ZAP Docker - Set corporate proxy settings

[Азат Мингазов]

Hi ZAP Team

I use zap-stable docker image , but I need setup corporate proxy settings and I don't know how to do it.

When I used OWASP ZAP from binary file for linux, I just edit config.xml like this:

<httpProxy>
<enabled>true</enabled>
<authEnabled>false</authEnabled>
<storePass>true</storePass>
<password/>
<host>MyCorpProxyHost</host>
<port>MyCorpProxyPort</port>
<realm/>
<username/>
</httpProxy>

and all was ok.

I tried use same flow for config.xml in docker image file, but I found what differences between config.xml for binary and config.xml for docker image is huge.

What is best way if I want setup corporate proxy settings for docker image ?

 Best regards!

[Simon Bennetts]

The ZAP config file works in the same way regardless of how you run ZAP.

There may be many more values in config.xml depending on how you have started ZAP, but the format doesnt change.

Have you tried just setting those values in the docker image?

For reference: https://www.zaproxy.org/faq/how-do-you-find-out-what-key-to-use-to-set-a-config-value-on-the-command-line/

Cheers,

Simon

[Azat Mingazov]

I use this command on docker container:

zap.sh -configfile /zap/mydata/config.xml -cmd -addonupdate

If I use binary OWASP ZAP for my linux this command works good, but in my container I get this error:

Found Java version 11.0.20

Available memory: 12759 MB

Using JVM args: -Xmx3189m

[Fatal Error] config.xml:1:1: Premature end of file.

903 [main] ERROR org.parosproxy.paros.Constant - Failed to load/upgrade config file:

org.apache.commons.configuration.ConfigurationException: Error parsing file:/root/.ZAP/config.xml

at org.apache.commons.configuration.XMLConfiguration.load(XMLConfiguration.java:1014) ~[commons-configuration-1.10.jar:1.10]

at org.apache.commons.configuration.XMLConfiguration.load(XMLConfiguration.java:972) ~[commons-configuration-1.10.jar:1.10]

at org.zaproxy.zap.utils.ZapXmlConfiguration.load(ZapXmlConfiguration.java:182) ~[zap-2.14.0.jar:2.14.0]

at org.apache.commons.configuration.XMLConfiguration$XMLFileConfigurationDelegate.load(XMLConfiguration.java:1647) ~[commons-configuration-1.10.jar:1.10]

at org.apache.commons.configuration.AbstractFileConfiguration.load(AbstractFileConfiguration.java:324) ~[commons-configuration-1.10.jar:1.10]

at org.apache.commons.configuration.AbstractFileConfiguration.load(AbstractFileConfiguration.java:261) ~[commons-configuration-1.10.jar:1.10]

at org.apache.commons.configuration.AbstractFileConfiguration.load(AbstractFileConfiguration.java:238) ~[commons-configuration-1.10.jar:1.10]

at org.apache.commons.configuration.AbstractHierarchicalFileConfiguration.load(AbstractHierarchicalFileConfiguration.java:184) ~[commons-configuration-1.10.jar:1.10]

at org.zaproxy.zap.utils.ZapXmlConfiguration.<init>(ZapXmlConfiguration.java:84) ~[zap-2.14.0.jar:2.14.0]

at org.parosproxy.paros.Constant.initializeFilesAndDirectories(Constant.java:668) [zap-2.14.0.jar:2.14.0]

at org.parosproxy.paros.Constant.<init>(Constant.java:429) [zap-2.14.0.jar:2.14.0]

at org.parosproxy.paros.Constant.createInstance(Constant.java:1378) [zap-2.14.0.jar:2.14.0]

at org.zaproxy.zap.ZapBootstrap.start(ZapBootstrap.java:64) [zap-2.14.0.jar:2.14.0]

at org.zaproxy.zap.CommandLineBootstrap.start(CommandLineBootstrap.java:48) [zap-2.14.0.jar:2.14.0]

at org.zaproxy.zap.ZAP.main(ZAP.java:98) [zap-2.14.0.jar:2.14.0]

Caused by: org.xml.sax.SAXParseException: Premature end of file.

at com.sun.org.apache.xerces.internal.parsers.DOMParser.parse(DOMParser.java:261) ~[?:?]

at com.sun.org.apache.xerces.internal.jaxp.DocumentBuilderImpl.parse(DocumentBuilderImpl.java:339) ~[?:?]

at org.apache.commons.configuration.XMLConfiguration.load(XMLConfiguration.java:1006) ~[commons-configuration-1.10.jar:1.10]

... 14 more

Failed to load/upgrade config file:

org.apache.commons.configuration.ConfigurationException: Error parsing file:/root/.ZAP/config.xml

at org.apache.commons.configuration.XMLConfiguration.load(XMLConfiguration.java:1014)

at org.apache.commons.configuration.XMLConfiguration.load(XMLConfiguration.java:972)

at org.zaproxy.zap.utils.ZapXmlConfiguration.load(ZapXmlConfiguration.java:182)

at org.apache.commons.configuration.XMLConfiguration$XMLFileConfigurationDelegate.load(XMLConfiguration.java:1647)

at org.apache.commons.configuration.AbstractFileConfiguration.load(AbstractFileConfiguration.java:324)

at org.apache.commons.configuration.AbstractFileConfiguration.load(AbstractFileConfiguration.java:261)

at org.apache.commons.configuration.AbstractFileConfiguration.load(AbstractFileConfiguration.java:238)

at org.apache.commons.configuration.AbstractHierarchicalFileConfiguration.load(AbstractHierarchicalFileConfiguration.java:184)

at org.zaproxy.zap.utils.ZapXmlConfiguration.<init>(ZapXmlConfiguration.java:84)

at org.parosproxy.paros.Constant.initializeFilesAndDirectories(Constant.java:668)

at org.parosproxy.paros.Constant.<init>(Constant.java:429)

at org.parosproxy.paros.Constant.createInstance(Constant.java:1378)

at org.zaproxy.zap.ZapBootstrap.start(ZapBootstrap.java:64)

at org.zaproxy.zap.CommandLineBootstrap.start(CommandLineBootstrap.java:48)

at org.zaproxy.zap.ZAP.main(ZAP.java:98)

Caused by: org.xml.sax.SAXParseException; systemId: file:/root/.ZAP/config.xml; lineNumber: 1; columnNumber: 1; Premature end of file.

at java.xml/com.sun.org.apache.xerces.internal.parsers.DOMParser.parse(DOMParser.java:261)

at java.xml/com.sun.org.apache.xerces.internal.jaxp.DocumentBuilderImpl.parse(DocumentBuilderImpl.java:339)

at org.apache.commons.configuration.XMLConfiguration.load(XMLConfiguration.java:1006)

... 14 more

924 [main] INFO  org.parosproxy.paros.Constant - Creating back up for user inspection: /root/.ZAP/config-0.015056470236160302.xml.bak

Creating back up for user inspection: /root/.ZAP/config-0.015056470236160302.xml.bak

925 [main] INFO  org.parosproxy.paros.Constant - Back up successfully created.

Back up successfully created.

925 [main] INFO  org.parosproxy.paros.Constant - Using default config file...

Using default config file...

Check for updates call failed

вторник, 24 октября 2023 г. в 11:16:35 UTC+3, ZAP User Group: