Web service client behind a proxy server connecting to web service over SSL

Hi Friends,
A web service is exposed by an external system over SSL. We are behind a proxy server and are trying to get connected to web service over SSL. 
We are getting the following error on the test browser of workshop
External Service Failure: FATAL Alert:HANDSHAKE_FAILURE - The handshake handler was unable to negotiate an acceptable set of security parameters.
the whole trace is 
JDIProxy attached
<Sep 24, 2005 9:27:25 AM EDT> <Warning> <WLW> <000000> <Id=creditCheckCtrl:salesExpertServiceControl; Method=creditcheckcontr
ol.SalesExpertServiceControl.doCreditVerification(); Failure=com.bea.control.ServiceControlException: SERVICE FAULT:
Code:javax.net.ssl.SSLHandshakeException
String:FATAL Alert:HANDSHAKE_FAILURE - The handshake handler was unable to negotiate an acceptable set of security parameters
Detail:
END SERVICE FAULT>
<Sep 24, 2005 9:27:26 AM EDT> <Warning> <WLW> <000000> <Id=creditCheckCtrl; Method=creditcheckcontrol.CreditCheck.testCreditC
heck(); Failure=com.bea.control.ServiceControlException: SERVICE FAULT:
Code:javax.net.ssl.SSLHandshakeException
String:FATAL Alert:HANDSHAKE_FAILURE - The handshake handler was unable to negotiate an acceptable set of security parameters
Detail:
END SERVICE FAULT [ServiceException]>
<Sep 24, 2005 9:27:26 AM EDT> <Warning> <WLW> <000000> <Id=top-level; Method=processes.CreditCheck_wf.$__clientRequest(); Fai
lure=com.bea.wli.bpm.runtime.UnhandledProcessException: Unhandled process exception [ServiceException]>
<Sep 24, 2005 9:27:26 AM EDT> <Error> <WLW> <000000> <Failure=com.bea.wli.bpm.runtime.UnhandledProcessException: Unhandled pr
ocess exception [ServiceException]>
I am not able to make out what could be possibly wrong. Please let me know if you guys have any ideas about how to resolve it.
Thanks
Sridhar

did you resolve this problem. I am looking at the same issue. If you did I would really appreciate your response.
Thanks.

Similar Messages

Can Air application connect behind a proxy server

Can Air application connect behind a proxy server using HTTP
or SOCKS.
thanks

I tried it but its not working. I am using XMLSocket
var socket:XMLSocket = new XMLSocket();
socket.connect( server, 5000 );
It returns "no response from server", It works fine if i
directly connected to internet.
My browser is able to connect to internet means all
configurations are fine.

Problems with Arrowpoint cookies for clients behind a Proxy

I have in a WebSite clients being load balanced using Arrowpoint cookies to a virtual Server. The CSS load balance between three Apache real servers.
I have some clients that are behind some kind of Proxy Cache and I have seen with a sniffer that the proxies causing the problem Re-use proxy to our server connections for different requests for multiple clients.
Then, as I understand the CSS make the forwarding decission based on the cookie of the first request for the first client behind the proxy after establishing the HTTP connection, but when there is a request from other client using this same connection (that must be forwarded to other real server) the request is forwarded to the original web server and fails because we need sticky connections.
I thought that this wasn't correct but I have read some documents that say that this is called a Proxy role as a "connection cache". Then my question is if there is any workaround for this problem.
Thanks

I believe your problem is that the proxy open a few persistent connections with the CSS and loadbalance your client's request over them.
Once the CSS has associated a connection with a service, it does not look into the request anymore.
The solution is to disable persistence on the CSS with the command 'no persistent' and 'persistence reset'.
Find more info at :
http://www.cisco.com/en/US/products/hw/contnetw/ps789/products_tech_note09186a0080093e06.shtml#crp
Gilles.

Creating a socket behind a proxy server

How can I create a socket to a server if the client is behind a proxy server? I know java.net's HTTP-related classes have built-in proxy server support but this is not for a HTTP-based application.

Hi,
I also need to do this but not found any way yet. Somewhere I read that we can set the socket proxies (because mine was an application which tries to open socket connection over the network) through command line or by setting the system properties "socksProxyHost=<proxy_host_address>" and "socksPoxyPort=<proxy_port>". I tried to solve my proxy issue this way but all invain. While setting these system properties it is required that your proxy server is using the SOCKS service which I think is mostly the case but it still didn't work for me. You people try and c if it works for you. If anyhow you manage to get this issue resolved then please tell me also by posting a message.
regards

FTP-client behind RRAS - unable to connect to external FTP servers

FTP-client behind RRAS - unable to connect to external FTP servers
A small network (10-20PCs) without any segmentation - one LAN with one Gateway.
1. If the Gateway is some small hardware device, there are not any problems to make FTP-connections from LAN to Internet FTP-servers
2. If the Gateway is Win2003+RRAS+NAT or Win2003+ISA2005, there are not any problems to make FTP-connections from LAN to Internet FTP-servers
3. But if the gateway is Win2008+RAS+NAT or Win2012+RRAS+NAT, the computers in the LAN are not able to connect to Internet FTP-servers
I made a few tests:
1. On Win2012+RRAS+NAT
TurnOff Windows Firewall for All profiles (Domain, Private, Public) - the problem disappears, it it possible to connect to external Internet FTP-servers.
2. On Win2012+RRAS+NAT
TurnOff Windows Firewall only for Domain profile - the problem disappears, it it possible to connect to Internet FTP-servers.
3. On Win2012+RRAS+NAT
TurnOn Windows Firewall for All profiles (Domain, Private, Public)
But I excluded the Internal NIC in this list
Windows Firewall / Properties / Domain Profile / Protected network connections
and the problem disappears again
My question is:
What new Firewall rule I have to make and where to place it (to be able to make FTP-connection from LAN to Internet FTP-servers)?
I made some attempts to allow port21, but any success.

Thank you, but did you try this ?
Can you describe in detail "exclusion rule for FTP traffic" ?!
In my previous post, I want to say that if you use Win 2008/2012 RAS+NAT as a network gateway, than it is not possible to make FTP-connections to external FTP servers from the computers behind that gateway.
And the standard attempts to make "Allow"-rules for port 21 in the gateway firewall (Win 2008/2012), do not solve the problem.
No matter which FTP-client you can try to use.
To see this problem, just make few simple tests:
">telnet <ftp-server> 21"
with firewall on/off and inbound/outbound "Allow port 21 rule (All/Domain/Private/Public)"
In my country, the Government Tax Department uses FTP-protocol to collect monthly data from companies.
And it is too stupid scenario (to be a small company and to) upgrade from Win 2003 to a newer 2008/2012 and than to not be able to make all your jobs.
-------EDIT---------
The same problem (and its solution) is described here:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/0c68aed6-e22b-4cd4-86bd-f3c767e88349/advanced-firewall-blocking-through-ftp-traffic-rras
The magic command:
">netsh routing ip nat delete ftp"
solved the problem for me.
And here is the description of this command - "Disables the FTP proxy on the NAT server."
http://technet.microsoft.com/en-us/library/cc754535(v=ws.10).aspx#BKMK_106

API for Proxy Server Connection

Hi,
can anybody tell me any API for Proxy Server Connection in java EXCLUDING
httpclient(apache) and setting system setting and making a urlconnection.

hey thanx for replying
Firstly i clear my requirement
I want some other way of connecting to Proxy Server Irrespective of Httpclient and setting system properties and then making url Connection ,these ways are clear to me .
I found one API HTTPClient (not belonging to apache Httpclient) its different
u check this at
http://www.innovation.ch/java/HTTPClient/api/index-all.html#_S_
But the problem is this API Does't support NTLM
i tried to found higher version of this API but i did't get .
API should support :
1. NTML
2.JDK 1.4
3.SOCKS (not necessary)
4.HTTP protocol (other like FTP ... not necessary)

Places look-up crashes iPhoto '09 8.1.2 when behind a proxy server

Places in iPhoto was always a problem for those imprisoned behind a proxy server, however since the 8.1.2 update this has caused iPhoto to hang forever when iPhoto tries to add new places automatically, E.G. when you plug your iPhone in.
As a work-around I deleted com.apple.iPhoto.plist from my Username > Library >Preferences folder and then told it not to look up locations automatically when it asked about it on startup.
Not ideal but it does work without hanging now!
Ideally Apple would fix the Proxy support in iPhoto...

