Accessing web service via a pac file. proxy

Hello,

I've tried the NeoJSON examples in the VAST 9.1 Beta. It works fine, when I do it in my private environment.

I tried the SST-example from the old VAST-forum <a href="http://forums.instantiations.com/topic-12-2393.html" target="_blank" rel="nofollow" onmousedown="this.href=&#39;http://www.google.com/url?q\x3dhttp%3A%2F%2Fforums.instantiations.com%2Ftopic-12-2393.html\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNFVtJStRcB92hKp9h3O-pOzf9SW8w&#39;;return true;" onclick="this.href=&#39;http://www.google.com/url?q\x3dhttp%3A%2F%2Fforums.instantiations.com%2Ftopic-12-2393.html\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNFVtJStRcB92hKp9h3O-pOzf9SW8w&#39;;return true;">http://forums.instantiations.com/topic-12-2393.html

'<a href="https://api.predic8.de/shop/products/" target="_blank" rel="nofollow" onmousedown="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fapi.predic8.de%2Fshop%2Fproducts%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHRf8XSjuzvNJerv45BcwEsebbf6Q&#39;;return true;" onclick="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fapi.predic8.de%2Fshop%2Fproducts%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHRf8XSjuzvNJerv45BcwEsebbf6Q&#39;;return true;">https://api.predic8.de/shop/products/' sstAsUrl fetch.

This works fine at home.

But in my customers environment http(s) connections are directed through a PAC-file. The example works in Firefox, IE, Chrome. But not in a VAST-Workspace.

I could download this file and tried to configure the #SstClient

This does not work and returns with error: ECONNREFUSED (10061): Connection refused.

SstHttpClient

      initializeTransportScheme: 'local_https_tunnel'

      forHttpsTunnelThrough: 'every.ipadress.from.pac:portnumber' 

      proxyAuth: nil

"I filled proxyAuth too.. Or tried the pac-file-url. "

|client|

    (client := SstHttpClient forTransportScheme: 'local_https_tunnel') startUp.

    [client get: '<a href="https://api.predic8.de/shop/products/" target="_blank" rel="nofollow" onmousedown="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fapi.predic8.de%2Fshop%2Fproducts%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHRf8XSjuzvNJerv45BcwEsebbf6Q&#39;;return true;" onclick="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fapi.predic8.de%2Fshop%2Fproducts%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHRf8XSjuzvNJerv45BcwEsebbf6Q&#39;;return true;">https://api.predic8.de/shop/products/']

        ensure: [client shutDown]

What did I wrong?

Kind regards and a nice sunny day

Klaus

Hello Klaus,

I *think* you are running into what I just ran into recently and fixed in our latests builds.
In my scenario, when using a proxy server only the one-shot #fetch: message would work.
The first call to #get: would pass, but subsequent calls to #get: would fail because the client did not remember that it already established a secure tunnel.

As a result the client would keep trying to establish a secure connection on every get: request resulting in an conn refused.

Just to see if it's the same thing...can you try using SstHttpClient fetch: instead as a test?

On Monday, June 4, 2018 at 8:37:45 AM UTC-4, Klaus Breker wrote:

Hello,

I've tried the NeoJSON examples in the VAST 9.1 Beta. It works fine, when I do it in my private environment.

I tried the SST-example from the old VAST-forum <a href="http://forums.instantiations.com/topic-12-2393.html" rel="nofollow" target="_blank" onmousedown="this.href=&#39;http://www.google.com/url?q\x3dhttp%3A%2F%2Fforums.instantiations.com%2Ftopic-12-2393.html\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNFVtJStRcB92hKp9h3O-pOzf9SW8w&#39;;return true;" onclick="this.href=&#39;http://www.google.com/url?q\x3dhttp%3A%2F%2Fforums.instantiations.com%2Ftopic-12-2393.html\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNFVtJStRcB92hKp9h3O-pOzf9SW8w&#39;;return true;">http://forums.instantiations.com/topic-12-2393.html

'<a href="https://api.predic8.de/shop/products/" rel="nofollow" target="_blank" onmousedown="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fapi.predic8.de%2Fshop%2Fproducts%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHRf8XSjuzvNJerv45BcwEsebbf6Q&#39;;return true;" onclick="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fapi.predic8.de%2Fshop%2Fproducts%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHRf8XSjuzvNJerv45BcwEsebbf6Q&#39;;return true;">https://api.predic8.de/shop/products/' sstAsUrl fetch.

