You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@jmeter.apache.org by Shmuel Krakower <sh...@gmail.com> on 2014/10/01 14:40:37 UTC
SSL Certificate authentication with HC4
Hi,
I have an issue with authenticating a web service using JKS and HC4.
Once I use HC3.1 everything works fine.
1. Does HC4 support JKS / Keystore Configuration element for authentication?
2. If it should work, how can I verify that the certificate is actually
being used by the http sampler?
2.1. From JMeter logs, once I run the test with HC3.1 - I can see the JKS
related log entry:
jmeter.util.SSLManager: Total of 1 aliases loaded OK from keystore
2.2. With HC4 - I don't see such entry in the JMeter logs.
2.3. I've tried to enable some HC3 and HC4 logs for debugging but in
neither case I can see authentication related headers, so I couldn't tell.
I can dive deeper with debugging but wonder first if this should work at
all or not, in HC4.
Best,
Shmuel Krakower.
www.Beatsoo.org - re-use your jmeter scripts for application performance
monitoring from worldwide locations for free.
Re: SSL Certificate authentication with HC4
Posted by UBIK LOAD PACK Support <su...@ubikloadpack.com>.
Hi,
You should read second part (Using Keystore) and ensure you set correctly:
-Djavax.net.ssl.trustStore=/var/log/flood/files/truststore.jks
-Djavax.net.ssl.keyStore=/var/log/flood/files/keystore.jks
-Djavax.net.ssl.keyStorePassword=password
-Jhttps.use.cached.ssl.context=false
See also:
https://issues.apache.org/bugzilla/show_bug.cgi?id=54977
And read this:
http://jmeter.apache.org/usermanual/component_reference.html#Keystore_Configuration
On Wed, Oct 1, 2014 at 3:05 PM, Shmuel Krakower <sh...@gmail.com> wrote:
> Hi UBIK LOAD PACK Support,
> Thanks for the super quick reply.
>
> I went through this guide, and it is the same as what I did, except of the
> Trust store, which I haven't configured and the fact that I'm using a
> certificate which was not created by openssl, rather it is exported.
>
> To be more specific, it works fine as long as I use HC 3.1 implementation
> in the HTTP Sampler, but once I switch to HC4 it doesn't work anymore and I
> don't see any log entries such as:
> jmeter.util.SSLManager: JmeterKeyStore Location: XXX.jks type JKS
> jmeter.util.SSLManager: KeyStore created OK
> jmeter.util.SSLManager: Total of 1 aliases loaded OK from keystore
>
>
> And by the blog post I get the picture that it should work with HC4, so I
> guess I'll drill down further.
> Thanks,
>
>
> Shmuel Krakower.
> www.Beatsoo.org - re-use your jmeter scripts for application performance
> monitoring from worldwide locations for free.
>
> On Wed, Oct 1, 2014 at 3:49 PM, UBIK LOAD PACK Support <
> support@ubikloadpack.com> wrote:
>
>> Hi,
>> There is a very interesting blog which details nearly all steps for this:
>> - https://flood.io/blog/23-mutual-two-way-ssl-with-jmeter
>>
>> Also check reference documentation on Keystore Config.
>>
>> Did you follow this approach ?
>> Thanks
>> Regards
>>
>> On Wed, Oct 1, 2014 at 2:40 PM, Shmuel Krakower <sh...@gmail.com>
>> wrote:
>>
>> > Hi,
>> >
>> > I have an issue with authenticating a web service using JKS and HC4.
>> > Once I use HC3.1 everything works fine.
>> >
>> > 1. Does HC4 support JKS / Keystore Configuration element for
>> > authentication?
>> > 2. If it should work, how can I verify that the certificate is actually
>> > being used by the http sampler?
>> > 2.1. From JMeter logs, once I run the test with HC3.1 - I can see the
>> JKS
>> > related log entry:
>> > jmeter.util.SSLManager: Total of 1 aliases loaded OK from keystore
>> > 2.2. With HC4 - I don't see such entry in the JMeter logs.
>> > 2.3. I've tried to enable some HC3 and HC4 logs for debugging but in
>> > neither case I can see authentication related headers, so I couldn't
>> tell.
>> >
>> > I can dive deeper with debugging but wonder first if this should work at
>> > all or not, in HC4.
>> >
>> > Best,
>> >
>> > Shmuel Krakower.
>> > www.Beatsoo.org - re-use your jmeter scripts for application
>> performance
>> > monitoring from worldwide locations for free.
>> >
>>
>>
>>
>> --
>>
>> Regards
>> Ubik Load Pack <http://ubikloadpack.com> Team
>> Follow us on Twitter <http://twitter.com/ubikloadpack>
>>
>>
>> Cordialement
>> L'équipe Ubik Load Pack <http://ubikloadpack.com>
>> Suivez-nous sur Twitter <http://twitter.com/ubikloadpack>
>>
>
>
--
Regards
Ubik Load Pack <http://ubikloadpack.com> Team
Follow us on Twitter <http://twitter.com/ubikloadpack>
Cordialement
L'équipe Ubik Load Pack <http://ubikloadpack.com>
Suivez-nous sur Twitter <http://twitter.com/ubikloadpack>
Re: SSL Certificate authentication with HC4
Posted by Shmuel Krakower <sh...@gmail.com>.
