Error : Unable to tunnel through HTTP/1.1 in CA Access Gateway (SPS)

Products

• SITEMINDER
• CA Single Sign On Secure Proxy Server (SiteMinder)

Issue/Introduction

 

When running CA Access Gateway (SPS), when this one tries to connect to
Internet through a Proxy, the connection fails and report error :

spstraces.log :

  [12/21/2021][17:41:25][14594][139648317744896][][SSLHandler][startSession]
  [send proxyConnection request]

  [12/21/2021][17:41:25][14594][139648317744896][][SSLHandler][startSession]
  [ProxyResponse = HTTP/1.1 200 Connection established]

  [12/21/2021][17:41:25][14594][139648317744896][][Srca][invoke]
  [Unable to tunnel through myinternetserver.mydomain.com:8000.
  Proxy returns "HTTP/1.1 200 Connection established"]

  [12/21/2021][17:41:25][14594][139648317744896][][Srca][invoke][Ending the session.]

Comparing with the log that worked, the protocol of proxy changed from
1.0 to 1.1.

spstraces.log:

  [11/15/2021][15:20:18][26376][140587169666816][][SSLHandler][startSession]
  [send proxyConnection request]
  
  [11/15/2021][15:20:18][26376][140587169666816][][SSLHandler][startSession]
  [ProxyResponse = HTTP/1.0 200 Connection established]
  
  [11/15/2021][15:20:19][26376][140587169666816][][SSLHandler][startSession][exit]
  
  [11/15/2021][15:20:19][26376][140587169666816][][SSLHandler][readFully][enter]

 

Environment

 

CA Access Gateway (SPS) 12.8SP5 on RedHat 7

 

Resolution

 

Upgrade CA Access Gateway (SPS) to 12.8SP7 when this one will be available.