Eclipse is unable to use proxy authentication scheme Negotiate

[nramprasad85]

At work, when using Eclipse market place we are getting Authentication Required 407 Error even though proxy details are entered. This is because the proxy uses Negotiate scheme only.
Same issue is there with curl command, but when --proxy-negotiate option is used it works
Similar to curl, it will be good if the eclipse proxy settings window has a checkbox for specifying that Negotiate authentication scheme should be used?
Chrome and other browsers detect this automatically and works find
Other IDEs are able to use the proxy, due to this other IDEs are having an edge over eclipse and makes developers shift to other IDEs, so please consider this feature request. without this we are not able to install any Eclipse plugins or get updates.

I hope this is the right forum to discuss this, if not please let me know

[danthe1st]

I am not sure about the marketplace client but for updating in general, I think this has previously been discussed here: https://bugs.eclipse.org/bugs/show_bug.cgi?id=561175#c6

The relevant part of the code should be https://github.com/eclipse-ecf/ecf/blob/ac1c4428d40f696844b43bf1f5e5112c0b057145/providers/bundles/org.eclipse.ecf.provider.filetransfer.httpclient45/src/org/eclipse/ecf/internal/provider/filetransfer/httpclient45/HttpClientProxyCredentialProvider.java#L113. Please note that features are somewhat unlikely to be implemented without anyone caring enough to contribute. You can always create a PR for this and I would guess that this is a fairly uncontroversial change.

However, please note that p2 (which covers updating) also has some certificate retrieval/validation code (which is run before installing updates) that uses the (JDK) HttpClient so that might still not work.

[danthe1st]

For the part about gatherering certificates, you can find it here: https://github.com/eclipse-equinox/p2/blob/29ce49fbc9d0b15d56d6ccb603cd1f3f7d5a4028/bundles/org.eclipse.equinox.p2.engine/src/org/eclipse/equinox/internal/p2/engine/phases/AuthorityChecker.java#L260 (I guess it might be possible to replace that by ECF?)

For the marketplace, I don't know whether it supports proxies with authentication at all. It seems that uses its own logic for HTTP transports: https://github.com/eclipse-mpc/epp.mpc/tree/master/org.eclipse.epp.mpc.core/src/org/eclipse/epp/internal/mpc/core/transport/httpclient

[tfroment]

At work, when using Eclipse market place we are getting Authentication Required 407 Error even though proxy details are entered. This is because the proxy uses Negotiate scheme only. Same issue is there with curl command, but when --proxy-negotiate option is used it works Similar to curl, it will be good if the eclipse proxy settings window has a checkbox for specifying that Negotiate authentication scheme should be used? Chrome and other browsers detect this automatically and works find Other IDEs are able to use the proxy, due to this other IDEs are having an edge over eclipse and makes developers shift to other IDEs, so please consider this feature request. without this we are not able to install any Eclipse plugins or get updates.

I hope this is the right forum to discuss this, if not please let me know

Thank you for taking the time to describe this situation in detail. I’m sensitive to the importance of addressing this kind of problem... Would be great if we could find the right place to submit an issue here, wdyt @opcoach?

[danthe1st]

I think there are multiple places that are relevant here as mentioned in my comment before. ECF which seems to be used for downloading content from update sites doesn't support that authentication scheme. If that configuration doesn't apply to the marketplace client (Does the marketplace client even use any proxy?), that would probably require another issue. And maybe it would be necessary to create yet another issue for the certificate gathering in p2 since that uses the JDK HttpClient.

[HannesWell]

Fully agree with Daniel (thank you for helping and providing all the details). I just want to add detailed links

• ECF: https://github.com/eclipse-ecf/ecf
• P2: https://github.com/eclipse-equinox/p2