You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@jmeter.apache.org by bu...@apache.org on 2018/02/18 11:02:50 UTC

[Bug 62114] New: HTTP(S) Test Script Recorder : Client certificate authentication only works with Java implementation

https://bz.apache.org/bugzilla/show_bug.cgi?id=62114

            Bug ID: 62114
           Summary: HTTP(S) Test Script Recorder : Client certificate
                    authentication only works with Java implementation
           Product: JMeter
           Version: 2.13
          Hardware: All
                OS: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: HTTP
          Assignee: issues@jmeter.apache.org
          Reporter: p.mouawad@ubik-ingenierie.com
  Target Milestone: ---

Reproducing:

- Clone
https://github.com/hokein/electron-sample-apps/tree/master/client-certificate
- Run ssl/setup.sh
- Run node server.js
- Input the client.p12 into firefox "Your certificate"
- Hit https://localhost:5000 , you are asked for a certificate and then have
approved page

Now to test with JMeter:
- Setup -Djavax.net.ssl.keyStore=<path to client.p12>
-Djavax.net.ssl.keyStorePassword=password
- Clear your FF  history
- Use Recording Template
- Start it
- Add JMeter ROOT CA in FF
- Hit https://localhost:5000, you immediately get "denied"

Switch implementation for Java and restart: 
- Clear your FF  history
- You get approved

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 62114] HTTP(S) Test Script Recorder : Client certificate authentication uses the first SSLManager created

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=62114

Philippe Mouawad <p....@ubik-ingenierie.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |FixedInTrunk
   Target Milestone|---                         |JMETER_4.1

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 62114] HTTP(S) Test Script Recorder : Client certificate authentication uses the first SSLManager created

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=62114

Philippe Mouawad <p....@ubik-ingenierie.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
             Status|NEW                         |RESOLVED

--- Comment #2 from Philippe Mouawad <p....@ubik-ingenierie.com> ---
Author: pmouawad
Date: Sun Feb 18 20:48:21 2018
New Revision: 1824707

URL: http://svn.apache.org/viewvc?rev=1824707&view=rev
Log:
Bug 62114 - HTTP(S) Test Script Recorder : Client certificate authentication
uses the first SSLManager created
Contributed by UbikLoadPack
Bugzilla Id: 62114

Modified:
   
jmeter/trunk/src/core/org/apache/jmeter/util/HttpSSLProtocolSocketFactory.java
    jmeter/trunk/src/core/org/apache/jmeter/util/JsseSSLManager.java
   
jmeter/trunk/src/protocol/http/org/apache/jmeter/protocol/http/sampler/HTTPHC4Impl.java
   
jmeter/trunk/src/protocol/http/org/apache/jmeter/protocol/http/util/HC4TrustAllSSLSocketFactory.java
    jmeter/trunk/xdocs/changes.xml

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 62114] HTTP(S) Test Script Recorder : Client certificate authentication uses the first SSLManager created

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=62114

Philippe Mouawad <p....@ubik-ingenierie.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |p.mouawad@ubik-ingenierie.c
                   |                            |om
            Summary|HTTP(S) Test Script         |HTTP(S) Test Script
                   |Recorder : Client           |Recorder : Client
                   |certificate authentication  |certificate authentication
                   |only works with Java        |uses the first SSLManager
                   |implementation              |created

--- Comment #1 from Philippe Mouawad <p....@ubik-ingenierie.com> ---
After further investigation it appears that issue was due to an old SSLManager
that was an instance variable of HttpSSLProtocolSocketFactory which was used.
As an effect first certificate loaded was incorrect, updating it with
SSLManager menu had no effect.

-- 
You are receiving this mail because:
You are the assignee for the bug.