Giters

jeremylong / DependencyCheck

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

Home Page:https://owasp.org/www-project-dependency-check/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Unable to tunnel through proxy

Erylis21 opened this issue · comments

commented

Hello,
I have a windows machine containing dependency-check version 9.2.0. I'm using the cli.
I configured the proxy directly by specifying the JAVA_OPTS environment variable.
This allowed me to use the proxy to call the NVD API, but the next step is in error and indicates the following error:
image

The error seems to indicate an authentication problem, but authentication has been defined and seems to be working correctly since the NVD API has been joined.

Here's how I set up the proxy:
-Dhttps.proxyHost=XX.XX.XX.XX -Dhttps.proxyPort=XXXX -Dhttps.proxyUser="XXXX" -Dhttps.proxyPass="XXXXXX"

I also tried adding these 2 parameters but it did nothing.
-Djdk.http.auth.tunneling.disabledSchemes="" -Djdk.http.auth.proxying.disabledSchemes=""

Do you have any idea ?

commented

Duplicate of #6478

commented

I tried the solution in the ticket mentioned but by setting the proxy to http instead of https I can no longer pass the NVD API part.
JAVA_OPTS="-Dhttp.proxyHost=yourhost -Dhttp.proxyPort=yourport -Dhttp.proxyUser=youruser -Dhttp.proxyPassword=yourpassword -Djdk.http.auth.tunneling.disabledSchemes="