Hi George,

We have exactly the same issue as you - The updater must connect to the Java server's as it checks the version number to identify that an update is available. When you click on update you get an error about connecting to the download server failed.

I thought at first this was an issue to do with administrative rights on the local PCs (try logging onto them as administrator)....this didn't help. I haven't had any time to look into the issue, and where required downloaded the offline .msi installer to the network.

I would be interested to hear if anyone else has noticed this behavior and has a solution.

David

Hi,

I did some research today on the WEB and found nothing anywhere including this Forum. You would think something like this would be a common thing, like the ITunes update problems that there were some posts about..
I opened a ticket with Clearcenter and they keyed me in on the need to find out what the connections were and then to put them into the proxy web site bypass.

So, then I used the network report and network traffic reports of ClearOS to sniff while I had another computer trying to download the java updates. It was a lot of hit and miss because of the refresh times in the browser and a slow PC doing its updates.. but I finally came up with this list that was being used during the update process:

javadl.oracle.com
java.com
165.166.212.49
java.sun.com
165.166.212.43
68.142.118.4

The bottom two were put in last and then things started working, but any or all could be needed for this to work.. so use them.

This was an old version of java that updated itself, but it may work on the most recent versions too. If not, you can always sniff as I did and then add them in. One thing is for sure, and that is "change" itself. I hate that part. lol

If you try this, but come up with some additional IP's or domain names to add to the list, please post them here so we all can benifit from it.

I present a challenge and a need that we should come up with a post listing the common site bypasses that are needed for IT type environments like needed for Java.

I viewed many posts across the board related to squid or dansguardian (included in ClearOS) for changes that had to be implimented for antivirus updates and other various updates.. so this is definitely a need.

Anyway, I hope this thread keeps running and it helps others too as we learn of changes to accomodate common site bypass needs.

Sincerely,
George

Thanks for taking the time for reporting this back on the forums George. I have added a page in the documentation for tracking this information.

http://www.clearfoundation.com/docs/developer/features/web_proxy/web_site_bypass_-_site_list

@ Everyone - feel free to add/edit this document if you find other examples. Just hit the "edit" button at the bottom of the page (login to clearfoundation.com is required).

Hi all,

George, i will give the bypass rules you listed a try and report back :-)

David

hummmm...

165.166.212.49
165.166.212.43

don't seem to resolve with an NS lookup, although they do ping.

68.142.118.4
is a limelight network CDN host - and yes they work for Oracle, so might be valid.

I haven't tested yet - job for tomorrow.

javadl-esd.sun.com

works for all my clients so far

Hey Gang,

I believe that Java sequences the update downloads through a round robbin kind of order, possibly in an attempt to balance the load on all of their servers. It has been much better with the java updates around the office by adding the addresses above.

However, every now and then I will still have a problem updating. We have about 30 clients. So, when I hit a server or IP that hasnt been added to the list yet, it bombs out again, and I start doing some more report sniffing (if I have the time). Here are some more possible additions that you might want to add to the proxy bypass. I added them recently and it seemed to help with one particular client.

jscvs1.java.sun.com

dl.javafx.com

Sincerely,

George

i have been struggling to get clients updating with java updates behing a clear os gateway with the web proxy running

following the information in this forum thread

http://www.clearfoundation.com/component/option,com_kunena/Itemid,232/catid,27/func,view/id,17763/

and this little tutorial
http://www.clearfoundation.com/docs/developer/apps/web_proxy/web_site_bypass_-_site_list

when i type in the suggested sites
i get a mesaage telling me invalid format or incorrect ipv 4 address

can you tell me what format they should be in

regards
collin

B)

Just an update on what I have done for Java to date - consider this the latest post so far.

Java, especially since oracle purchased the company, has evolved and it seems to continually uses different IP addresses to update its software.

I reached a point where some clients would update and some would not and the ones that wouldnt would do it after multiple attempts.. So I watched the IP addresses on the network reports during these processeses to come up with the current scheme:

javadl.oracle.com
java.com
68.142.118.0/24
165.166.212.0/24
208.111.185.0/24
64.53.32.0/24
64.74.103.0/24
java.sun.com
javadl-alt.sun.com
javadl-esd.sun.com
jscvs1.java.sun.com
dl.javafx.com

Here is a visual on what I have entered in the Gateway>Web Proxy> Web Site Bypass area of ClearOS:




I hope this helps everyone who is keeping up with things like this. It sure makes life easier when you can update your java software.

Sincerely,
George

Hi George,
Thank you for your work :-) I'll give some of your additions a try.

David

Hummm....I added a few more that I noticed in wire-shark:
Java_13 jal.sun.com
Java_14 javadl.sun.com
Java_15 sdlc-esd.sun.com
Java_16 sjremetrics.java.com

I now get further than I did - however the installer gives the error 'uncompression of downloaded file failed' Googling this does not yield any real solutions.

Version 6_23 on Win 7

How have you got on?

I find it weird that the java updates never take when using the web interface, but all I do is yum update via ssh and it goes... It's been like that for all past versions of ClearOS as well.

Why bump an old thread? This recent thread is relevant.