SOAP & HTTPS: cannot authenticate at proxy

Question

Hi,
I have a problem with secure tunneling of SOAP through a HTTP proxy. The proxy
requires authentication and SOAP simply does not provide the auth credentials if
it is also using SSL.
This is an example of the communication between SOAP client and proxy server.
The client sends this:
CONNECT www.remote-domain.de:443 HTTP/1.0
User-Agent: Java/1.4.2_02The proxy answers with this:
HTTP/1.1 407 Proxy Authentication Required ( The ISA Server requires authorization
to fulfill the request. Access to the Web Proxy service is denied.  )
Via: 1.1 SERVER1
Proxy-Authenticate: Basic realm="server1.domain.de"
Connection: close
Proxy-Connection: close
Pragma: no-cache
Cache-Control: no-cache
Content-Type: text/html
Content-Length: 724   According to the HTTP RFC, there should be another header in the client
request, Proxy-Authorization. Therefore the proxy is right to complain. But
how can I convince SOAP to send this auth?
This is the code:
    System.setProperty("java.protocol.handler.pkgs", "com.sun.net.ssl.internal.www.protocol");
    Provider provider = new com.sun.net.ssl.internal.ssl.Provider();
    Security.addProvider(provider);
    Call lCall = new org.apache.soap.rpc.Call();
    lCall.setTargetObjectURI(aServiceId);
    lCall.setMethodName(aMethodName);
    lCall.setEncodingStyleURI(Constants.NS_URI_SOAP_ENC);
    lCall.setParams(aParams);
    lCall.setSOAPMappingRegistry(fSOAPRegistry);
    SOAPHTTPConnection lConnection = new SOAPHTTPConnection();      
    lConnection.setProxyHost(gProxyHost);
    lConnection.setProxyPort(gProxyPort);
    lConnection.setProxyUserName(gProxyUser);
    lConnection.setProxyPassword(gProxyPassword);
    lCall.setSOAPTransport(lConnection);
    Response lResponse = lCall.invoke(fURL, aServiceId);The invoke() at the bottom raises an exception:
[SOAPException: faultCode=SOAP-ENV:Client; msg=Error opening socket:
java.io.IOException: Unable to tunnel through server1:9090. 
Proxy returns "HTTP/1.1 407 Proxy Authentication Required ( The ISA Server
requires authorization to fulfill the request. Access to the Web Proxy service
is denied.  )"; targetException=java.lang.IllegalArgumentException: Error opening
socket: java.io.IOException: Unable to tunnel through server1:9090.  Proxy returns
"HTTP/1.1 407 Proxy Authentication Required ( The ISA Server requires authorization
to fulfill the request. Access to the Web Proxy service is denied.  )"]
     at org.apache.soap.transport.http.SOAPHTTPConnection.send(SOAPHTTPConnection.java:354)
     at org.apache.soap.rpc.Call.invoke(Call.java:248)I have even tried to use a descendant of SOAPHttpConnection to add the
auth credentials myself, but this did not change a thing:
    class SoapBasicAuthConnection extends SOAPHTTPConnection
      public void send(
        java.net.URL sendTo,
        java.lang.String action,
        java.util.Hashtable headers,
        Envelope env,
        SOAPMappingRegistry smr,
        SOAPContext ctx)
        throws SOAPException
        if (headers == null)
          headers = new java.util.Hashtable();
        sun.misc.BASE64Encoder encoder = new sun.misc.BASE64Encoder();
        String proxyAuth = gProxyUser + ":" + gProxyPassword;
        proxyAuth = "Basic " + encoder.encode(proxyAuth.getBytes());
        headers.put("Proxy-Authorization", proxyAuth);
        super.send(sendTo, action, headers, env, smr, ctx);
    }    I have no more ideas to try out. There are many postings on the net dealing
with HTTPS & proxies, but the solutions given there do not work if I have to
stick to SOAPHttpConnection.
If the SOAP call is made via HTTP, not HTTPS, all is well and the required
auth header is present in the client request:
POST http://www.remote-domain.de/soapcontext/servlet/rpcrouter HTTP/1.0
Host: www.remote-domain.de:80
Content-Type: text/xml; charset=utf-8
Content-Length: 661
SOAPAction: "urn:domain:mandator"
Proxy-Authorization: Basic QWXXXXXXXXXXX==But then the transmitted SOAP data is not encrypted of course...
DC

Answer 1

Ok, here is the solution. The latest stable release of Apache ws-soap, v2.3.1, does not support soap vis proxy with auth. One has to use one of the nightlies. In my case it worked with the latest nightly from 2004-06-22. The classes SSLUtils and HTTPUtils have been improved a lot with this. If only this would have been easier to find...