oracle_sso function can't connect from behind proxy

[cliffano]

Could you please confirm whether oracle_sso function works behind a proxy?

I have tried setting up both
a) environment variables proxy setting (http_proxy, HTTP_PROXY, https_proxy, HTTPS_PROXY, no_proxy, and NO_PROXY)
b) oracle_java's proxy_server attribute
but I kept getting connection error to download.oracle.com

I could only get it working by explicitly passing the proxy details to Net::HTTP.start:

response = Net::HTTP.start(uri.host, uri.port, <proxy_host>, <proxy_port>, :use_ssl => uri.scheme == 'https') do |http|

Would you expect the above to be necessary? Or should it use environment variables?
I understand that Net::HTTP should inherit the environment variables, but it didn't work.

Using ruby-2.2 with oracle_java 2.9.1 .

[antoineco]

Proxy parameters should be handled by the function but they're currently not (see referenced issue). As an interim solution I would have expected the environment variables to work though. Are you sure these were set in the context of your puppet run? Are you running in agent/server mode?

Regarding the broader connection issues, Oracle had the wonderful idea to change their SSO service 2 weeks after I pushed v2.9, effectively breaking my module. It looks like they keep changing the way it works regularly, so I'm waiting for some stability before drafting a patch version.

[cliffano]

Yes, I debugged all ENV's http_proxy, HTTP_PROXY, https_proxy, and HTTPS_PROXY right before the line with response = Net::HTTP.start . Confirmed that the values are set correctly.

I was running Puppet masterless. Not agent/server mode.

My initial expectation from reading the documentation of oracle_java, I was hoping that the env vars proxy to be honoured as a fallback, and only overwritten if proxy_server attribute is set.
If proxy_server is set to empty, then it should enforce proxy to never be used.
If proxy_server is set to undef, then fallback to env vars if set.

That Oracle SSO service change is a pain, thanks very much for your work with oracle_java.
I'll be happy to help testing the proxy bug fix.

[antoineco]

You're absolutely right, I neglected the proxy parameters when I wrote the feature because of the sense of urgency (users of my module were pretty much stuck because of Oracle's SSO), and I use a transparent proxy myself so I didn't see that issue.

It's a easy fix, I'll try to push it this week. In the meantime I recommend using v2.8.3.

[cliffano]

Oracle sure doesn't make it easy for the users :).

Btw, I tried v2.8.3 and I got this error Unreleased Java SE version 8u151. Pretty sure this is the same issue that happened after Oracle changed JDK download process, and the reason why I upgraded to v2.9.x .

[antoineco]

Ah, yes if you absolutely want that version on v2.8 you'll have to pass the checksum and URL manually via parameters. If not, you'll get 8u144 by default.

[cliffano]

I'm happy to downgrade for the time being :).

[tomashejatko]

Hello, do we know workaround pls?
I cannot use older version, because it looks that older versions of Java are not available anymore :
Error: Execution of '/usr/bin/curl http://download.oracle.com/otn-pub/java/jdk/8u144-b01/090f390dda5b47b9b721c7dfaa008135/jre-8u144-linux-x64.tar.gz -o /tmp/jre-8u144-linux-x64.tar.gz_e3808f24d0f588b0c313fa18b50683c620171205-26143-n07uyb -fsSL --max-redirs 5 --cookie oraclelicense=accept-securebackup-cookie --proxy http://proxy.xxx:3128' returned 22: curl: (22) The requested URL returned error: 404 Not Found Error: /Stage[main]/Oracle_java::Download/Archive[/usr/java/jre-8u144-linux-x64.tar.gz]/ensure: change from absent to present failed: Execution of '/usr/bin/curl http://download.oracle.com/otn-pub/java/jdk/8u144-b01/090f390dda5b47b9b721c7dfaa008135/jre-8u144-linux-x64.tar.gz -o /tmp/jre-8u144-linux-x64.tar.gz_e3808f24d0f588b0c313fa18b50683c620171205-26143-n07uyb -fsSL --max-redirs 5 --cookie oraclelicense=accept-securebackup-cookie --proxy http://proxy.xxx:3128' returned 22: curl: (22) The requested URL returned error: 404 Not Found N
And when I go with master branch, there is proxy problem :
Error: Could not retrieve catalog from remote server: Error 400 on SERVER: Evaluation Error: Error while evaluating a Function Call, Connection refused - connect(2) at /etc/puppet/environments/development/modules/oracle_java/manifests/download.pp:33:17 on node mon2.xxx

[antoineco]

@arteal can you try the branch mentioned above?

[tomashejatko]

I'm using current HEAD, my Puppetfile :

mod 'aco-oracle_java',
:git => 'https://github.com/antoineco/aco-oracle_java.git',
:ref => 'cb5c29cfe9c41978d86fa0116494f9d36818cc3c'

And I use proxy_server parameter :

class { 'oracle_java':
version => '8u151',
type => 'jre',
add_alternative => true,
proxy_server => "http://${proxy}"
}

It works only if my puppet master can reach internet