Extension autoupdate error

[Orsolya Kerner]

Hi Everyone,

I run ZAP proxy from docker in my local machine for testing and I have got this error message and the add-ons are not installed in:
 43163 [ZAP-cfu] WARN  org.zaproxy.zap.extension.autoupdate.ExtensionAutoUpdate - Failed to check for updates using: https://raw.githubusercontent.com/zaproxy/zap-admin/master/ZapVersions-2.10.xml
owasp-zap      | java.net.SocketTimeoutException: connect timed out
owasp-zap      |        at java.net.PlainSocketImpl.socketConnect(Native Method) ~[?:?]
owasp-zap      |        at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:399) ~[?:?]
owasp-zap      |        at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:242) ~[?:?]
owasp-zap      |        at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:224) ~[?:?]
owasp-zap      |        at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:403) ~[?:?]
owasp-zap      |        at java.net.Socket.connect(Socket.java:609) ~[?:?]
owasp-zap      |        at sun.security.ssl.SSLSocketImpl.connect(SSLSocketImpl.java:289) ~[?:?]
owasp-zap      |        at org.parosproxy.paros.network.SSLConnector.createSocket(SSLConnector.java:460) ~[zap-2.10.0.jar:2.10.0]
owasp-zap      |        at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:728) ~[zap-2.10.0.jar:?]
owasp-zap      |        at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) ~[commons-httpclient-3.1.jar:?]
owasp-zap      |        at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:457) ~[zap-2.10.0.jar:?]
owasp-zap      |        at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:207) ~[zap-2.10.0.jar:?]
owasp-zap      |        at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) ~[commons-httpclient-3.1.jar:?]
owasp-zap      |        at org.parosproxy.paros.network.HttpSender.executeMethod(HttpSender.java:429) ~[zap-2.10.0.jar:2.10.0]
owasp-zap      |        at org.parosproxy.paros.network.HttpSender.runMethod(HttpSender.java:671) ~[zap-2.10.0.jar:2.10.0]
owasp-zap      |        at org.parosproxy.paros.network.HttpSender.send(HttpSender.java:626) ~[zap-2.10.0.jar:2.10.0]
owasp-zap      |        at org.parosproxy.paros.network.HttpSender.sendAuthenticated(HttpSender.java:601) ~[zap-2.10.0.jar:2.10.0]
owasp-zap      |        at org.parosproxy.paros.network.HttpSender.sendAuthenticated(HttpSender.java:584) ~[zap-2.10.0.jar:2.10.0]
owasp-zap      |        at org.parosproxy.paros.network.HttpSender.sendAndReceive(HttpSender.java:489) ~[zap-2.10.0.jar:2.10.0]
owasp-zap      |        at org.zaproxy.zap.extension.autoupdate.ExtensionAutoUpdate.getRemoteConfigurationUrl(ExtensionAutoUpdate.java:1036) ~[zap-2.10.0.jar:2.10.0]
owasp-zap      |        at org.zaproxy.zap.extension.autoupdate.ExtensionAutoUpdate.access$900(ExtensionAutoUpdate.java:92) ~[zap-2.10.0.jar:2.10.0]
owasp-zap      |        at org.zaproxy.zap.extension.autoupdate.ExtensionAutoUpdate$8.run(ExtensionAutoUpdate.java:1205) [zap-2.10.0.jar:2.10.0]
owasp-zap      | 44124 [ZAP-daemon] ERROR org.parosproxy.paros.CommandLine - Check for updates call failed
44126 [ZAP-daemon] INFO  org.zaproxy.zap.DaemonBootstrap - ZAP is now listening on 0.0.0.0:8090

And it seems the add-ons is not installed in it.

Best,

Orsolya

[kingthorin+owaspzap]

If it can't communicate with github (per the listed URL) then yes it will fail and things won't install.

[Simon Bennetts]

Hiya Orsolya,

It looks like https://raw.githubusercontent.com/zaproxy/zap-admin/master/ZapVersions-2.10.xml is being blocked for you.

This will mean that ZAP will not be able to check for updates or download add-ons.

Is this something you can get unblocked?

Cheers,

Simon

[Orsolya Kerner]

Hi Simon,

Thanks. I think I started the ZAP proxy too many times, didn't I?

I don't know how it can be unblocked.

Maybe I should wait for a short time.

Best,

Orsolya