You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@jmeter.apache.org by adam007 <ad...@gmail.com> on 2012/08/25 15:35:59 UTC

HTTP Proxy Server - SSL Certificate

Hello,

I have "Apache Software foundation -> JMeter Proxy" certificate added to
sert. list in FireFox Browser, but when i try to record request using HTTP
Proxy server I have following errors:

ERROR - jmeter.protocol.http.proxy.Proxy: Problem with SSL certificate?
Ensure browser is set to accept the JMeter proxy cert: Received fatal alert:
unknown_ca

ERROR - jmeter.protocol.http.proxy.Proxy: Problem with SSL certificate?
Ensure browser is set to accept the JMeter proxy cert: Connection reset
jmeter.protocol.http.proxy.Proxy: Problem with SSL certificate? Ensure
browser is set to accept the JMeter proxy cert: Received fatal alert:
unknown_ca

What should I do to record requests? 



--
View this message in context: http://jmeter.512774.n5.nabble.com/HTTP-Proxy-Server-SSL-Certificate-tp5714504.html
Sent from the JMeter - User mailing list archive at Nabble.com.

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@jmeter.apache.org
For additional commands, e-mail: user-help@jmeter.apache.org


Re: HTTP Proxy Server - SSL Certificate

Posted by adam007 <ad...@gmail.com>.
When I try record https request on FireFox now (after entering https URL to
browser) I got following Error in JM:

2012/08/25 18:46:40 INFO  - jmeter.protocol.http.proxy.Daemon: Creating
Daemon Socket on port: 8080 
2012/08/25 18:46:40 INFO  - jmeter.protocol.http.proxy.Daemon: Proxy up and
running! 
2012/08/25 18:46:44 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with
SSL certificate? Ensure browser is set to accept the JMeter proxy cert:
Connection reset 
2012/08/25 18:46:44 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with
SSL certificate? Ensure browser is set to accept the JMeter proxy cert:
Received fatal alert: bad_certificate 
2012/08/25 18:46:44 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with
SSL certificate? Ensure browser is set to accept the JMeter proxy cert:
Received fatal alert: bad_certificate 
2012/08/25 18:46:44 INFO  - jmeter.protocol.http.proxy.Proxy: Opened
Keystore file:
E:\JMeter\apache-jmeter-2.7\apache-jmeter-2.7\bin\proxyserver.jks 
2012/08/25 18:46:44 INFO  - jmeter.protocol.http.proxy.Proxy: KeyStore for
SSL loaded OK and put host in map (api.pinterest.com) 
2012/08/25 18:46:44 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with
SSL certificate? Ensure browser is set to accept the JMeter proxy cert:
Connection reset 
2012/08/25 18:46:45 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with
SSL certificate? Ensure browser is set to accept the JMeter proxy cert:
Received fatal alert: bad_certificate 
2012/08/25 18:46:45 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with
SSL certificate? Ensure browser is set to accept the JMeter proxy cert:
Software caused connection abort: recv failed 



--
View this message in context: http://jmeter.512774.n5.nabble.com/HTTP-Proxy-Server-SSL-Certificate-tp5714504p5714510.html
Sent from the JMeter - User mailing list archive at Nabble.com.

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@jmeter.apache.org
For additional commands, e-mail: user-help@jmeter.apache.org


Re: HTTP Proxy Server - SSL Certificate

Posted by adam007 <ad...@gmail.com>.
When I entered https URL instead of http in my browser I got  information
about certificate:
- Common Name: JMeter Proxy
- Organization: Apache Software Foundation
- Organization Unit: JMeter
- Serial Number: 4A:7A:0A:D5





--
View this message in context: http://jmeter.512774.n5.nabble.com/HTTP-Proxy-Server-SSL-Certificate-tp5714504p5714509.html
Sent from the JMeter - User mailing list archive at Nabble.com.

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@jmeter.apache.org
For additional commands, e-mail: user-help@jmeter.apache.org


Re: HTTP Proxy Server - SSL Certificate

Posted by adam007 <ad...@gmail.com>.
Thank you very much for your help :)



--
View this message in context: http://jmeter.512774.n5.nabble.com/HTTP-Proxy-Server-SSL-Certificate-tp5714504p5714514.html
Sent from the JMeter - User mailing list archive at Nabble.com.

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@jmeter.apache.org
For additional commands, e-mail: user-help@jmeter.apache.org


Re: HTTP Proxy Server - SSL Certificate

Posted by Milamber <mi...@apache.org>.