This works fine at home.

But in my customers environment http(s) connections are directed through a PAC-file. The example works in Firefox, IE, Chrome. But not in a VAST-Workspace.

I could download this file and tried to configure the #SstClient

This does not work and returns with error: ECONNREFUSED (10061): Connection refused.

SstHttpClient

      initializeTransportScheme: 'local_https_tunnel'

      forHttpsTunnelThrough: 'every.ipadress.from.pac:portnumber' 

      proxyAuth: nil

"I filled proxyAuth too.. Or tried the pac-file-url. "

|client|

    (client := SstHttpClient forTransportScheme: 'local_https_tunnel') startUp.

    [client get: '<a href="https://api.predic8.de/shop/products/" rel="nofollow" target="_blank" onmousedown="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fapi.predic8.de%2Fshop%2Fproducts%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHRf8XSjuzvNJerv45BcwEsebbf6Q&#39;;return true;" onclick="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fapi.predic8.de%2Fshop%2Fproducts%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHRf8XSjuzvNJerv45BcwEsebbf6Q&#39;;return true;">https://api.predic8.de/shop/products/']

        ensure: [client shutDown]

What did I wrong?

Kind regards and a nice sunny day

Klaus

Hello Seth,

I've got it. No dealing with network admins, but patching #SstHttpClient -> class #fetch. I added a call to the client before the #get.

    sem := Semaphore new.
    workBlock := [| client |
        (client := SstHttpClient forTransportScheme: 'httpl') startUp.
        client proxyEnabled: true.
        response := [client get: aUrlObject] ensure: [client shutDown].
        sem signal].

This works. This no general patch ;-) It is only a quick and dirty solution for demonstration in our customers network.

Kind regards

Klaus

Am Montag, 4. Juni 2018 15:09:00 UTC+2 schrieb Seth Berman:

Hello Klaus,

I *think* you are running into what I just ran into recently and fixed in our latests builds.
In my scenario, when using a proxy server only the one-shot #fetch: message would work.
The first call to #get: would pass, but subsequent calls to #get: would fail because the client did not remember that it already established a secure tunnel.

As a result the client would keep trying to establish a secure connection on every get: request resulting in an conn refused.

Just to see if it's the same thing...can you try using SstHttpClient fetch: instead as a test?

On Monday, June 4, 2018 at 8:37:45 AM UTC-4, Klaus Breker wrote:

Hello,

I've tried the NeoJSON examples in the VAST 9.1 Beta. It works fine, when I do it in my private environment.

I tried the SST-example from the old VAST-forum <a href="http://forums.instantiations.com/topic-12-2393.html" rel="nofollow" target="_blank" onmousedown="this.href=&#39;http://www.google.com/url?q\x3dhttp%3A%2F%2Fforums.instantiations.com%2Ftopic-12-2393.html\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNFVtJStRcB92hKp9h3O-pOzf9SW8w&#39;;return true;" onclick="this.href=&#39;http://www.google.com/url?q\x3dhttp%3A%2F%2Fforums.instantiations.com%2Ftopic-12-2393.html\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNFVtJStRcB92hKp9h3O-pOzf9SW8w&#39;;return true;">http://forums.instantiations.com/topic-12-2393.html

'<a href="https://api.predic8.de/shop/products/" rel="nofollow" target="_blank" onmousedown="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fapi.predic8.de%2Fshop%2Fproducts%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHRf8XSjuzvNJerv45BcwEsebbf6Q&#39;;return true;" onclick="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fapi.predic8.de%2Fshop%2Fproducts%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHRf8XSjuzvNJerv45BcwEsebbf6Q&#39;;return true;">https://api.predic8.de/shop/products/' sstAsUrl fetch.

