL connection.
            httpsCon = (HttpsURLConnection) sslUrl.openConnection();
            httpsCon.setFollowRedirects(true);
             * Set the Proxy user id and password for the basic proxy
             * authorization.
             * @todo: Replace the <user:password> with your proxy user id and
             * the password.
            httpsCon.setRequestProperty("Proxy-Authorization", "Basic "
                    + new BASE64Encoder()
                    .encodeBuffer("<user:password>".getBytes()));
             * Sets the normal authorization if the site itself is required to be
             * authenticated before access.
             * @todo: Replace the <user:password> with your sites user id and
             * the password.
            httpsCon.setRequestProperty("Authorization", "Basic "
                    + new BASE64Encoder().encodeBuffer("<user:password>"
                    .getBytes()));
             * Reads the coockie from the header field, so we can bind this
             * coockie with the next request header if we want to maintain our
             * session so we would be able to traverse through multiple pages
             * with the same session.
            cookieString = httpsCon.getHeaderField("Set-Cookie");
            cookieString = cookieString.substring(0, cookieString.indexOf(";"));
            System.out.println(cookieString);
             * get the input stream and creates a DataInputStream.
            is = httpsCon.getInputStream();
            dis = new DataInputStream(new BufferedInputStream(is));           
             * Reads the input stream through the DataInputStream and print the
             * response line by line.
            while ((response = dis.readLine()) != null) {
                System.out.println(response);
            dis.close();
            is.close();
            httpsCon.disconnect();
        } catch (MalformedURLException mfue) {
            mfue.printStackTrace();
        } catch (IOException ioe) {
            ioe.printStackTrace();
     * main method to test the code.
     * @param args
    public static void main(String args[]) {
        new HttpsPrototype().testHttps();
}