Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

SSL-Connection via Proxy with Authentcation fails

See original GitHub issue

The following simple request via a Proxy that requires Authentication fails:

final Proxy proxy = new Proxy(Proxy.Type.HTTP, new InetSocketAddress("localhost", 8001));
final Response response = new OkHttpClient.Builder()
        .proxy(proxy)
        .proxyAuthenticator(new Authenticator() {
            @Override
            public Request authenticate(Route route, Response response) throws IOException {
                String credential = Credentials.basic("proxyuser", "proxypass");
                return response.request().newBuilder()
                        .header("Proxy-Authorization", credential)
                        .build();                        
            }
        })
        .build()
        .newCall(new Request.Builder()
                .get()
                .url("https://www.google.com/")
                .build())
        .execute();

with the following error:

Caused by: java.net.ProtocolException: Unexpected status line: <html>
    at okhttp3.internal.http.StatusLine.parse(StatusLine.java:69)
    at okhttp3.internal.http.Http1xStream.readResponse(Http1xStream.java:186)
    at okhttp3.internal.connection.RealConnection.createTunnel(RealConnection.java:296)
    at okhttp3.internal.connection.RealConnection.buildTunneledConnection(RealConnection.java:155)
    at okhttp3.internal.connection.RealConnection.connect(RealConnection.java:111)
    at okhttp3.internal.connection.StreamAllocation.findConnection(StreamAllocation.java:193)
    at okhttp3.internal.connection.StreamAllocation.findHealthyConnection(StreamAllocation.java:129)
    at okhttp3.internal.connection.StreamAllocation.newStream(StreamAllocation.java:98)
    at okhttp3.internal.connection.ConnectInterceptor.intercept(ConnectInterceptor.java:42)
    at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:92)
    at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:67)
    at okhttp3.internal.cache.CacheInterceptor.intercept(CacheInterceptor.java:109)
    at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:92)
    at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:67)
    at okhttp3.internal.http.BridgeInterceptor.intercept(BridgeInterceptor.java:93)
    at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:92)
    at okhttp3.internal.http.RetryAndFollowUpInterceptor.intercept(RetryAndFollowUpInterceptor.java:124)
    at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:92)
    at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:67)
    at okhttp3.RealCall.getResponseWithInterceptorChain(RealCall.java:170)
    at okhttp3.RealCall.execute(RealCall.java:60)

The same request via a Proxy without Authentication works fine, as does a Non-SSL request via Proxy with Authentication.

The issue came up while debugging googlemaps/google-maps-services-java#190. Both, v2.7.5 and v3.4.1 show the same behaviour.

For testing, I’m using mitmproxy with the following parameters: mitmproxy -p 8001 --singleuser proxyuser:proxypass

Issue Analytics

State:
Created 7 years ago
Reactions:3
Comments:11 (4 by maintainers)

Top GitHub Comments

6reactions

ja-fracommented, Oct 17, 2016

Tend to disagree here: Both Content-Length and Connection are optional response-headers, so the client needs to be able to work properly without their presence.

Other HTTP-clients, even plain java.net.HttpUrlConnection manage to connect via that proxy, but anyway - we’ll try to find a workaround solution…

1reaction

aleksey-hocommented, Apr 27, 2018

I recently encountered this problem, and described it on staskoverflov, but got no response https://stackoverflow.com/questions/50028879/okhttp-request-via-proxy-with-authentcation-fails I’m 100% sure that the problem is not in the HTTP server. The problem has not been solved. If you have any ideas…