This works fine at home.

But in my customers environment http(s) connections are directed through a PAC-file. The example works in Firefox, IE, Chrome. But not in a VAST-Workspace.

I could download this file and tried to configure the #SstClient

This does not work and returns with error: ECONNREFUSED (10061): Connection refused.

SstHttpClient

      initializeTransportScheme: 'local_https_tunnel'

      forHttpsTunnelThrough: 'every.ipadress.from.pac:portnumber' 

      proxyAuth: nil

"I filled proxyAuth too.. Or tried the pac-file-url. "

|client|

    (client := SstHttpClient forTransportScheme: 'local_https_tunnel') startUp.

    [client get: '<a href="https://api.predic8.de/shop/products/" rel="nofollow" target="_blank" onmousedown="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fapi.predic8.de%2Fshop%2Fproducts%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHRf8XSjuzvNJerv45BcwEsebbf6Q&#39;;return true;" onclick="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fapi.predic8.de%2Fshop%2Fproducts%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHRf8XSjuzvNJerv45BcwEsebbf6Q&#39;;return true;">https://api.predic8.de/shop/products/']

        ensure: [client shutDown]

What did I wrong?

Kind regards and a nice sunny day

Klaus

Hello,

it's me again with this issue.
I switched today to VAST 9.1 and imported my test application from the VAST 9.1 Beta. I loaded my config map and tried to fetch some data. In the Beta everything runs fine, but now there the following error occurs during #SstHttpClient -> #get: -> establishTunneledConnectionTo: proxyEnabled is set to true and the url: <a href="https://api.predic8.de/shop/customers/" target="_blank" rel="nofollow" onmousedown="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fapi.predic8.de%2Fshop%2Fcustomers%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNH6TRTM6tVINTfHRAp6prmfW0agsA&#39;;return true;" onclick="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fapi.predic8.de%2Fshop%2Fcustomers%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNH6TRTM6tVINTfHRAp6prmfW0agsA&#39;;return true;">https://api.predic8.de/shop/customers/

SstReceiveError(INTERNAL_ERROR (-1): Unknown error
OpenSSLError
    Error Code: nil
    Error Object: ('TLS')
    Error String: nil
    Error Hint: 'Unexpected return value is not an SSL Factory Method...check the suplied name'
    AuxiliaryData: nil)

Any idea, what I did wrong or whatever happened?

Regards and thanks in advance

Klaus


Am Mittwoch, 6. Juni 2018 21:10:16 UTC+2 schrieb Seth Berman:

Great to hear Klaus,

Glad it's working and thanks for the update.

-- Seth

On Wednesday, June 6, 2018 at 10:49:40 AM UTC-4, Klaus Breker wrote:

Hello Seth,

I've got it. No dealing with network admins, but patching #SstHttpClient -> class #fetch. I added a call to the client before the #get.

    sem := Semaphore new.
    workBlock := [| client |
        (client := SstHttpClient forTransportScheme: 'httpl') startUp.
        client proxyEnabled: true.
        response := [client get: aUrlObject] ensure: [client shutDown].
        sem signal].

This works. This no general patch ;-) It is only a quick and dirty solution for demonstration in our customers network.

Kind regards

Klaus

Am Montag, 4. Juni 2018 15:09:00 UTC+2 schrieb Seth Berman:

Hello Klaus,

I *think* you are running into what I just ran into recently and fixed in our latests builds.
In my scenario, when using a proxy server only the one-shot #fetch: message would work.
The first call to #get: would pass, but subsequent calls to #get: would fail because the client did not remember that it already established a secure tunnel.

As a result the client would keep trying to establish a secure connection on every get: request resulting in an conn refused.

Just to see if it's the same thing...can you try using SstHttpClient fetch: instead as a test?

