You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@jmeter.apache.org by Shmuel Krakower <sh...@gmail.com> on 2012/06/07 17:35:19 UTC
Using SSL authentication certificates
Hi Community,
I am trying to use private certificate to authenticate my HTTPS requests.
1. I've exported my certificate from windows MMC certificates manager to
PFX file, renamed it to p12.
2. Opened my jmeter scripts - changed relevant http samplers to use the
Java implementation.
3. Loaded the p12 file with SSL manager.
4. It works!
I have few questions about it:
1. Is it documented that only Java implementation works? or am I missing
something (as HC3.1 and 4 don't use the certificate I load in SSL Manager).
2. How can I use this certificate in non gui mode? as it asks for the
pass phrase of the p12 file.
3. How can I use multiple certificates? as I wanna simulate different
users using the system.
Best Regards,
Shmuel.
Re: Using SSL authentication certificates
Posted by Shmuel Krakower <sh...@gmail.com>.
I love this community. Thank you guys!
בתאריך 2012 6 8 14:21, מאת "Flavio Cysne" <fl...@gmail.com>:
> Shmuel,
>
> google this list archive for SSL Manager or https certificate, it has
> already been answered before.
>
> Any way, here we go. I'm using JMeter 2.6 as an example, then https tests
> with digital certificates only works with HttpClient 3.1.
> As said in JMeter 2.7 changelog, it works with both, HttpClient 3.1 and 4.
>
> SSL Manager can load many certificates at once, and Keystore Configuration
> is used to select what certificate(s) to use with its 0-based index.
>
> If you want to do a non-gui test using digital certificates, create a
> keystore using the command bellow, edit system.properties and, remove the
> comments and configure the keys javax.net.ssl.keyStore
> and javax.net.ssl.keyStorePassword to the path where your generated
> keystore is (I recommend to create a folder ssl inside JMeter home
> directory) and the password used on it, respectively.
>
> keytool -importkeystore -srckeystore certificate.p12 -srcstoretype PKCS12
> -srcstorepass <certificate_password> -keystore <keystore_filename>
> -storepass <stored_password>
>
> Certificates imported must be imported using the same <stored_password>
>
> If you will use only one certificate there's no need to add a Keystore
> Configuration component in your Test Plan.
>
> Hope it helps you.
> Flávio Cysne
>
> 2012/6/8 Shmuel Krakower <sh...@gmail.com>
>
> > Pretty simple :) thanks! I was googling and only found this SSL
> Manager...
> > btw why does it still exist? It seems like it cannot do something which
> the
> > ketstore config element cannot.
> > בתאריך 2012 6 7 22:09, מאת "Philippe Mouawad" <
> philippe.mouawad@gmail.com
> > >:
> >
> > > Hello,
> > > Did you look at keystore config élément ?
> > > It triés to explain the whole process.
> > >
> > > regards
> > > Philippe
> > >
> > > http://www.ubik-ingenierie.com
> > > On Thursday, June 7, 2012, Shmuel Krakower wrote:
> > >
> > > > Hi Community,
> > > > I am trying to use private certificate to authenticate my HTTPS
> > requests.
> > > >
> > > >
> > > > 1. I've exported my certificate from windows MMC certificates
> manager
> > > to
> > > > PFX file, renamed it to p12.
> > > > 2. Opened my jmeter scripts - changed relevant http samplers to use
> > the
> > > > Java implementation.
> > > > 3. Loaded the p12 file with SSL manager.
> > > > 4. It works!
> > > >
> > > >
> > > > I have few questions about it:
> > > >
> > > > 1. Is it documented that only Java implementation works? or am I
> > > missing
> > > > something (as HC3.1 and 4 don't use the certificate I load in SSL
> > > > Manager).
> > >
> > > Ni cause it works better with hc31 and hc4
> > >
> > > > 2. How can I use this certificate in non gui mode? as it asks for
> the
> > > > pass phrase of the p12 file.u
> > >
> > > Yes, look at keystore config
> > >
> > > > 3. How can I use multiple certificates? as I wanna simulate
> different
> > > > users using the system.
> > > >
> > > > Same answer
> > >
> > > >
> > > > Best Regards,
> > > > Shmuel.
> > > >
> > >
> > >
> > > --
> > > Cordialement.
> > > Philippe Mouawad.
> > >
> >
>
Re: Using SSL authentication certificates
Posted by Flavio Cysne <fl...@gmail.com>.
Shmuel,
google this list archive for SSL Manager or https certificate, it has
already been answered before.
Any way, here we go. I'm using JMeter 2.6 as an example, then https tests
with digital certificates only works with HttpClient 3.1.
As said in JMeter 2.7 changelog, it works with both, HttpClient 3.1 and 4.
SSL Manager can load many certificates at once, and Keystore Configuration
is used to select what certificate(s) to use with its 0-based index.
