CommandBox 5.5.1: WSDL woes

Communities CommandBox CLI
1

Dear all,

since upgrading to CommandBox 5.5.1, we are seeing WSDL XML files being generated with http:// instead of https:// namespace URIs, which causes calls to the webservice to fail (since the nginx proxy in front of CommandBox returns a 301).

With CommandBox 5.5.0+00558, the WSDL files returned look as expected:

<?xml version="1.0" encoding="UTF-8"?>
<wsdl:definitions targetNamespace="https://app02.server.com/apiproxy.cfc"
	xmlns:apachesoap="http://xml.apache.org/xml-soap"
	xmlns:impl="https://app02.server.com/apiproxy.cfc"
	xmlns:intf="https://app02.server.com/apiproxy.cfc"
	xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/"
	xmlns:wsdl="http://schemas.xmlsoap.org/wsdl/"
	xmlns:wsdlsoap="http://schemas.xmlsoap.org/wsdl/soap/"
	xmlns:xsd="http://www.w3.org/2001/XMLSchema">

Running CommandBox 5.5.1+00562, the same request will return different URIs:

<?xml version="1.0" encoding="UTF-8"?>
<wsdl:definitions targetNamespace="http://app01.server.com/apiproxy.cfc"
	xmlns:apachesoap="http://xml.apache.org/xml-soap"
	xmlns:impl="http://app01.server.com/apiproxy.cfc"
	xmlns:intf="http://app01.server.com/apiproxy.cfc"
	xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/"
	xmlns:wsdl="http://schemas.xmlsoap.org/wsdl/"
	xmlns:wsdlsoap="http://schemas.xmlsoap.org/wsdl/soap/"
	xmlns:xsd="http://www.w3.org/2001/XMLSchema">

Hitting the service on port 80 will cause the request to fail due to nginx attempting to redirect to port 443.

The settings of app01 and app02 are otherwise identical:

  • Lucee 5.3.8.206
  • Java 11.0.15
  • Ubuntu 20.04

Is there a way to change the protocol in the namespace definitions back to https?

2

Please see the release notes:

and scroll down to the “X-Forwarded-For support disabled by default” section.

I assume you have CommandBox running behind a proxy which proxies HTTPS request over HTTP. If you trust this proxy, then re-enable this feature:

server set web.useProxyForwardedIP=true
1 Like
3

Brad –

thanks a lot. That was lightning-fast and (of course) spot on.
I now feel pretty dumb-ish, but who cares if the servers are humming along again!

Thank you!

1 Like