Welcome to the Apple Discussions.
Ideally Apple would fix the Proxy support in iPhoto...
You'll have to ask Apple directly at http://www.apple.com/feedback/iphoto.html

Rich-client Java application that is client to WLS6.1 but behind corporate proxy server

We have a rich-client Java application that is a client to WLS6.1 that can't
connect to the WLS6.1 server when the client is behind a corporate proxy
server. What is a remedy for this?
Thanks,
Jim Weavere

Found solution. Followed Part 2 of the solution as explained in http://support.bea.com/application?namespace=askbea&origin=ask_bea_answer.jsp&event=link.view_answer_page_solution&answerpage=solution&page=wlw/S-19283.htm
What surprises me is that this solution to a common problem is hidden and hard
to find. If I am correct, no part of WLS 8.1 documentation suggests this. Rather
the doc says, set the system properties for the standard JDK 1.4 network properties
and it should work fine. If it is actually supposed to work like this, is it a
bug then?
"Naveen Kumar" <[email protected]> wrote:
>
Hi,
I have a web application deployed on WebLogic server 8.1 sp1. And my
server is
behind a http proxy server. Now one of the components in the application
makes
a web service call to a service located external to the system, and it
always
throws "java.net.UnknownHostException". I have set the Java system properties
http.proxyHost = my proxy server, http.proxySet = true and http.proxyPort
= 80
and it still does not help.
If I try to evaluate the web service component as a stand alone client
using WebLogic's
webserviceclient.jar, everything works fine. I can't figure what I have
to do
to get this component working from within the WebLogic server. Can anybody
provide
me with inputs, comments or suggestions.
Naveen.

Client-Proxy-Server: Connection refused

I was meddling with a client-proxy-server toy program.
Pardon my poor code construction. I have never had any previous knowledge in this field.
I have created a client side program with my main that handles IO serially.
ProxY consists of 2 unscynchronized threads each interacts with client and server respectively.
Packet exchange within ProxY is relayed using a PacketBuffer object.
Server consist of a single threaded service. Below is the code for my main.
import java.io.IOException;
import java.net.ServerSocket;
import java.net.Socket;
import java.io.InputStream;
import java.io.OutputStream;
import java.util.Scanner;
public class TestProxy
 public static void main(String[] args) throws IOException
 final int SERVER_PORT = 19989;
 final int PROXY_PORT = 19988;
 ServerSocket proxyServerSoc = new ServerSocket(PROXY_PORT);
 Socket proxyClientSoc = new Socket("127.0.0.9",SERVER_PORT); //127.0.0.9 is server IP
 Server serv = new Server(SERVER_PORT); //Server started
 ProxY prox = new ProxY(proxyClientSoc, proxyServerSoc); //proxy started
 //Start Client side;
 Socket toProxy = new Socket("127.0.0.1", PROXY_PORT);
 InputStream in = toProxy.getInputStream();
 OutputStream out = toProxy.getOutputStream();
 Scanner keyboard = new Scanner(System.in);
 String input;
 while(true)
 System.out.println("Enter data : ");
 input = keyboard.nextLine();
 if(input.equals("exit")) break;
 System.out.println("data in BYTE: "+input.getBytes());
 System.out.println("Sending data to server ...");
 out.write(input.getBytes());
 try{
 Thread.sleep(100);
 catch(InterruptedException e)
 e.printStackTrace();
 System.out.println("Received from server :" + in.toString());
}Compilation is a success, but there is a runtime error...
When i attempt to run the program for the first time(tried on XP, Vista, 7, jdk1.6), windows prompts for network permission.
Before i can [edit]unblock[edit] it, my console window shows following error
C:\java\proxy>javac *.java
C:\java\proxy>java TestProxy
Exception in thread "main" java.net.ConnectException: Connection refused: connec
t
 at java.net.PlainSocketImpl.socketConnect(Native Method)
 at java.net.PlainSocketImpl.doConnect(Unknown Source)
 at java.net.PlainSocketImpl.connectToAddress(Unknown Source)
 at java.net.PlainSocketImpl.connect(Unknown Source)
 at java.net.SocksSocketImpl.connect(Unknown Source)
 at java.net.Socket.connect(Unknown Source)
 at java.net.Socket.connect(Unknown Source)
 at java.net.Socket.<init>(Unknown Source)
 at java.net.Socket.<init>(Unknown Source)
 at TestProxy.main(TestProxy.java:15)
C:\java\proxy>Can someone advise me where might i be possibly wrong?
Edited by: J-Ideas on Mar 10, 2010 10:50 PM