Le 25/08/2012 18:33, adam007 a ecrit :
> I did everything according to your tutorial with google example. Requests are
> recorded and everything looks like on the screens from tutorial, but when i
> record following steps I have still error in JM:
> 1. Record request:  https://google.com  ->  no errors
> 2. Enter text to search field on google and hit enter: ->  requests are
> recorded,

Ok good news.

>   but I see error in JM:
>
>
> 2012/08/25 19:26:33 INFO  - jmeter.protocol.http.proxy.Daemon: Creating
> Daemon Socket on port: 8080
> 2012/08/25 19:26:33 INFO  - jmeter.protocol.http.proxy.Daemon: Proxy up and
> running!
> 2012/08/25 19:26:48 INFO  - jmeter.protocol.http.proxy.Proxy: Proxy will
> remove the headers: If-Modified-Since,If-None-Match,Host
> 2012/08/25 19:26:48 INFO  - jmeter.protocol.http.proxy.Proxy: Opened
> Keystore file:
> E:\JMeter\apache-jmeter-2.7\apache-jmeter-2.7\bin\proxyserver.jks
> 2012/08/25 19:26:48 INFO  - jmeter.protocol.http.proxy.Proxy: KeyStore for
> SSL loaded OK and put host in map (www.google.pl)
> 2012/08/25 19:26:49 INFO  - jmeter.protocol.http.sampler.HTTPHCAbstractImpl:
> Local host = adas
> 2012/08/25 19:26:49 INFO  - jmeter.protocol.http.sampler.HTTPHC3Impl: HTTP
> request retry count = 1
> 2012/08/25 19:26:49 INFO  - jmeter.util.JsseSSLManager: Using default SSL
> protocol: TLS
> 2012/08/25 19:26:49 INFO  - jmeter.util.JsseSSLManager: SSL session context:
> per-thread
> 2012/08/25 19:26:49 INFO  - jmeter.util.SSLManager: JmeterKeyStore Location:
> type JKS
> 2012/08/25 19:26:49 INFO  - jmeter.util.SSLManager: KeyStore created OK
> 2012/08/25 19:26:49 WARN  - jmeter.util.SSLManager: Keystore file not found,
> loading empty keystore
> 2012/08/25 19:26:49 INFO  - jmeter.protocol.http.proxy.FormCharSetFinder:
> Using htmlparser version: 2.0 (Release Build Sep 17, 2006)
> 2012/08/25 19:27:27 INFO  - jmeter.protocol.http.proxy.Proxy: Opened
> Keystore file:
> E:\JMeter\apache-jmeter-2.7\apache-jmeter-2.7\bin\proxyserver.jks
> 2012/08/25 19:27:27 INFO  - jmeter.protocol.http.proxy.Proxy: KeyStore for
> SSL loaded OK and put host in map (id.google.pl)
> *2012/08/25 19:27:27 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with
> SSL certificate? Ensure browser is set to accept the JMeter proxy cert:
> Software caused connection abort: recv failed

Your browser (or a addon) must try to reach another website (with 
hidden/background request) and Firefox don't accept the fake JMeter 
certificate for this https website.
You must identify this background request. Use Live HTTP headers addon 
for Firefox to look for all requests attempt.

> 2012/08/25 19:27:29 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with
> SSL certificate? Ensure browser is set to accept the JMeter proxy cert:
> Connection reset
> 2012/08/25 19:27:43 INFO  - jmeter.protocol.http.proxy.Daemon: Proxy Server
> stopped *
>
>
>
> --
> View this message in context: http://jmeter.512774.n5.nabble.com/HTTP-Proxy-Server-SSL-Certificate-tp5714504p5714512.html
> Sent from the JMeter - User mailing list archive at Nabble.com.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@jmeter.apache.org
> For additional commands, e-mail: user-help@jmeter.apache.org
>
>


---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@jmeter.apache.org
For additional commands, e-mail: user-help@jmeter.apache.org


Re: HTTP Proxy Server - SSL Certificate

Posted by adam007 <ad...@gmail.com>.
I did everything according to your tutorial with google example. Requests are
recorded and everything looks like on the screens from tutorial, but when i
record following steps I have still error in JM:
1. Record request:  https://google.com  -> no errors
2. Enter text to search field on google and hit enter: -> requests are
recorded, but I see error in JM:


2012/08/25 19:26:33 INFO  - jmeter.protocol.http.proxy.Daemon: Creating
Daemon Socket on port: 8080 
2012/08/25 19:26:33 INFO  - jmeter.protocol.http.proxy.Daemon: Proxy up and
running! 
2012/08/25 19:26:48 INFO  - jmeter.protocol.http.proxy.Proxy: Proxy will
remove the headers: If-Modified-Since,If-None-Match,Host 
2012/08/25 19:26:48 INFO  - jmeter.protocol.http.proxy.Proxy: Opened
Keystore file:
E:\JMeter\apache-jmeter-2.7\apache-jmeter-2.7\bin\proxyserver.jks 
2012/08/25 19:26:48 INFO  - jmeter.protocol.http.proxy.Proxy: KeyStore for
SSL loaded OK and put host in map (www.google.pl) 
2012/08/25 19:26:49 INFO  - jmeter.protocol.http.sampler.HTTPHCAbstractImpl:
Local host = adas 
2012/08/25 19:26:49 INFO  - jmeter.protocol.http.sampler.HTTPHC3Impl: HTTP
request retry count = 1 
2012/08/25 19:26:49 INFO  - jmeter.util.JsseSSLManager: Using default SSL
protocol: TLS 
2012/08/25 19:26:49 INFO  - jmeter.util.JsseSSLManager: SSL session context:
per-thread 
2012/08/25 19:26:49 INFO  - jmeter.util.SSLManager: JmeterKeyStore Location: 
type JKS 
2012/08/25 19:26:49 INFO  - jmeter.util.SSLManager: KeyStore created OK 
2012/08/25 19:26:49 WARN  - jmeter.util.SSLManager: Keystore file not found,
loading empty keystore 
2012/08/25 19:26:49 INFO  - jmeter.protocol.http.proxy.FormCharSetFinder:
Using htmlparser version: 2.0 (Release Build Sep 17, 2006) 
2012/08/25 19:27:27 INFO  - jmeter.protocol.http.proxy.Proxy: Opened
Keystore file:
E:\JMeter\apache-jmeter-2.7\apache-jmeter-2.7\bin\proxyserver.jks 
2012/08/25 19:27:27 INFO  - jmeter.protocol.http.proxy.Proxy: KeyStore for
SSL loaded OK and put host in map (id.google.pl) 
*2012/08/25 19:27:27 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with
SSL certificate? Ensure browser is set to accept the JMeter proxy cert:
Software caused connection abort: recv failed 
2012/08/25 19:27:29 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with
SSL certificate? Ensure browser is set to accept the JMeter proxy cert:
Connection reset 
2012/08/25 19:27:43 INFO  - jmeter.protocol.http.proxy.Daemon: Proxy Server
stopped *



--
View this message in context: http://jmeter.512774.n5.nabble.com/HTTP-Proxy-Server-SSL-Certificate-tp5714504p5714512.html
Sent from the JMeter - User mailing list archive at Nabble.com.

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@jmeter.apache.org
For additional commands, e-mail: user-help@jmeter.apache.org


Re: HTTP Proxy Server - SSL Certificate

Posted by Milamber <mi...@apache.org>.

Le 25/08/2012 17:06, adam007 a ecrit :
> 1. When I go to page info: "right click>  View page info, Security tab", I
> can't see "view certificate" option:
> http://jmeter.512774.n5.nabble.com/file/n5714508/PageInfo.png

In this screenshot, the website http://www.kumiko.pl doesn't use the SSL 
layer (https).
You must have http*s*://www.kumiko.pl

See this page to check you configuration / method:
http://www.milamberspace.net/jmeter/jmeter-proxy-https/



> 2. Certificate details in FireFox:
> http://jmeter.512774.n5.nabble.com/file/n5714508/Certificate.png
>
> 3. I tried to  inport certificate from FireFox to Chrome and when  recording
> script under Chrome I have following errors in JM:
>
> 2012/08/25 17:52:39 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with
> SSL certificate? Ensure browser is set to accept the JMeter proxy cert:
> Connection closed by remote host
> 2012/08/25 17:52:39 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with
> SSL certificate? Ensure browser is set to accept the JMeter proxy cert:
> Remote host closed connection during handshake
> 2012/08/25 17:52:39 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with
> SSL certificate? Ensure browser is set to accept the JMeter proxy cert:
> Remote host closed connection during handshake
> 2012/08/25 17:52:39 ERROR - jmeter.protocol.http.proxy.Proxy:
> java.net.SocketException: Connection closed by remote host
> 	at sun.security.ssl.SSLSocketImpl.checkWrite(Unknown Source)
> 	at sun.security.ssl.AppOutputStream.write(Unknown Source)
> 	at java.io.BufferedOutputStream.flushBuffer(Unknown Source)
> 	at java.io.BufferedOutputStream.flush(Unknown Source)
> 	at
> org.apache.jmeter.protocol.http.proxy.Proxy.writeToClient(Proxy.java:446)
> 	at org.apache.jmeter.protocol.http.proxy.Proxy.run(Proxy.java:260)
>
>
>
>
>
>
>
> --
> View this message in context: http://jmeter.512774.n5.nabble.com/HTTP-Proxy-Server-SSL-Certificate-tp5714504p5714508.html
> Sent from the JMeter - User mailing list archive at Nabble.com.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@jmeter.apache.org
> For additional commands, e-mail: user-help@jmeter.apache.org
>
>


