One Star

[resolved] Calling a Secure Web Service via SSL through a Proxy

I have a job that successfully calls a secure web service, but not via a proxy. In the tWebServiceInput component:
1. The WSDL is https:...
2. Authentication is turned on and username and password specified.
3. Trust server with SSL is turned on and a trust store file and password specified. The trust store contains the SSL certificate.
This all works fine. HOWEVER, I need the call to pass through a proxy. I've tried several mechanisms:
1. Turning on "Use http proxy" in the tWebServiceComponent.
2. Using a tSetProxy at the start of the job, configured with a http proxy.
3. Using a tSetProxy at the start of the job, configured with a https proxy.
4. Using a tPreJob and a tSetProxy at the start of the job, configured with a https proxy.
All of the above attempts result in:
"javax.net.ssl.SSLException: Unrecognized SSL message, plaintext connection?"
It feels like I should be configuring an https proxy, but the tWebServiceInput component only allows an http proxy and configuring the https proxy in a tSetProxy at the start of the job seems not to work.
Any ideas?
1 ACCEPTED SOLUTION

Accepted Solutions
One Star

Re: [resolved] Calling a Secure Web Service via SSL through a Proxy

Resolved. The issue was caused by firewall rules not being correctly set up on the proxy server. Final solution uses a tSetProxy (https) which results in an Anonymous user which must be allowed in a firewall rule at the proxy to communicate from the Talend Job Server IP to the webservice host IP. The error is far from helpful, but hey that's not Talend's fault!
5 REPLIES
One Star

Re: [resolved] Calling a Secure Web Service via SSL through a Proxy

TIS 3.2.2r33000 by the way.
One Star

Re: [resolved] Calling a Secure Web Service via SSL through a Proxy

Resolved. The issue was caused by firewall rules not being correctly set up on the proxy server. Final solution uses a tSetProxy (https) which results in an Anonymous user which must be allowed in a firewall rule at the proxy to communicate from the Talend Job Server IP to the webservice host IP. The error is far from helpful, but hey that's not Talend's fault!
Community Manager

Re: [resolved] Calling a Secure Web Service via SSL through a Proxy

Hi
I am glad to see that you find out the cause and find the solution using tSetProxy component.
Best regards
Shong
----------------------------------------------------------
Talend | Data Agility for Modern Business
One Star

Re: [resolved] Calling a Secure Web Service via SSL through a Proxy

Hello,
I have a similar problem when try to download an xml file in a tFileFetch.
I've tried to use a tSetProxy but I still have the same problem. The connection to te squid proxy is not done.
If I understand well, I have to allowed my user in the firewall rule at proxy to communicate from talent to the URI http ?
Regards,
Stephane
One Star

Re: [resolved] Calling a Secure Web Service via SSL through a Proxy

Hello,
Finaly, an exception has been done to the proxy for the url.
So I call first a tSetProxy and then a tFileFetch but I still have a problem.
Maybe I forgot something ?

Regards,
Stephane