 out.write(input.getBytes());
 try{
 Thread.sleep(100);
 catch(InterruptedException e)
 e.printStackTrace();
 }What's that for?
 System.out.println("Received from server :" + in.toString());No no no. 'in' is an input stream. in.toString() is just a string representation of that object. It certainly isn't anything received from the server. If you want to receive data from the server you must call one of the in.read() methods.
When i attempt to run the program for the first time(tried on XP, Vista, 7, jdk1.6), windows prompts for network permission.
Before i can [edit]unblock[edit] it, my console window shows following errorYou should separate your program into three: server, proxy, and client, each with their own main() methods, so you can deal with these problems one at a time.

Web service client ignores http proxy settings

I have a web service client using Weblogic's web service client library. I'm trying to instruct it to use a http proxy. I've set all the following system properties:
-Dhttp.proxyHost=127.0.0.1
-Dhttp.proxyPort=8080 -Dweblogic.webservice.transport.http.proxy.host=127.0.0.1 -Dweblogic.webservice.transport.http.proxy.port=8080
No traffic is passing through the proxy.
When the proxy is down, the application works fine too. I suspect that the proxy settings are completely ignored for some reason.
I'm using Weblogic 8.1 SP4 on a Windows XP box and JDK 1.4.2 (Sun's bundled JDK with Weblogic).

Sorry about the delay,
You just need to use the standard java http proxy properties, take a look at:
http://download-west.oracle.com/docs/cd/A97329_03/web.902/a95453/useservices.htm
Does this help?
Gerard

Calling WS from WebLogic server 8.1 that is behind a Proxy server

Hi,
I have a web application deployed on WebLogic server 8.1 sp1. And my server is
behind a http proxy server. Now one of the components in the application makes
a web service call to a service located external to the system, and it always
throws "java.net.UnknownHostException". I have set the Java system properties
http.proxyHost = my proxy server, http.proxySet = true and http.proxyPort = 80
and it still does not help.
If I try to evaluate the web service component as a stand alone client using WebLogic's
webserviceclient.jar, everything works fine. I can't figure what I have to do
to get this component working from within the WebLogic server. Can anybody provide
me with inputs, comments or suggestions.
Naveen.

Found solution. Followed Part 2 of the solution as explained in http://support.bea.com/application?namespace=askbea&origin=ask_bea_answer.jsp&event=link.view_answer_page_solution&answerpage=solution&page=wlw/S-19283.htm
What surprises me is that this solution to a common problem is hidden and hard
to find. If I am correct, no part of WLS 8.1 documentation suggests this. Rather
the doc says, set the system properties for the standard JDK 1.4 network properties
and it should work fine. If it is actually supposed to work like this, is it a
bug then?
"Naveen Kumar" <[email protected]> wrote:
>
Hi,
I have a web application deployed on WebLogic server 8.1 sp1. And my
server is
behind a http proxy server. Now one of the components in the application
makes
a web service call to a service located external to the system, and it
always
throws "java.net.UnknownHostException". I have set the Java system properties
http.proxyHost = my proxy server, http.proxySet = true and http.proxyPort
= 80
and it still does not help.
If I try to evaluate the web service component as a stand alone client
using WebLogic's
webserviceclient.jar, everything works fine. I can't figure what I have
to do
to get this component working from within the WebLogic server. Can anybody
provide
me with inputs, comments or suggestions.
Naveen.