On Monday, June 4, 2018 at 8:37:45 AM UTC-4, Klaus Breker wrote:

Hello,

I've tried the NeoJSON examples in the VAST 9.1 Beta. It works fine, when I do it in my private environment.

I tried the SST-example from the old VAST-forum <a href="http://forums.instantiations.com/topic-12-2393.html" rel="nofollow" target="_blank" onmousedown="this.href=&#39;http://www.google.com/url?q\x3dhttp%3A%2F%2Fforums.instantiations.com%2Ftopic-12-2393.html\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNFVtJStRcB92hKp9h3O-pOzf9SW8w&#39;;return true;" onclick="this.href=&#39;http://www.google.com/url?q\x3dhttp%3A%2F%2Fforums.instantiations.com%2Ftopic-12-2393.html\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNFVtJStRcB92hKp9h3O-pOzf9SW8w&#39;;return true;">http://forums.instantiations.com/topic-12-2393.html

'<a href="https://api.predic8.de/shop/products/" rel="nofollow" target="_blank" onmousedown="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fapi.predic8.de%2Fshop%2Fproducts%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHRf8XSjuzvNJerv45BcwEsebbf6Q&#39;;return true;" onclick="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fapi.predic8.de%2Fshop%2Fproducts%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHRf8XSjuzvNJerv45BcwEsebbf6Q&#39;;return true;">https://api.predic8.de/shop/products/' sstAsUrl fetch.

This works fine at home.

But in my customers environment http(s) connections are directed through a PAC-file. The example works in Firefox, IE, Chrome. But not in a VAST-Workspace.

I could download this file and tried to configure the #SstClient

This does not work and returns with error: ECONNREFUSED (10061): Connection refused.

SstHttpClient

      initializeTransportScheme: 'local_https_tunnel'

      forHttpsTunnelThrough: 'every.ipadress.from.pac:portnumber' 

      proxyAuth: nil

"I filled proxyAuth too.. Or tried the pac-file-url. "

|client|

    (client := SstHttpClient forTransportScheme: 'local_https_tunnel') startUp.

    [client get: '<a href="https://api.predic8.de/shop/products/" rel="nofollow" target="_blank" onmousedown="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fapi.predic8.de%2Fshop%2Fproducts%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHRf8XSjuzvNJerv45BcwEsebbf6Q&#39;;return true;" onclick="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fapi.predic8.de%2Fshop%2Fproducts%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHRf8XSjuzvNJerv45BcwEsebbf6Q&#39;;return true;">https://api.predic8.de/shop/products/']

        ensure: [client shutDown]

What did I wrong?

Kind regards and a nice sunny day

Klaus

Hi Seth,

my VAST 9.1 installation says: 0.0.0 Development
the VAST 9.1 Beta says:          1.0.2e Release

looks like had an OpenSSL setup and the VAST 9.1 not?
How do I get it?

Thanks and regards

Klaus


Am Donnerstag, 16. August 2018 17:00:47 UTC+2 schrieb Seth Berman:

Hi Klaus,

Are you sure you have OpenSSL setup?
What does 

OSSslVersion getLibraryVersion

print?

On Thursday, August 16, 2018 at 10:47:39 AM UTC-4, Klaus Breker wrote:

Hello,

it's me again with this issue.
I switched today to VAST 9.1 and imported my test application from the VAST 9.1 Beta. I loaded my config map and tried to fetch some data. In the Beta everything runs fine, but now there the following error occurs during #SstHttpClient -> #get: -> establishTunneledConnectionTo: proxyEnabled is set to true and the url: <a href="https://api.predic8.de/shop/customers/" rel="nofollow" target="_blank" onmousedown="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fapi.predic8.de%2Fshop%2Fcustomers%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNH6TRTM6tVINTfHRAp6prmfW0agsA&#39;;return true;" onclick="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fapi.predic8.de%2Fshop%2Fcustomers%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNH6TRTM6tVINTfHRAp6prmfW0agsA&#39;;return true;">https://api.predic8.de/shop/customers/

SstReceiveError(INTERNAL_ERROR (-1): Unknown error
OpenSSLError
    Error Code: nil
    Error Object: ('TLS')
    Error String: nil
    Error Hint: 'Unexpected return value is not an SSL Factory Method...check the suplied name'
    AuxiliaryData: nil)

Any idea, what I did wrong or whatever happened?