---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@jmeter.apache.org
For additional commands, e-mail: user-help@jmeter.apache.org


Re: HTTP Proxy Server - SSL Certificate

Posted by adam007 <ad...@gmail.com>.
1. When I go to page info: "right click > View page info, Security tab", I
can't see "view certificate" option:
http://jmeter.512774.n5.nabble.com/file/n5714508/PageInfo.png 
2. Certificate details in FireFox:
http://jmeter.512774.n5.nabble.com/file/n5714508/Certificate.png 

3. I tried to  inport certificate from FireFox to Chrome and when  recording
script under Chrome I have following errors in JM:

2012/08/25 17:52:39 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with
SSL certificate? Ensure browser is set to accept the JMeter proxy cert:
Connection closed by remote host 
2012/08/25 17:52:39 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with
SSL certificate? Ensure browser is set to accept the JMeter proxy cert:
Remote host closed connection during handshake 
2012/08/25 17:52:39 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with
SSL certificate? Ensure browser is set to accept the JMeter proxy cert:
Remote host closed connection during handshake 
2012/08/25 17:52:39 ERROR - jmeter.protocol.http.proxy.Proxy: 
java.net.SocketException: Connection closed by remote host
	at sun.security.ssl.SSLSocketImpl.checkWrite(Unknown Source)
	at sun.security.ssl.AppOutputStream.write(Unknown Source)
	at java.io.BufferedOutputStream.flushBuffer(Unknown Source)
	at java.io.BufferedOutputStream.flush(Unknown Source)
	at
org.apache.jmeter.protocol.http.proxy.Proxy.writeToClient(Proxy.java:446)
	at org.apache.jmeter.protocol.http.proxy.Proxy.run(Proxy.java:260)







--
View this message in context: http://jmeter.512774.n5.nabble.com/HTTP-Proxy-Server-SSL-Certificate-tp5714504p5714508.html
Sent from the JMeter - User mailing list archive at Nabble.com.

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@jmeter.apache.org
For additional commands, e-mail: user-help@jmeter.apache.org


Re: HTTP Proxy Server - SSL Certificate

Posted by Milamber <mi...@apache.org>.

Le 25/08/2012 14:51, Adam Z a ecrit :
> I have checked this. Certificate exists under "Authorities" tab.
>
> On Sat, Aug 25, 2012 at 3:42 PM, Milamber<mi...@apache.org>  wrote:
>
>>
>> Le 25/08/2012 14:35, adam007 a ecrit :
>>
>>   Hello,
>>> I have "Apache Software foundation ->   JMeter Proxy" certificate added to
>>> sert. list in FireFox Browser, but when i try to record request using HTTP
>>>
>> Please double check, the JMeter Proxy certificate must be in the
>> Authorities tab in Certificate Manager in Firefox. (not in 'Your
>> Certificates')
>>
>>
>>
>>
>>   Proxy server I have following errors:
>>> ERROR - jmeter.protocol.http.proxy.**Proxy: Problem with SSL certificate?
>>> Ensure browser is set to accept the JMeter proxy cert: Received fatal
>>> alert:
>>> unknown_ca
>>>
>>> ERROR - jmeter.protocol.http.proxy.**Proxy: Problem with SSL certificate?
>>> Ensure browser is set to accept the JMeter proxy cert: Connection reset
>>> jmeter.protocol.http.proxy.**Proxy: Problem with SSL certificate? Ensure
>>> browser is set to accept the JMeter proxy cert: Received fatal alert:
>>> unknown_ca

This error message means that the public key of HTTP session in your 
record navigation isn't trusted, because "unknown_ca". If you have 
already the JMeter'cert in Autorities tab, you mustn't have this error.
Can you view the ssl certificate in your firefox (when you recording a 
http session, right click > View page info, Security tab > View 
certificat) and check the cert's information in "Issued to" section: CN 
= JMeter Proxy, O = Apache Software Foundation, Serial Number: 4A:7A:0A:D5.

In Internet Explorer or Chrome, have you the same issue?



