|
[Sorry for the repost from yesterday, not sure if
nobody knows the answer, or whether it was simply not received.]
I have a Java client (Apache SOAP 2.2) using JSSE
1.0.2 for HTTPS URLs to my web service. The client is behind a proxy
server (netscape?). The connection to the proxy is always over port 80,
even though my code is connecting to an HTTPS port 443 URL.
What I've found is that when I use an HTTP port 80
url to our service, it is able to communicate okay, but that won't work for
production where SSL is required. But when I try to connect over HTTPS,
the communications never takes place. (Mind you, this works fine for HTTPS
when there's no proxy server in the middle -- that is, the client is able to
communicate directly with SSL across the Internet when no proxy exists -- and it
can communicate through the proxy when using HTTP only by calling the setProxy
methods on SoapTransport)
From the Apache source, I'm not sure, but is the
communications from the client to the proxy server encrypted with SSL already,
or is that done in the clear with the expectation that the proxy server
will then initiate the SSL connection to my SOAP server? What is the SOAP
code doing when the URL says use HTTPS, but the proxy configuration says to
communicate over port 80 to the proxy server?
It's a question of SSL tunneling versus HTTPS
proxying...
If it sends the data to the proxy server via SSL,
how does the proxy server know where to forward the request to since the HTTP
headers contain the target URL and they'd be encrypted.
Thanks,
David
|
- Re: SOAP and proxy servers problems with SSL David Wall
- Re: SOAP and proxy servers problems with SSL Simon Fell
- Re: SOAP and proxy servers problems with SSL David Wall
- Re: SOAP and proxy servers problems with SSL Simon Fell
