You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@jmeter.apache.org by bu...@apache.org on 2012/12/04 03:34:22 UTC

[Bug 54237] New: return "connection reset" if ssl cert expired

https://issues.apache.org/bugzilla/show_bug.cgi?id=54237

            Bug ID: 54237
           Summary: return "connection reset" if ssl cert expired
           Product: JMeter
           Version: 2.6
          Hardware: PC
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Main
          Assignee: issues@jmeter.apache.org
          Reporter: joan_wei@163.com
    Classification: Unclassified

when send https request using ssl cert, if the cert expired, return "connection
reset" in response data window.

expected return exception details, such as: ssl handshake failed, cert expired.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 54237] return "connection reset" if ssl certification expired

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=54237

simonzhang <jo...@163.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|return "connection reset"   |return "connection reset"
                   |if ssl cert expired         |if ssl certification
                   |                            |expired
                 OS|                            |All

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 54237] return "connection reset" if ssl certification expired

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=54237

simonzhang <jo...@163.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEEDINFO                    |NEW

--- Comment #2 from simonzhang <jo...@163.com> ---
sorry for the delay.

I set the ssl certs in BeanShell PreProcesser by through:
System.setProperty("javax.net.ssl.keyStore","/sslcerts.p12");

the response details is:
java.net.SocketException: Connection reset
    at java.net.SocketInputStream.read(SocketInputStream.java:168)
    at com.sun.net.ssl.internal.ssl.InputRecord.readFully(InputRecord.java:293)
    at
com.sun.net.ssl.internal.ssl.InputRecord.readV3Record(InputRecord.java:405)
    at com.sun.net.ssl.internal.ssl.InputRecord.read(InputRecord.java:360)
    at
com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:830)
    at
com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1170)
    at
com.sun.net.ssl.internal.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:637)
    at
com.sun.net.ssl.internal.ssl.AppOutputStream.write(AppOutputStream.java:89)
    at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:65)
    at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:123)
    at
org.apache.commons.httpclient.methods.StringRequestEntity.writeRequest(StringRequestEntity.java:146)
    at
org.apache.commons.httpclient.methods.EntityEnclosingMethod.writeRequestBody(EntityEnclosingMethod.java:499)
    at
org.apache.commons.httpclient.HttpMethodBase.writeRequest(HttpMethodBase.java:2114)
    at
org.apache.commons.httpclient.HttpMethodBase.execute(HttpMethodBase.java:1096)
    at
org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:398)
    at
org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:171)
    at
org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397)
    at
org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:323)
    at
org.apache.jmeter.protocol.http.sampler.HTTPHC3Impl.sample(HTTPHC3Impl.java:249)
    at
org.apache.jmeter.protocol.http.sampler.HTTPSamplerProxy.sample(HTTPSamplerProxy.java:62)
    at
org.apache.jmeter.protocol.http.sampler.HTTPSamplerBase.sample(HTTPSamplerBase.java:1054)
    at
org.apache.jmeter.protocol.http.sampler.HTTPSamplerBase.sample(HTTPSamplerBase.java:1043)
    at
org.apache.jmeter.threads.JMeterThread.process_sampler(JMeterThread.java:416)
    at org.apache.jmeter.threads.JMeterThread.run(JMeterThread.java:271)
    at java.lang.Thread.run(Thread.java:662)


hope that help.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 54237] return "connection reset" if ssl certification expired

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=54237

--- Comment #3 from simonzhang <jo...@163.com> ---
but sometimes (the occurrence rate is about 10%) the response is:
javax.net.ssl.SSLHandshakeException: Received fatal alert: unknown_ca
    at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:174)
    at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:136)
    at
com.sun.net.ssl.internal.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java:1806)
    at
com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:986)
    at
com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1170)
    at
com.sun.net.ssl.internal.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:637)
    at
com.sun.net.ssl.internal.ssl.AppOutputStream.write(AppOutputStream.java:89)
    at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:65)
    at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:123)
    at
org.apache.commons.httpclient.methods.StringRequestEntity.writeRequest(StringRequestEntity.java:146)
    at
org.apache.commons.httpclient.methods.EntityEnclosingMethod.writeRequestBody(EntityEnclosingMethod.java:499)
    at
org.apache.commons.httpclient.HttpMethodBase.writeRequest(HttpMethodBase.java:2114)
    at
org.apache.commons.httpclient.HttpMethodBase.execute(HttpMethodBase.java:1096)
    at
org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:398)
    at
org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:171)
    at
org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397)
    at
org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:323)
    at
org.apache.jmeter.protocol.http.sampler.HTTPHC3Impl.sample(HTTPHC3Impl.java:249)
    at
org.apache.jmeter.protocol.http.sampler.HTTPSamplerProxy.sample(HTTPSamplerProxy.java:62)
    at
org.apache.jmeter.protocol.http.sampler.HTTPSamplerBase.sample(HTTPSamplerBase.java:1054)
    at
org.apache.jmeter.protocol.http.sampler.HTTPSamplerBase.sample(HTTPSamplerBase.java:1043)
    at
org.apache.jmeter.threads.JMeterThread.process_sampler(JMeterThread.java:416)
    at org.apache.jmeter.threads.JMeterThread.run(JMeterThread.java:271)
    at java.lang.Thread.run(Thread.java:662)

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 54237] return "connection reset" if ssl certification expired

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=54237

Philippe Mouawad <p....@ubik-ingenierie.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEEDINFO                    |RESOLVED
         Resolution|---                         |INVALID

--- Comment #6 from Philippe Mouawad <p....@ubik-ingenierie.com> ---
Closing issue as no infos provided.
Feel free to reopen with more informations.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 54237] return "connection reset" if ssl certification expired

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=54237

Philippe Mouawad <p....@ubik-ingenierie.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |NEEDINFO
                 CC|                            |p.mouawad@ubik-ingenierie.c
                   |                            |om

--- Comment #5 from Philippe Mouawad <p....@ubik-ingenierie.com> ---
Any news on that ?

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 54237] return "connection reset" if ssl certification expired

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=54237

Sebb <se...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |NEEDINFO

--- Comment #1 from Sebb <se...@apache.org> ---
Can you provide a test case?
Log message/screen shot?

Note that JMeter deliberately does not do any certificate validation, so it may
not be possible to change the response.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 54237] return "connection reset" if ssl certification expired

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=54237

--- Comment #4 from Sebb <se...@apache.org> ---
(In reply to comment #2)
> sorry for the delay.
> 
> I set the ssl certs in BeanShell PreProcesser by through:
> System.setProperty("javax.net.ssl.keyStore","/sslcerts.p12");

Not recommended, as some init is done when JMeter starts up.
Changing the system property during a test may cause problems.

Try setting the property on the command-line or in system.properties instead.

-- 
You are receiving this mail because:
You are the assignee for the bug.