Regards and thanks in advance

Klaus


Am Mittwoch, 6. Juni 2018 21:10:16 UTC+2 schrieb Seth Berman:

Great to hear Klaus,

Glad it's working and thanks for the update.

-- Seth

On Wednesday, June 6, 2018 at 10:49:40 AM UTC-4, Klaus Breker wrote:

Hello Seth,

I've got it. No dealing with network admins, but patching #SstHttpClient -> class #fetch. I added a call to the client before the #get.

    sem := Semaphore new.
    workBlock := [| client |
        (client := SstHttpClient forTransportScheme: 'httpl') startUp.
        client proxyEnabled: true.
        response := [client get: aUrlObject] ensure: [client shutDown].
        sem signal].

This works. This no general patch ;-) It is only a quick and dirty solution for demonstration in our customers network.

Kind regards

Klaus

Am Montag, 4. Juni 2018 15:09:00 UTC+2 schrieb Seth Berman:

Hello Klaus,

I *think* you are running into what I just ran into recently and fixed in our latests builds.
In my scenario, when using a proxy server only the one-shot #fetch: message would work.
The first call to #get: would pass, but subsequent calls to #get: would fail because the client did not remember that it already established a secure tunnel.

As a result the client would keep trying to establish a secure connection on every get: request resulting in an conn refused.

Just to see if it's the same thing...can you try using SstHttpClient fetch: instead as a test?

On Monday, June 4, 2018 at 8:37:45 AM UTC-4, Klaus Breker wrote:

Hello,

I've tried the NeoJSON examples in the VAST 9.1 Beta. It works fine, when I do it in my private environment.

I tried the SST-example from the old VAST-forum <a href="http://forums.instantiations.com/topic-12-2393.html" rel="nofollow" target="_blank" onmousedown="this.href=&#39;http://www.google.com/url?q\x3dhttp%3A%2F%2Fforums.instantiations.com%2Ftopic-12-2393.html\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNFVtJStRcB92hKp9h3O-pOzf9SW8w&#39;;return true;" onclick="this.href=&#39;http://www.google.com/url?q\x3dhttp%3A%2F%2Fforums.instantiations.com%2Ftopic-12-2393.html\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNFVtJStRcB92hKp9h3O-pOzf9SW8w&#39;;return true;">http://forums.instantiations.com/topic-12-2393.html

'<a href="https://api.predic8.de/shop/products/" rel="nofollow" target="_blank" onmousedown="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fapi.predic8.de%2Fshop%2Fproducts%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHRf8XSjuzvNJerv45BcwEsebbf6Q&#39;;return true;" onclick="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fapi.predic8.de%2Fshop%2Fproducts%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHRf8XSjuzvNJerv45BcwEsebbf6Q&#39;;return true;">https://api.predic8.de/shop/products/' sstAsUrl fetch.

This works fine at home.

But in my customers environment http(s) connections are directed through a PAC-file. The example works in Firefox, IE, Chrome. But not in a VAST-Workspace.

I could download this file and tried to configure the #SstClient

This does not work and returns with error: ECONNREFUSED (10061): Connection refused.

SstHttpClient

      initializeTransportScheme: 'local_https_tunnel'

      forHttpsTunnelThrough: 'every.ipadress.from.pac:portnumber' 

      proxyAuth: nil

"I filled proxyAuth too.. Or tried the pac-file-url. "

|client|

    (client := SstHttpClient forTransportScheme: 'local_https_tunnel') startUp.

    [client get: '<a href="https://api.predic8.de/shop/products/" rel="nofollow" target="_blank" onmousedown="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fapi.predic8.de%2Fshop%2Fproducts%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHRf8XSjuzvNJerv45BcwEsebbf6Q&#39;;return true;" onclick="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fapi.predic8.de%2Fshop%2Fproducts%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHRf8XSjuzvNJerv45BcwEsebbf6Q&#39;;return true;">https://api.predic8.de/shop/products/']

        ensure: [client shutDown]

What did I wrong?

Kind regards and a nice sunny day

Klaus

Hi Seth,

it works :-)

Thank you and a fine day

Klaus

Am Donnerstag, 16. August 2018 17:29:09 UTC+2 schrieb Seth Berman:

Hello Klaus,

Yes, looks like VAST 9.1 is not setup to use OpenSSL.

OpenSSL has 2 libraries which are referenced from the ini file in [PlatformLibrary Name Mappings] section.

CRYPTO_LIB=libeay32

SSL_LIB=ssleay32

These default names are applicable to 1.0.x.

If you move up to 1.1.x, then the default names change to libcrypto and libssl (similar to what they are on *nix).

So these libraries (libeay32.dll and ssleay32.dll) need to be resolvable by VA Smalltalk when it goes to load them.

The latest 1.0.x series (1.0.2o) for windows can be downloaded from here
<a href="https://indy.fulgan.com/SSL/" rel="nofollow" target="_blank" onmousedown="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Findy.fulgan.com%2FSSL%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNF5iZxi_Fq6etWnJbPOJT1JUYKbfQ&#39;;return true;" onclick="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Findy.fulgan.com%2FSSL%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNF5iZxi_Fq6etWnJbPOJT1JUYKbfQ&#39;;return true;">https://indy.fulgan.com/SSL/

Your options are to:
1. Copy these 2 libraries to your image folder.
2. Copy these 2 libraries to your VAST Root Folder (the same one that has esvm40.so in it)

3. Make sure these libraries are in the OS library path
4. Reference the full path to these from the ini file (for example)

CRYPTO_LIB=C:\OpenSSL\102\libeay32.dll

SSL_LIB=C:\OpenSSL\102\ssleay32.dll

- Seth

On Thursday, August 16, 2018 at 11:18:05 AM UTC-4, Klaus Breker wrote:

Hi Seth,

my VAST 9.1 installation says: 0.0.0 Development
the VAST 9.1 Beta says:          1.0.2e Release

looks like had an OpenSSL setup and the VAST 9.1 not?
How do I get it?

Thanks and regards

Klaus


Am Donnerstag, 16. August 2018 17:00:47 UTC+2 schrieb Seth Berman:

Hi Klaus,

Are you sure you have OpenSSL setup?
What does 

OSSslVersion getLibraryVersion

print?

On Thursday, August 16, 2018 at 10:47:39 AM UTC-4, Klaus Breker wrote:

Hello,

it's me again with this issue.
I switched today to VAST 9.1 and imported my test application from the VAST 9.1 Beta. I loaded my config map and tried to fetch some data. In the Beta everything runs fine, but now there the following error occurs during #SstHttpClient -> #get: -> establishTunneledConnectionTo: proxyEnabled is set to true and the url: <a href="https://api.predic8.de/shop/customers/" rel="nofollow" target="_blank" onmousedown="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fapi.predic8.de%2Fshop%2Fcustomers%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNH6TRTM6tVINTfHRAp6prmfW0agsA&#39;;return true;" onclick="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fapi.predic8.de%2Fshop%2Fcustomers%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNH6TRTM6tVINTfHRAp6prmfW0agsA&#39;;return true;">https://api.predic8.de/shop/customers/

SstReceiveError(INTERNAL_ERROR (-1): Unknown error
OpenSSLError
    Error Code: nil
    Error Object: ('TLS')
    Error String: nil
    Error Hint: 'Unexpected return value is not an SSL Factory Method...check the suplied name'
    AuxiliaryData: nil)

Any idea, what I did wrong or whatever happened?