>>>
>>> What should I do to record requests?
>>>
>>>
>>>
>>> --
>>> View this message in context: http://jmeter.512774.n5.**
>>> nabble.com/HTTP-Proxy-Server-**SSL-Certificate-tp5714504.html<http://jmeter.512774.n5.nabble.com/HTTP-Proxy-Server-SSL-Certificate-tp5714504.html>
>>> Sent from the JMeter - User mailing list archive at Nabble.com.
>>>
>>> ------------------------------**------------------------------**---------
>>> To unsubscribe, e-mail: user-unsubscribe@jmeter.**apache.org<us...@jmeter.apache.org>
>>> For additional commands, e-mail: user-help@jmeter.apache.org
>>>
>>>
>>>
>> ------------------------------**------------------------------**---------
>> To unsubscribe, e-mail: user-unsubscribe@jmeter.**apache.org<us...@jmeter.apache.org>
>> For additional commands, e-mail: user-help@jmeter.apache.org
>>
>>


---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@jmeter.apache.org
For additional commands, e-mail: user-help@jmeter.apache.org


Re: HTTP Proxy Server - SSL Certificate

Posted by Adam Z <ad...@gmail.com>.
I have checked this. Certificate exists under "Authorities" tab.

On Sat, Aug 25, 2012 at 3:42 PM, Milamber <mi...@apache.org> wrote:

>
>
> Le 25/08/2012 14:35, adam007 a ecrit :
>
>  Hello,
>>
>> I have "Apache Software foundation ->  JMeter Proxy" certificate added to
>> sert. list in FireFox Browser, but when i try to record request using HTTP
>>
>
> Please double check, the JMeter Proxy certificate must be in the
> Authorities tab in Certificate Manager in Firefox. (not in 'Your
> Certificates')
>
>
>
>
>  Proxy server I have following errors:
>>
>> ERROR - jmeter.protocol.http.proxy.**Proxy: Problem with SSL certificate?
>> Ensure browser is set to accept the JMeter proxy cert: Received fatal
>> alert:
>> unknown_ca
>>
>> ERROR - jmeter.protocol.http.proxy.**Proxy: Problem with SSL certificate?
>> Ensure browser is set to accept the JMeter proxy cert: Connection reset
>> jmeter.protocol.http.proxy.**Proxy: Problem with SSL certificate? Ensure
>> browser is set to accept the JMeter proxy cert: Received fatal alert:
>> unknown_ca
>>
>> What should I do to record requests?
>>
>>
>>
>> --
>> View this message in context: http://jmeter.512774.n5.**
>> nabble.com/HTTP-Proxy-Server-**SSL-Certificate-tp5714504.html<http://jmeter.512774.n5.nabble.com/HTTP-Proxy-Server-SSL-Certificate-tp5714504.html>
>> Sent from the JMeter - User mailing list archive at Nabble.com.
>>
>> ------------------------------**------------------------------**---------
>> To unsubscribe, e-mail: user-unsubscribe@jmeter.**apache.org<us...@jmeter.apache.org>
>> For additional commands, e-mail: user-help@jmeter.apache.org
>>
>>
>>
>
> ------------------------------**------------------------------**---------
> To unsubscribe, e-mail: user-unsubscribe@jmeter.**apache.org<us...@jmeter.apache.org>
> For additional commands, e-mail: user-help@jmeter.apache.org
>
>

Re: HTTP Proxy Server - SSL Certificate

Posted by Milamber <mi...@apache.org>.

Le 25/08/2012 14:35, adam007 a ecrit :
> Hello,
>
> I have "Apache Software foundation ->  JMeter Proxy" certificate added to
> sert. list in FireFox Browser, but when i try to record request using HTTP

Please double check, the JMeter Proxy certificate must be in the 
Authorities tab in Certificate Manager in Firefox. (not in 'Your 
Certificates')



> Proxy server I have following errors:
>
> ERROR - jmeter.protocol.http.proxy.Proxy: Problem with SSL certificate?
> Ensure browser is set to accept the JMeter proxy cert: Received fatal alert:
> unknown_ca
>
> ERROR - jmeter.protocol.http.proxy.Proxy: Problem with SSL certificate?
> Ensure browser is set to accept the JMeter proxy cert: Connection reset
> jmeter.protocol.http.proxy.Proxy: Problem with SSL certificate? Ensure
> browser is set to accept the JMeter proxy cert: Received fatal alert:
> unknown_ca
>
> What should I do to record requests?
>
>
>
> --
> View this message in context: http://jmeter.512774.n5.nabble.com/HTTP-Proxy-Server-SSL-Certificate-tp5714504.html
> Sent from the JMeter - User mailing list archive at Nabble.com.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@jmeter.apache.org
> For additional commands, e-mail: user-help@jmeter.apache.org
>
>


---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@jmeter.apache.org
For additional commands, e-mail: user-help@jmeter.apache.org