WebRequest Error on Composer 8.1.5

[Mauro Castro]

Hi Guys…

I need help concerning Composer upgrade.

I have migrated my Composer applications from [b]8.1.450.20[/b] to [b]8.1.561.70[/b] and since then I am not able to use HTTPS in WebRequest tool.
I am receiving following error message: “[b]getWebRequest - java.lang.Exception: For HTTPS Url 'Anonymous' Authentication type is not applicable.[/b]”

I have migrated without any WARNING/ERROR and made no changes in code… just rebuild.
Running app with 8.1.450.20 build == [b]SUCCESS[/b]
Running migrated app to 8.1.561.70 with NO CHANGES == [b]EXCEPTION[/b]

Composer.log:
-->
[INFO ] 2021-10-01 17:05:57.011 [http-nio-8080-exec-248] getWebRequest - getWebRequest() in
[WARN ] 2021-10-01 17:05:57.011 [http-nio-8080-exec-248] getWebRequest - Could not read composer.properties file, using default timeouts. C:\caic\03servicos\YXCF\WEB-INF\composer.properties (The system cannot find the file specified)
[INFO ] 2021-10-01 17:05:57.011 [http-nio-8080-exec-248] getWebRequest - Async Flow execution
[INFO ] 2021-10-01 17:05:57.011 [http-nio-8080-exec-248] getWebRequest - Main Thread
[INFO ] 2021-10-01 17:05:57.011 [pool-574-thread-1] getWebRequest - performAsyncOperation() in
[INFO ] 2021-10-01 17:05:57.011 [pool-574-thread-1] getWebRequest - HTTPs SSL Authentication Type :Anonymous
[INFO ] 2021-10-01 17:05:57.011 [pool-574-thread-1] getWebRequest - conTimeout: 10000, readTimeout: 10000, throwServerException: false, legacyFlow: false, webHttpsProductionMode: false
[INFO ] 2021-10-01 17:05:57.011 [pool-574-thread-1] getWebRequest - url: https://xxxxxxxx.yyy.net.br:443/services/ivr/IvrServices
[ERROR] 2021-10-01 17:05:57.026 [pool-574-thread-1] getWebRequest - java.lang.Exception: For HTTPS Url 'Anonymous' Authentication type is not applicable.
at com.genesyslab.studio.backendlogic.WebRequestBackendHandler.formHTTPConnection(Unknown Source)
at com.genesyslab.studio.backendlogic.WebRequestBackendHandler.performAsyncOperation(Unknown Source)
at com.genesyslab.studio.backendlogic.WebRequestBackendHandler.access$0(Unknown Source)
at com.genesyslab.studio.backendlogic.WebRequestBackendHandler$1.call(Unknown Source)
at java.util.concurrent.FutureTask.run(Unknown Source)
at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)

[INFO ] 2021-10-01 17:05:57.026 [pool-574-thread-1] getWebRequest - buildErrorResponse() in
[ERROR] 2021-10-01 17:05:57.026 [pool-574-thread-1] getWebRequest - buildErrorResponse:{"errorMsg":"An error has occured - For HTTPS Url 'Anonymous' Authentication type is not applicable.","throwServerException":false}
[INFO ] 2021-10-01 17:05:57.026 [pool-574-thread-1] getWebRequest - buildErrorResponse() out
[INFO ] 2021-10-01 17:05:57.026 [http-nio-8080-exec-248] getWebRequest - Value - {"errorMsg":"An error has occured - For HTTPS Url 'Anonymous' Authentication type is not applicable.","throwServerException":false}
[INFO ] 2021-10-01 17:05:57.026 [http-nio-8080-exec-248] getWebRequest - getWebRequest() out
<--

What am I doing wrong???

Thanks,
Mauro

[cavagnaro]

You need to fix your WebService block as indicated, for HTTPs you can't use anonymous authentication.
Try ServerAuthentication

[Mauro Castro]

Thanks!!!

But according to documentation, Anonymous is a valid value for HTTPS. See:
-->
[b]HTTPS SSL Authentication\Authentication Type

Use this property to select the type of authentication you want to implement for establishing an HTTPS SSL connection, Mutual Authentication, Server Authentication, or Anonymous. [/b]
<--

And it was valid for 8.1.550.08.
So I think I have two options: 1.)downgrade to 8.1.550.08 or try ServerAuthentication type.

But for using "ServerAuthentication" I need to provide "Trust Location and Password" and I don't know what it really is. "Location" I believe would be CER file, but "Password" I'm not sure it is needed - but I need to provide both.

Anyway... thanks for your help!

[cavagnaro]

password is changeme, check Java docs, it is standard, unless you create your own cer file.
Location is where the cacert file is located. Should be the same in all servers where you install