Regards and thanks in advance

Klaus


Am Mittwoch, 6. Juni 2018 21:10:16 UTC+2 schrieb Seth Berman:

Great to hear Klaus,

Glad it's working and thanks for the update.

-- Seth

On Wednesday, June 6, 2018 at 10:49:40 AM UTC-4, Klaus Breker wrote:

Hello Seth,

I've got it. No dealing with network admins, but patching #SstHttpClient -> class #fetch. I added a call to the client before the #get.

    sem := Semaphore new.
    workBlock := [| client |
        (client := SstHttpClient forTransportScheme: 'httpl') startUp.
        client proxyEnabled: true.
        response := [client get: aUrlObject] ensure: [client shutDown].
        sem signal].

This works. This no general patch ;-) It is only a quick and dirty solution for demonstration in our customers network.

Kind regards

Klaus

Am Montag, 4. Juni 2018 15:09:00 UTC+2 schrieb Seth Berman:

Hello Klaus,

I *think* you are running into what I just ran into recently and fixed in our latests builds.
In my scenario, when using a proxy server only the one-shot #fetch: message would work.
The first call to #get: would pass, but subsequent calls to #get: would fail because the client did not remember that it already established a secure tunnel.

As a result the client would keep trying to establish a secure connection on every get: request resulting in an conn refused.

Just to see if it's the same thing...can you try using SstHttpClient fetch: instead as a test?

On Monday, June 4, 2018 at 8:37:45 AM UTC-4, Klaus Breker wrote:

Hello,

I've tried the NeoJSON examples in the VAST 9.1 Beta. It works fine, when I do it in my private environment.

I tried the SST-example from the old VAST-forum <a href="http://forums.instantiations.com/topic-12-2393.html" rel="nofollow" target="_blank" onmousedown="this.href=&#39;http://www.google.com/url?q\x3dhttp%3A%2F%2Fforums.instantiations.com%2Ftopic-12-2393.html\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNFVtJStRcB92hKp9h3O-pOzf9SW8w&#39;;return true;" onclick="this.href=&#39;http://www.google.com/url?q\x3dhttp%3A%2F%2Fforums.instantiations.com%2Ftopic-12-2393.html\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNFVtJStRcB92hKp9h3O-pOzf9SW8w&#39;;return true;">http://forums.instantiations.com/topic-12-2393.html

'<a href="https://api.predic8.de/shop/products/" rel="nofollow" target="_blank" onmousedown="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fapi.predic8.de%2Fshop%2Fproducts%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHRf8XSjuzvNJerv45BcwEsebbf6Q&#39;;return true;" onclick="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fapi.predic8.de%2Fshop%2Fproducts%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHRf8XSjuzvNJerv45BcwEsebbf6Q&#39;;return true;">https://api.predic8.de/shop/products/' sstAsUrl fetch.

This works fine at home.

But in my customers environment http(s) connections are directed through a PAC-file. The example works in Firefox, IE, Chrome. But not in a VAST-Workspace.

I could download this file and tried to configure the #SstClient

This does not work and returns with error: ECONNREFUSED (10061): Connection refused.

SstHttpClient

      initializeTransportScheme: 'local_https_tunnel'

      forHttpsTunnelThrough: 'every.ipadress.from.pac:portnumber' 

      proxyAuth: nil

"I filled proxyAuth too.. Or tried the pac-file-url. "

|client|

    (client := SstHttpClient forTransportScheme: 'local_https_tunnel') startUp.

    [client get: '<a href="https://api.predic8.de/shop/products/" rel="nofollow" target="_blank" onmousedown="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fapi.predic8.de%2Fshop%2Fproducts%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHRf8XSjuzvNJerv45BcwEsebbf6Q&#39;;return true;" onclick="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fapi.predic8.de%2Fshop%2Fproducts%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHRf8XSjuzvNJerv45BcwEsebbf6Q&#39;;return true;">https://api.predic8.de/shop/products/']

        ensure: [client shutDown]

What did I wrong?

Kind regards and a nice sunny day

Klaus