Hi UBIK LOAD PACK Support,
Thanks for the super quick reply.
I went through this guide, and it is the same as what I did, except of the
Trust store, which I haven't configured and the fact that I'm using a
certificate which was not created by openssl, rather it is exported.
To be more specific, it works fine as long as I use HC 3.1 implementation
in the HTTP Sampler, but once I switch to HC4 it doesn't work anymore and I
don't see any log entries such as:
jmeter.util.SSLManager: JmeterKeyStore Location: XXX.jks type JKS
jmeter.util.SSLManager: KeyStore created OK
jmeter.util.SSLManager: Total of 1 aliases loaded OK from keystore
And by the blog post I get the picture that it should work with HC4, so I
guess I'll drill down further.
Thanks,
Shmuel Krakower.
www.Beatsoo.org - re-use your jmeter scripts for application performance
monitoring from worldwide locations for free.
On Wed, Oct 1, 2014 at 3:49 PM, UBIK LOAD PACK Support <
support@ubikloadpack.com> wrote:
> Hi,
> There is a very interesting blog which details nearly all steps for this:
> - https://flood.io/blog/23-mutual-two-way-ssl-with-jmeter
>
> Also check reference documentation on Keystore Config.
>
> Did you follow this approach ?
> Thanks
> Regards
>
> On Wed, Oct 1, 2014 at 2:40 PM, Shmuel Krakower <sh...@gmail.com>
> wrote:
>
> > Hi,
> >
> > I have an issue with authenticating a web service using JKS and HC4.
> > Once I use HC3.1 everything works fine.
> >
> > 1. Does HC4 support JKS / Keystore Configuration element for
> > authentication?
> > 2. If it should work, how can I verify that the certificate is actually
> > being used by the http sampler?
> > 2.1. From JMeter logs, once I run the test with HC3.1 - I can see the JKS
> > related log entry:
> > jmeter.util.SSLManager: Total of 1 aliases loaded OK from keystore
> > 2.2. With HC4 - I don't see such entry in the JMeter logs.
> > 2.3. I've tried to enable some HC3 and HC4 logs for debugging but in
> > neither case I can see authentication related headers, so I couldn't
> tell.
> >
> > I can dive deeper with debugging but wonder first if this should work at
> > all or not, in HC4.
> >
> > Best,
> >
> > Shmuel Krakower.
> > www.Beatsoo.org - re-use your jmeter scripts for application performance
> > monitoring from worldwide locations for free.
> >
>
>
>
> --
>
> Regards
> Ubik Load Pack <http://ubikloadpack.com> Team
> Follow us on Twitter <http://twitter.com/ubikloadpack>
>
>
> Cordialement
> L'équipe Ubik Load Pack <http://ubikloadpack.com>
> Suivez-nous sur Twitter <http://twitter.com/ubikloadpack>
>
Re: SSL Certificate authentication with HC4
Posted by UBIK LOAD PACK Support <su...@ubikloadpack.com>.
Hi,
There is a very interesting blog which details nearly all steps for this:
- https://flood.io/blog/23-mutual-two-way-ssl-with-jmeter
Also check reference documentation on Keystore Config.
Did you follow this approach ?
Thanks
Regards
On Wed, Oct 1, 2014 at 2:40 PM, Shmuel Krakower <sh...@gmail.com> wrote:
> Hi,
>
> I have an issue with authenticating a web service using JKS and HC4.
> Once I use HC3.1 everything works fine.
>
> 1. Does HC4 support JKS / Keystore Configuration element for
> authentication?
> 2. If it should work, how can I verify that the certificate is actually
> being used by the http sampler?
> 2.1. From JMeter logs, once I run the test with HC3.1 - I can see the JKS
> related log entry:
> jmeter.util.SSLManager: Total of 1 aliases loaded OK from keystore
> 2.2. With HC4 - I don't see such entry in the JMeter logs.
> 2.3. I've tried to enable some HC3 and HC4 logs for debugging but in
> neither case I can see authentication related headers, so I couldn't tell.
>
> I can dive deeper with debugging but wonder first if this should work at
> all or not, in HC4.
>
> Best,
>
> Shmuel Krakower.
> www.Beatsoo.org - re-use your jmeter scripts for application performance
> monitoring from worldwide locations for free.
>
--
Regards
Ubik Load Pack <http://ubikloadpack.com> Team
Follow us on Twitter <http://twitter.com/ubikloadpack>
Cordialement
L'équipe Ubik Load Pack <http://ubikloadpack.com>
Suivez-nous sur Twitter <http://twitter.com/ubikloadpack>