HTTP Proxy Server - SSL Certificate

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
12 messages Options
Reply | Threaded
Open this post in threaded view
|

HTTP Proxy Server - SSL Certificate

adam007
Hello,

I have "Apache Software foundation -> JMeter Proxy" certificate added to sert. list in FireFox Browser, but when i try to record request using HTTP Proxy server I have following errors:

ERROR - jmeter.protocol.http.proxy.Proxy: Problem with SSL certificate? Ensure browser is set to accept the JMeter proxy cert: Received fatal alert: unknown_ca

ERROR - jmeter.protocol.http.proxy.Proxy: Problem with SSL certificate? Ensure browser is set to accept the JMeter proxy cert: Connection reset
jmeter.protocol.http.proxy.Proxy: Problem with SSL certificate? Ensure browser is set to accept the JMeter proxy cert: Received fatal alert: unknown_ca

What should I do to record requests?
Reply | Threaded
Open this post in threaded view
|

Re: HTTP Proxy Server - SSL Certificate

Milamber


Le 25/08/2012 14:35, adam007 a ecrit :
> Hello,
>
> I have "Apache Software foundation ->  JMeter Proxy" certificate added to
> sert. list in FireFox Browser, but when i try to record request using HTTP

Please double check, the JMeter Proxy certificate must be in the
Authorities tab in Certificate Manager in Firefox. (not in 'Your
Certificates')



> Proxy server I have following errors:
>
> ERROR - jmeter.protocol.http.proxy.Proxy: Problem with SSL certificate?
> Ensure browser is set to accept the JMeter proxy cert: Received fatal alert:
> unknown_ca
>
> ERROR - jmeter.protocol.http.proxy.Proxy: Problem with SSL certificate?
> Ensure browser is set to accept the JMeter proxy cert: Connection reset
> jmeter.protocol.http.proxy.Proxy: Problem with SSL certificate? Ensure
> browser is set to accept the JMeter proxy cert: Received fatal alert:
> unknown_ca
>
> What should I do to record requests?
>
>
>
> --
> View this message in context: http://jmeter.512774.n5.nabble.com/HTTP-Proxy-Server-SSL-Certificate-tp5714504.html
> Sent from the JMeter - User mailing list archive at Nabble.com.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [hidden email]
> For additional commands, e-mail: [hidden email]
>
>


---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Re: HTTP Proxy Server - SSL Certificate

adam007
I have checked this. Certificate exists under "Authorities" tab.

On Sat, Aug 25, 2012 at 3:42 PM, Milamber <[hidden email]> wrote:

>
>
> Le 25/08/2012 14:35, adam007 a ecrit :
>
>  Hello,
>>
>> I have "Apache Software foundation ->  JMeter Proxy" certificate added to
>> sert. list in FireFox Browser, but when i try to record request using HTTP
>>
>
> Please double check, the JMeter Proxy certificate must be in the
> Authorities tab in Certificate Manager in Firefox. (not in 'Your
> Certificates')
>
>
>
>
>  Proxy server I have following errors:
>>
>> ERROR - jmeter.protocol.http.proxy.**Proxy: Problem with SSL certificate?
>> Ensure browser is set to accept the JMeter proxy cert: Received fatal
>> alert:
>> unknown_ca
>>
>> ERROR - jmeter.protocol.http.proxy.**Proxy: Problem with SSL certificate?
>> Ensure browser is set to accept the JMeter proxy cert: Connection reset
>> jmeter.protocol.http.proxy.**Proxy: Problem with SSL certificate? Ensure
>> browser is set to accept the JMeter proxy cert: Received fatal alert:
>> unknown_ca
>>
>> What should I do to record requests?
>>
>>
>>
>> --
>> View this message in context: http://jmeter.512774.n5.**
>> nabble.com/HTTP-Proxy-Server-**SSL-Certificate-tp5714504.html<http://jmeter.512774.n5.nabble.com/HTTP-Proxy-Server-SSL-Certificate-tp5714504.html>
>> Sent from the JMeter - User mailing list archive at Nabble.com.
>>
>> ------------------------------**------------------------------**---------
>> To unsubscribe, e-mail: user-unsubscribe@jmeter.**apache.org<[hidden email]>
>> For additional commands, e-mail: [hidden email]
>>
>>
>>
>
> ------------------------------**------------------------------**---------
> To unsubscribe, e-mail: user-unsubscribe@jmeter.**apache.org<[hidden email]>
> For additional commands, e-mail: [hidden email]
>
>
Reply | Threaded
Open this post in threaded view
|

Re: HTTP Proxy Server - SSL Certificate

Milamber


Le 25/08/2012 14:51, Adam Z a ecrit :

