Opened 7 years ago

Last modified 7 years ago

#18145 closed defect

About to execute josm behind a zscaler proxy — at Version 3

Reported by: joluinfante Owned by: joluinfante
Priority: normal Milestone:
Component: Core Version:
Keywords: Cc:

Description (last modified by Don-vip)

Hi.
I am installing josm in the workplace of an office editor, who will be in charge of maintaining some street plans (streets and heights) in some towns that do not have it (for example Theobald, in Santa Fe). The issue is that through internal policies, all posts access through the zscaler proxy (a kind of proxy in the cloud).
The problem is that errors appear.
I tried to reproduce the problem with the browser, and, pointing to https://api.openstreetmap.org/api/capabilities, I "answered":

csp14309: Unknown directive "manifest-src" in Context-Security-Policy: the directive will be dispensed with.
csp14132: The resource violated the "script-src https: *.zscloud.net 'self' piwik.openstreetmap.org" directive in Content-Security-Policy: res: edgehtml.dll/xmltreeview.js. The resource will be blocked.

Is there a way around this, without having to exceptions from the zscaler?

Change History (3)

comment:1 by joluinfante, 7 years ago

Excuse me.
The problem acceding to the url works in chrome.
Then, this is not the problem.

But, If I execute the program with --debug option, I can see:
javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target.
I did install in the keystore the certificates x1, isrg and x3iden.
But, this not repare the problem.

Important: I'm running on windows machine.

comment:2 by joluinfante, 7 years ago

I did try the solution in: https://josm.openstreetmap.de/ticket/16175, but, don't resolve it.

comment:3 by Don-vip, 7 years ago

Description: modified (diff)
Owner: changed from team to joluinfante
Status: newneedinfo
Summary: About to execute jsom behind a zscaler proxyAbout to execute josm behind a zscaler proxy

Can you please share the full debug logs?

Note: See TracTickets for help on using tickets.