Lync Client Behind A Proxy

Can anyone confirm if the Lync client can be configured to route traffic via a proxy, or to use the proxy settings defined in IE?
I have the following scenario...
The environment is heavily locked down, and PC's only have access to the Internet via a defined IE proxy. Internal IM, presence and communication all work fine. We have configured federation with some remote organizations. IM and presence
works fine to these orgs, but when any A/V or application sharing is attempted, the media fails. I can see from traces this is when the client tries (and fails) to access the A/V edge of the remote federated parties edge server.
I've looked at the Lync settings, reg settings, group policy ADM and documentation, and cant find anything to a) confirm if this behavior is correct or b) any way to work around it.
There must be other Lync implementations in hardened environments like this. Opening up outbound ports is out of the question, so what other options do i have?
Dave

Jay, you missed the key word in my last post "internally". Functionally, everything about the edge server is working fine. Clients can login internally and externally. Media flows from internal to external clients is fine. All SIP/AV/WEBCON
DNS entries are fine in public DNS along with supporting SRV records. These interfaces are Nat'd and the AV address is correctly assigned.
My problem only occurs when an AV session is attempted with a federated partner...
When any AV or sharing is attempted, from the internal network, to the federated partner, i can see the Lync client attempting to make connections out to the remote federated partners AV edge (something which it will never be able to do as it's behind a
proxy with no direct Internet access). This is what I'm trying to address.
Should the SIP/AV/WEBCON address exist INTERNALLY
on the corporate DNS servers for internal clients to resolve? Is this what i have missed?
Is there anyway to instruct the Lync client to route traffic bound for the Internet via a proxy?
Surely there must be someone else with this scenario in a locked down environment?

Messages with Server 3.1.2 behind a proxy server

Help ...
I am familiar with earlier iterations of the Mac OS X server software and set up a largish 16TB system in a UK hospital before I retired. I am now working for a charity in a remote location and testing the latest version running on a recycled MacBook Pro to see if it could be used in earnest to provide local services to support the volunteer community here. Access to the internet is very slow and heavily restricted by a Squid proxy server and I find the lack of a comprehensive OS X Server manual frustrating at times (if there is one please point me to it!).
I have File Sharing running fine, but I am struggling to find the workable settings for a cross platform local messaging service. I am trying AIM initially, but whatever settings at the user end I select I keep getting either 'server refusing connections' or 'unidentified AIM socket error' messages.
Any assistance would be really appreciated ... especially as this is my foray into the world of Messages!
Thanks in anticipation,
Ian
Test system: Server: MacBook Pro running Server 3.1.2 on Mac OS X 10.9.4 Client: MacBook Air running Mac OS X 10.9.4

Since posting this I have been able to download more information and also search the ASC threads - and see I should be using Jabber.
So - I may still need some advice but I am working towards the solution ... hopefully!

ISE dot1x working BUT ..... client is getting "PROXY SERVER unreachable"

Dear Experts,
From ISE 2.x I am able to ping the proxy server but once windows user authenticated and logs in, he cannot go to the internet and gets proxy error.
Let me know some points and vectors to look into !!!
waiting.

The only time ISE would perform traffic redirection is when you doing things like CWA (Central Web Authentication), Posture Assessment, etc. If you are just doing basic dot1x/mab authentication then ISE just decides who gets on the network and what type of access that person/devices gets.
With that being said, what happens if you remove dot1x authentication from the port? Can the client reach ISE then? (you can quickly remove dot1x by issuing no authentication port-control auto)
Other things to try:
1. Remove the dACL
2. In the authorization rule, return the default "permit access"
3. Remove the ACL on the FW
4. Anything else that might be affecting the connection
With the process of elimination you should be able to find the root cause of the issue
Thank you for rating helpful posts!

Finesse Fail over behind a proxy server

As per the following link
https://developer.cisco.com/site/collaboration/contact-center/finesse/overview/technical.gsp
summary :- The gadget includes JavaScript and references to various web services. Browser can't have connections to servers in multiple domains due to security considerations so Cisco Finesse functions as web proxy so all requests from the browser use a single domain.
How does the Side A and Side B concept works when Finesse is configured behind proxy?
As per the following link
https://developer.cisco.com/site/collaboration/contact-center/finesse/overview/technical.gsp
summary :- The gadget includes JavaScript and references to various web services. Browser can't have connections to servers in multiple domains due to security considerations so Cisco Finesse functions as web proxy so all requests from the browser use a single domain.
How does the Side A and Side B concept works when Finesse is configured behind proxy?

Contact your ISP for instructions on how to obtain a direct connection.

Web service client behind a proxy server connecting to web service over SSL

Similar Messages

Maybe you are looking for