[JIRA] (IDP-1918) Add configuration for HTTP Proxy when sending out back-channel SLO requests via SOAP

[Martin Haase (Jira)]

Martin Haase ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=60ad392346b55100698aa768 ) *created* an issue

Identity Provider ( https://shibboleth.atlassian.net/browse/IDP?atlOrigin=eyJpIjoiYjQyNGM2ZTAyNWExNDQ0MDlmMTM3ZjAzZWY1NjRmYTAiLCJwIjoiaiJ9 ) / Improvement ( https://shibboleth.atlassian.net/browse/IDP-1918?atlOrigin=eyJpIjoiYjQyNGM2ZTAyNWExNDQ0MDlmMTM3ZjAzZWY1NjRmYTAiLCJwIjoiaiJ9 ) IDP-1918 ( https://shibboleth.atlassian.net/browse/IDP-1918?atlOrigin=eyJpIjoiYjQyNGM2ZTAyNWExNDQ0MDlmMTM3ZjAzZWY1NjRmYTAiLCJwIjoiaiJ9 ) Add configuration for HTTP Proxy when sending out back-channel SLO requests via SOAP ( https://shibboleth.atlassian.net/browse/IDP-1918?atlOrigin=eyJpIjoiYjQyNGM2ZTAyNWExNDQ0MDlmMTM3ZjAzZWY1NjRmYTAiLCJwIjoiaiJ9 )

Issue Type: Improvement Affects Versions: 4.1.5 Assignee: Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) Components: Logout, SAML2 Created: 10/Mar/22 9:00 AM Priority: Trivial Reporter: Martin Haase ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=60ad392346b55100698aa768 )

SOAP SLO requests sent out by the IdP should be using a configurable HTTP(s) ProxyHost/ProxyPort.

See discussion on Slack from March 10, 2022, Scott wrote:

The HTTP client support is used everywhere we use HTTP

Hmm, not sure he explicitly alllowed this to be overridden, the only way is probably by redefining SOAPClient.HttpClient in global.xml and seeing if that actually works.

Please file a RFE and I'll add an explicit injection method for changing the bean used.

Currently the IdP logs a failing request in a proxy environment:

2022-03-09 13:58:07,939 - WARN [net.shibboleth.idp.saml.saml2.profile.impl.SOAPLogoutRequest:298] - Profile Action SOAPLogoutRequest: SOAP logout request failed
org.opensaml.soap.common.SOAPException: I/O problem with SOAP message exchange with:

https://SP/Shibboleth.sso/SLO/SOAP at org.opensaml.soap.client.http.AbstractPipelineHttpSOAPClient.send(AbstractPipelineHttpSOAPClient.java:248)
Caused by: org.apache.http.conn.ConnectTimeoutException: Connect to SP:443 [SP/211.222.233.244] failed: connect timed out         at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:151)
Caused by: java.net.SocketTimeoutException: connect timed out
at java.base/java.net.PlainSocketImpl.socketConnect(Native Method)

( https://shibboleth.atlassian.net/browse/IDP-1918#add-comment?atlOrigin=eyJpIjoiYjQyNGM2ZTAyNWExNDQ0MDlmMTM3ZjAzZWY1NjRmYTAiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/IDP-1918#add-comment?atlOrigin=eyJpIjoiYjQyNGM2ZTAyNWExNDQ0MDlmMTM3ZjAzZWY1NjRmYTAiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100197- sha1:b6de2d8 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220310/ee98c4fa/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-9d38dbd2-3a32-4d8c-b0ef-a81feacd41e8
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220310/ee98c4fa/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-16bb13c5-a193-4f9a-b7ac-13c956e2a876
Type: image/png
Size: 457 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220310/ee98c4fa/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-a6f71bd8-f3e3-4cd3-9cfe-c70e3fd9e617
Type: image/png
Size: 563 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220310/ee98c4fa/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-50f70f06-06e5-4c01-883d-d1af1f46c307
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220310/ee98c4fa/attachment-0007.png>