> I have checked this. Certificate exists under "Authorities" tab.
>
> On Sat, Aug 25, 2012 at 3:42 PM, Milamber<[hidden email]>  wrote:
>
>>
>> Le 25/08/2012 14:35, adam007 a ecrit :
>>
>>   Hello,
>>> I have "Apache Software foundation ->   JMeter Proxy" certificate added to
>>> sert. list in FireFox Browser, but when i try to record request using HTTP
>>>
>> Please double check, the JMeter Proxy certificate must be in the
>> Authorities tab in Certificate Manager in Firefox. (not in 'Your
>> Certificates')
>>
>>
>>
>>
>>   Proxy server I have following errors:
>>> ERROR - jmeter.protocol.http.proxy.**Proxy: Problem with SSL certificate?
>>> Ensure browser is set to accept the JMeter proxy cert: Received fatal
>>> alert:
>>> unknown_ca
>>>
>>> ERROR - jmeter.protocol.http.proxy.**Proxy: Problem with SSL certificate?
>>> Ensure browser is set to accept the JMeter proxy cert: Connection reset
>>> jmeter.protocol.http.proxy.**Proxy: Problem with SSL certificate? Ensure
>>> browser is set to accept the JMeter proxy cert: Received fatal alert:
>>> unknown_ca

This error message means that the public key of HTTP session in your
record navigation isn't trusted, because "unknown_ca". If you have
already the JMeter'cert in Autorities tab, you mustn't have this error.
Can you view the ssl certificate in your firefox (when you recording a
http session, right click > View page info, Security tab > View
certificat) and check the cert's information in "Issued to" section: CN
= JMeter Proxy, O = Apache Software Foundation, Serial Number: 4A:7A:0A:D5.

In Internet Explorer or Chrome, have you the same issue?



>>>
>>> What should I do to record requests?
>>>
>>>
>>>
>>> --
>>> View this message in context: http://jmeter.512774.n5.**
>>> nabble.com/HTTP-Proxy-Server-**SSL-Certificate-tp5714504.html<http://jmeter.512774.n5.nabble.com/HTTP-Proxy-Server-SSL-Certificate-tp5714504.html>
>>> Sent from the JMeter - User mailing list archive at Nabble.com.
>>>
>>> ------------------------------**------------------------------**---------
>>> To unsubscribe, e-mail: user-unsubscribe@jmeter.**apache.org<[hidden email]>
>>> For additional commands, e-mail: [hidden email]
>>>
>>>
>>>
>> ------------------------------**------------------------------**---------
>> To unsubscribe, e-mail: user-unsubscribe@jmeter.**apache.org<[hidden email]>
>> For additional commands, e-mail: [hidden email]
>>
>>


---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Re: HTTP Proxy Server - SSL Certificate

adam007
1. When I go to page info: "right click > View page info, Security tab", I can't see "view certificate" option:

2. Certificate details in FireFox:


3. I tried to  inport certificate from FireFox to Chrome and when  recording script under Chrome I have following errors in JM:

2012/08/25 17:52:39 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with SSL certificate? Ensure browser is set to accept the JMeter proxy cert: Connection closed by remote host
2012/08/25 17:52:39 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with SSL certificate? Ensure browser is set to accept the JMeter proxy cert: Remote host closed connection during handshake
2012/08/25 17:52:39 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with SSL certificate? Ensure browser is set to accept the JMeter proxy cert: Remote host closed connection during handshake
2012/08/25 17:52:39 ERROR - jmeter.protocol.http.proxy.Proxy:  java.net.SocketException: Connection closed by remote host
        at sun.security.ssl.SSLSocketImpl.checkWrite(Unknown Source)
        at sun.security.ssl.AppOutputStream.write(Unknown Source)
        at java.io.BufferedOutputStream.flushBuffer(Unknown Source)
        at java.io.BufferedOutputStream.flush(Unknown Source)
        at org.apache.jmeter.protocol.http.proxy.Proxy.writeToClient(Proxy.java:446)
        at org.apache.jmeter.protocol.http.proxy.Proxy.run(Proxy.java:260)



Reply | Threaded
Open this post in threaded view
|

Re: HTTP Proxy Server - SSL Certificate

adam007
When I entered https URL instead of http in my browser I got  information about certificate:
- Common Name: JMeter Proxy
- Organization: Apache Software Foundation
- Organization Unit: JMeter
- Serial Number: 4A:7A:0A:D5

Reply | Threaded
Open this post in threaded view
|

Re: HTTP Proxy Server - SSL Certificate

adam007
When I try record https request on FireFox now (after entering https URL to browser) I got following Error in JM:

