How to resolve "Error resolving address" with a proxy in MIP SDK for Linux

Sumit Kumar 0

We are using MIP SDK 1.12.61 version with a C++ application on CentOS 7 to decrypt RMS-protected files and labels, but we are encountering "Error resolving address" messages in the logs. We have already addressed the firewall rules and port requirements, and added proxy support to the application using the http_proxy environment variable.

However, we noticed that the MIP application is performing DNS requests to the configured DNS server instead of resolving *.protection.outlook.com with the proxy, which is needed as our DNS server can only resolve internal URLs for security purposes. We would like to know if there is an option or configuration in the MIP SDK APIs to resolve the Microsoft URL *.protection.outlook.com with the configured proxy.

Error message from mip sdk logs.

Error	2024-03-26 13:55:04.152	policy_profile_impl.cpp:504	test_app (12226)	"Failed API call: profile_add_engine_async Failed with: [NetworkError: 'Failed to send HTTP request with error code 'generic:1' Inner exception: [http_exception: 'Error resolving address'], NetworkError.Category=Unknown, HttpRequest.SanitizedUrl=https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies, HttpRequest.Id={4DF422BE-821F-41C6-9C97-436CDDCFEF2F}, CorrelationId=069867da-61fb-4c50-aa60-0369a9bc2531, CorrelationId.Description=PolicyProfile']"	virtual std::shared_ptr

PRADEEPCHEEKATLA 90,241 Reputation points

2024-07-01T05:53:32.12+00:00
@Sumit Kumar - Thanks for the question and using MS Q&A platform.

Based on the provided information, it seems that the MIP application is performing DNS requests to the configured DNS server instead of resolving *.protection.outlook.com with the proxy. To resolve this issue, you can try configuring the proxy settings in the MIP SDK APIs to resolve the Microsoft URL *.protection.outlook.com with the configured proxy.

You can configure the proxy settings in the MIP SDK APIs by setting the http_proxy environment variable. However, it seems that you have already tried this approach. Another option is to configure the proxy settings in the MIP SDK APIs directly.

To configure the proxy settings in the MIP SDK APIs directly, you can use the following code snippet:

#include <mip/proxy_configuration.h> // ... mip::ProxyConfiguration proxyConfig; proxyConfig.SetProxyAddress("<your proxy server e.g. http://proxy.domain.org:8888/>"); mip::ApplicationInfo::SetProxyConfiguration(proxyConfig);

This code sets the proxy address to be used by the MIP SDK APIs. You can replace <your proxy server e.g. http://proxy.domain.org:8888/> with the actual address of your proxy server.

After configuring the proxy settings in the MIP SDK APIs, the MIP application should resolve *.protection.outlook.com with the configured proxy instead of performing DNS requests to the configured DNS server.

If this solution does not work, it is possible that the MIP SDK APIs do not support resolving Microsoft URLs with a proxy.

I hope this helps! Let me know if you have any further questions.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Sumit Kumar 0 Reputation points

2024-07-01T11:10:48.8066667+00:00

Thanks for the reply @PRADEEPCHEEKATLA .

I noticed that the header files for MIP SDK 1.12.61 version do not reference the 'proxy_configuration.h' file.

I believe this version only supports setting the 'http_proxy' environment variable.

Can you please tell me which version of MIP SDK added support for 'mip::ProxyConfiguration'?
PRADEEPCHEEKATLA 90,241 Reputation points

2024-07-08T02:47:46.78+00:00

@Sumit Kumar - This version only supports setting the 'http_proxy' environment variable.

The 'mip::ProxyConfiguration' class was introduced in MIP SDK version 1.13.0. This class provides a way to configure the proxy settings for the MIP SDK APIs programmatically, instead of relying on the 'http_proxy' environment variable.

You can find more information about the 'mip::ProxyConfiguration' class in the MIP SDK documentation for version 1.13.0 and later.

I hope this helps! Let me know if you have any other questions.
PRADEEPCHEEKATLA 90,241 Reputation points

2024-07-11T07:27:31.7766667+00:00

@Sumit Kumar - We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Sumit Kumar 0 Reputation points

2024-07-19T14:03:04.2033333+00:00

Hi Pradeep,

We still need to upgrade to 1.13 version and verify the fix. I will update here once I identified the suggested change is working or not. Thanks for your support.

Regards,
Sumit Kumar
PRADEEPCHEEKATLA 90,241 Reputation points

2024-07-22T04:47:03.16+00:00

@Sumit Kumar - We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Sumit Kumar 0 Reputation points

2024-09-23T16:27:17.1966667+00:00

Hi Pradeep,

I am getting the error "Unable to fetch SHA256 algorithm" when trying to upgrade to mip_sdk_file_rhel7_1.14.148 and mip_sdk_file_rhel7_1.15.94 in CentOS 7. We are using OpenSSL version 1.1.1v. How can I resolve this error?

Error 2024-09-23 16:06:51.419 policy_profile_impl.cpp:302 test_app (20624) "Failed API call: profile_load_async Failed with: [InternalError: 'Unable to fetch SHA256 algorithm, CorrelationId=b820318a-0f68-4eeb-a71a-8b2d40a89ed2, CorrelationId.Description=PolicyProfile']"

Share via

How to resolve "Error resolving address" with a proxy in MIP SDK for Linux

Your answer