This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

HTTPS Proxy Java Update fails

Hi,

we do have the webfilter https proxy enabled. and our clients wont get any java updates.
When I clieck on Java Update, the Certficate shows up (CA is our UTM, Owner is oracle.com) so I click yes accept the certificate and nothing happens.

I added akamaitechnologies, java, oracle and sun as DNS-Group to the webfilter->advanced-> transparent mode exceptions and I disabled all Cert Checks for this 3 hosts as well. I dont get any information in the webfilter-logs. So I guess that oracle doesnt accept our selfsigned cert.

Any idea?

Regards

This thread was automatically locked due to age.

Parents

0 BAlfson over 11 years ago

Hi, Max, and welcome to the User BB!

There's something else going on. With a DNS Host definition for that FQDN in the transparent mode skiplist, there should be no block of any file extension from there.

Please find the block in the Web Filtering log file and show us that line.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 11 years ago

Hi, Max, and welcome to the User BB!

There's something else going on. With a DNS Host definition for that FQDN in the transparent mode skiplist, there should be no block of any file extension from there.

Please find the block in the Web Filtering log file and show us that line.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 M.Rottler over 11 years ago in reply to BAlfson

Hi BAlfson,

thanks for your help!

2014:02:04-16:28:10 UTM-1 httpproxy[17908]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="HEAD" srcip="140.140.5.245" dstip="88.221.93.24" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0x9cc4488" url="rps-svcs.sun.com/.../html"

2014:02:04-16:28:52 UTM-1 httpproxy[17908]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="140.140.5.245" dstip="54.195.84.83" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2" request="0xd1b2258" url="http.00.s.sophosxl.net/.../" exceptions="av,auth,content,url,ssl,certcheck,certdate,mime,fileextension,size" error=""

2014:02:04-16:28:53 UTM-1 httpproxy[17908]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="140.140.5.245" dstip="54.195.84.83" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2" request="0xd1b2258" url="http.00.s.sophosxl.net/.../" exceptions="av,auth,content,url,ssl,certcheck,certdate,mime,fileextension,size" error=""

2014:02:04-16:28:53 UTM-1 httpproxy[17908]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="140.140.5.245" dstip="54.195.84.83" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="11" request="0xd1b2258" url="http.00.s.sophosxl.net/.../" exceptions="av,auth,content,url,ssl,certcheck,certdate,mime,fileextension,size" error=""

After that it says:

"Download failed: from=http://javadl.oracle.com/***"

thanks!

0 M.Rottler over 11 years ago in reply to M.Rottler

OK, it's working now...

Before the error was:

2014:02:12-11:09:15 UTM-1 httpproxy[5452]: id="0064" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden file extension detected" action="block" method="GET" srcip="140.140.****" dstip="81.20.72.138" user="" statuscode="403" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2831" request="0x10d179d8" url="sdlc-esd.sun.com/.../jre1.7.0_51-pfrom40-b43.msi

then I added "sdlc-esd.sun.com/.../*" to the exceptions list with extension blocking disabled and it's updating now!

0 M.Rottler over 11 years ago in reply to M.Rottler

Ok, however but it was just working for my machine...

But now it's working for the whole company. Add an exception skipping Extension Blocking and Content Filter with these URLs:

^https?://[^.]*\.sun.com
^https?://[^.]*\.javadl.oracle.com
^https?://[^.]*\.deploy.akamaitechnologies.com

have a nice day

Max
Cancel
Vote Up 0 Vote Down

Cancel
0 MarkToo over 10 years ago in reply to M.Rottler

This thread was useful in getting Java updates working again on my home network. Since the information is a bit old I needed to tweak what I learned here in order to solve the issue with Java. Here is a link to the settings that worked for me. [:)]
Cancel
Vote Up 0 Vote Down

Cancel