[pca] EXTERNAL: Re: Proxy Issue?

[Faulconer, Steven M]

Martin,

The new development release appears to fix my issues (in a quick test). I'm
going to run a couple systems through the PCA proxy over the next few days
and will let you (and the list) know if I hit any other snags.

Thank you for the very quick response and fix!

Steven

-----Original Message-----
From: pca-bounces at lists.univie.ac.at [mailto:pca-bounces at lists.univie.ac.at]
On Behalf Of Martin Paul
Sent: Thursday, August 11, 2011 3:54 AM
To: PCA (Patch Check Advanced) Discussion
Subject: EXTERNAL: Re: [pca] Proxy Issue?

Steven,

> With PCA running as a proxy, I seem to be unable to get patches I am
> authorized for. I've attached the section of pca-proxy-debug.txt for the
> patch I'm trying to get (it's one of many, many patches that do not work).

I think I've identified the problem - thanks for including detailed debug
output 
in your message, this was very helpful.

It's due to how PCA handles the wgetproxy option and the changes in the
download 
  procedure on Oracle's side. For any URL it tries to access, PCA looks
whether 
it's HTTP or HTTPS, and sets either http_proxy or https_proxy for wget to
the 
value set in the wgetproxy option. Now while the primary URL for patch
downloads 
uses HTTPS, the last redirect in your example points at an HTTP URL 
(http://aru-llnw.oracle.com/). So wget then tries to access this URL
directly 
and not through the proxy, and fails. Before the backend changes, the
redirect 
always ended at https://a248.e.akamai.net/, so it was HTTPS for all URLs.

As a fix, I've now changed PCA to always set both http_proxy and
https_proxy, no 
matter which protocol is used in the URL to be accessed. Please get the
current 
development release and try that:

   http://www.par.univie.ac.at/solaris/pca/develop/pca

As to why it works for Michele anyway, I can only guess that on his system
the 
proxy settings for wget (both http and https) are already set in e.g. 
/etc/wgetrc or ~/.wgetrc, making PCA's wgetproxy option superfluous. That's
what 
I recommend anyway, as like that wget will also work outside of PCA.

Please let me know if this was of help,

Martin.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 10330 bytes
Desc: not available
URL: <https://lists.univie.ac.at/pipermail/pca/attachments/20110811/896dae6a/attachment.bin>