If you want to do a non-gui test using digital certificates, create a
keystore using the command bellow, edit system.properties and, remove the
comments and configure the keys javax.net.ssl.keyStore
and javax.net.ssl.keyStorePassword to the path where your generated
keystore is (I recommend to create a folder ssl inside JMeter home
directory) and the password used on it, respectively.
keytool -importkeystore -srckeystore certificate.p12 -srcstoretype PKCS12
-srcstorepass <certificate_password> -keystore <keystore_filename>
-storepass <stored_password>
Certificates imported must be imported using the same <stored_password>
If you will use only one certificate there's no need to add a Keystore
Configuration component in your Test Plan.
Hope it helps you.
Flávio Cysne
2012/6/8 Shmuel Krakower <sh...@gmail.com>
> Pretty simple :) thanks! I was googling and only found this SSL Manager...
> btw why does it still exist? It seems like it cannot do something which the
> ketstore config element cannot.
> בתאריך 2012 6 7 22:09, מאת "Philippe Mouawad" <philippe.mouawad@gmail.com
> >:
>
> > Hello,
> > Did you look at keystore config élément ?
> > It triés to explain the whole process.
> >
> > regards
> > Philippe
> >
> > http://www.ubik-ingenierie.com
> > On Thursday, June 7, 2012, Shmuel Krakower wrote:
> >
> > > Hi Community,
> > > I am trying to use private certificate to authenticate my HTTPS
> requests.
> > >
> > >
> > > 1. I've exported my certificate from windows MMC certificates manager
> > to
> > > PFX file, renamed it to p12.
> > > 2. Opened my jmeter scripts - changed relevant http samplers to use
> the
> > > Java implementation.
> > > 3. Loaded the p12 file with SSL manager.
> > > 4. It works!
> > >
> > >
> > > I have few questions about it:
> > >
> > > 1. Is it documented that only Java implementation works? or am I
> > missing
> > > something (as HC3.1 and 4 don't use the certificate I load in SSL
> > > Manager).
> >
> > Ni cause it works better with hc31 and hc4
> >
> > > 2. How can I use this certificate in non gui mode? as it asks for the
> > > pass phrase of the p12 file.u
> >
> > Yes, look at keystore config
> >
> > > 3. How can I use multiple certificates? as I wanna simulate different
> > > users using the system.
> > >
> > > Same answer
> >
> > >
> > > Best Regards,
> > > Shmuel.
> > >
> >
> >
> > --
> > Cordialement.
> > Philippe Mouawad.
> >
>
Re: Using SSL authentication certificates
Posted by Shmuel Krakower <sh...@gmail.com>.
Pretty simple :) thanks! I was googling and only found this SSL Manager...
btw why does it still exist? It seems like it cannot do something which the
ketstore config element cannot.
בתאריך 2012 6 7 22:09, מאת "Philippe Mouawad" <ph...@gmail.com>:
> Hello,
> Did you look at keystore config élément ?
> It triés to explain the whole process.
>
> regards
> Philippe
>
> http://www.ubik-ingenierie.com
> On Thursday, June 7, 2012, Shmuel Krakower wrote:
>
> > Hi Community,
> > I am trying to use private certificate to authenticate my HTTPS requests.
> >
> >
> > 1. I've exported my certificate from windows MMC certificates manager
> to
> > PFX file, renamed it to p12.
> > 2. Opened my jmeter scripts - changed relevant http samplers to use the
> > Java implementation.
> > 3. Loaded the p12 file with SSL manager.
> > 4. It works!
> >
> >
> > I have few questions about it:
> >
> > 1. Is it documented that only Java implementation works? or am I
> missing
> > something (as HC3.1 and 4 don't use the certificate I load in SSL
> > Manager).
>
> Ni cause it works better with hc31 and hc4
>
> > 2. How can I use this certificate in non gui mode? as it asks for the
> > pass phrase of the p12 file.u
>
> Yes, look at keystore config
>
> > 3. How can I use multiple certificates? as I wanna simulate different
> > users using the system.
> >
> > Same answer
>
> >
> > Best Regards,
> > Shmuel.
> >
>
>
> --
> Cordialement.
> Philippe Mouawad.
>
Re: Using SSL authentication certificates
Posted by Philippe Mouawad <ph...@gmail.com>.
Hello,
Did you look at keystore config élément ?
It triés to explain the whole process.
regards
Philippe
http://www.ubik-ingenierie.com
On Thursday, June 7, 2012, Shmuel Krakower wrote:
> Hi Community,
> I am trying to use private certificate to authenticate my HTTPS requests.
>
>
> 1. I've exported my certificate from windows MMC certificates manager to
> PFX file, renamed it to p12.
> 2. Opened my jmeter scripts - changed relevant http samplers to use the
> Java implementation.
> 3. Loaded the p12 file with SSL manager.
> 4. It works!
>
>
> I have few questions about it:
>
> 1. Is it documented that only Java implementation works? or am I missing
> something (as HC3.1 and 4 don't use the certificate I load in SSL
> Manager).
Ni cause it works better with hc31 and hc4
> 2. How can I use this certificate in non gui mode? as it asks for the
> pass phrase of the p12 file.u
Yes, look at keystore config
> 3. How can I use multiple certificates? as I wanna simulate different
> users using the system.
>
> Same answer
>
> Best Regards,
> Shmuel.
>
--
Cordialement.
Philippe Mouawad.