2012/08/25 18:46:40 INFO  - jmeter.protocol.http.proxy.Daemon: Creating Daemon Socket on port: 8080
2012/08/25 18:46:40 INFO  - jmeter.protocol.http.proxy.Daemon: Proxy up and running!
2012/08/25 18:46:44 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with SSL certificate? Ensure browser is set to accept the JMeter proxy cert: Connection reset
2012/08/25 18:46:44 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with SSL certificate? Ensure browser is set to accept the JMeter proxy cert: Received fatal alert: bad_certificate
2012/08/25 18:46:44 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with SSL certificate? Ensure browser is set to accept the JMeter proxy cert: Received fatal alert: bad_certificate
2012/08/25 18:46:44 INFO  - jmeter.protocol.http.proxy.Proxy: Opened Keystore file: E:\JMeter\apache-jmeter-2.7\apache-jmeter-2.7\bin\proxyserver.jks
2012/08/25 18:46:44 INFO  - jmeter.protocol.http.proxy.Proxy: KeyStore for SSL loaded OK and put host in map (api.pinterest.com)
2012/08/25 18:46:44 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with SSL certificate? Ensure browser is set to accept the JMeter proxy cert: Connection reset
2012/08/25 18:46:45 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with SSL certificate? Ensure browser is set to accept the JMeter proxy cert: Received fatal alert: bad_certificate
2012/08/25 18:46:45 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with SSL certificate? Ensure browser is set to accept the JMeter proxy cert: Software caused connection abort: recv failed
Reply | Threaded
Open this post in threaded view
|

Re: HTTP Proxy Server - SSL Certificate

Milamber
In reply to this post by adam007


Le 25/08/2012 17:06, adam007 a ecrit :
> 1. When I go to page info: "right click>  View page info, Security tab", I
> can't see "view certificate" option:
> http://jmeter.512774.n5.nabble.com/file/n5714508/PageInfo.png

In this screenshot, the website http://www.kumiko.pl doesn't use the SSL
layer (https).
You must have http*s*://www.kumiko.pl

See this page to check you configuration / method:
http://www.milamberspace.net/jmeter/jmeter-proxy-https/



> 2. Certificate details in FireFox:
> http://jmeter.512774.n5.nabble.com/file/n5714508/Certificate.png
>
> 3. I tried to  inport certificate from FireFox to Chrome and when  recording
> script under Chrome I have following errors in JM:
>
> 2012/08/25 17:52:39 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with
> SSL certificate? Ensure browser is set to accept the JMeter proxy cert:
> Connection closed by remote host
> 2012/08/25 17:52:39 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with
> SSL certificate? Ensure browser is set to accept the JMeter proxy cert:
> Remote host closed connection during handshake
> 2012/08/25 17:52:39 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with
> SSL certificate? Ensure browser is set to accept the JMeter proxy cert:
> Remote host closed connection during handshake
> 2012/08/25 17:52:39 ERROR - jmeter.protocol.http.proxy.Proxy:
> java.net.SocketException: Connection closed by remote host
> at sun.security.ssl.SSLSocketImpl.checkWrite(Unknown Source)
> at sun.security.ssl.AppOutputStream.write(Unknown Source)
> at java.io.BufferedOutputStream.flushBuffer(Unknown Source)
> at java.io.BufferedOutputStream.flush(Unknown Source)
> at
> org.apache.jmeter.protocol.http.proxy.Proxy.writeToClient(Proxy.java:446)
> at org.apache.jmeter.protocol.http.proxy.Proxy.run(Proxy.java:260)
>
>
>
>
>
>
>
> --
> View this message in context: http://jmeter.512774.n5.nabble.com/HTTP-Proxy-Server-SSL-Certificate-tp5714504p5714508.html
> Sent from the JMeter - User mailing list archive at Nabble.com.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [hidden email]
> For additional commands, e-mail: [hidden email]
>
>


---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Re: HTTP Proxy Server - SSL Certificate

adam007
I did everything according to your tutorial with google example. Requests are recorded and everything looks like on the screens from tutorial, but when i record following steps I have still error in JM:
1. Record request:  https://google.com  -> no errors
2. Enter text to search field on google and hit enter: -> requests are recorded, but I see error in JM:


2012/08/25 19:26:33 INFO  - jmeter.protocol.http.proxy.Daemon: Creating Daemon Socket on port: 8080
2012/08/25 19:26:33 INFO  - jmeter.protocol.http.proxy.Daemon: Proxy up and running!
2012/08/25 19:26:48 INFO  - jmeter.protocol.http.proxy.Proxy: Proxy will remove the headers: If-Modified-Since,If-None-Match,Host
2012/08/25 19:26:48 INFO  - jmeter.protocol.http.proxy.Proxy: Opened Keystore file: E:\JMeter\apache-jmeter-2.7\apache-jmeter-2.7\bin\proxyserver.jks
2012/08/25 19:26:48 INFO  - jmeter.protocol.http.proxy.Proxy: KeyStore for SSL loaded OK and put host in map (www.google.pl)
2012/08/25 19:26:49 INFO  - jmeter.protocol.http.sampler.HTTPHCAbstractImpl: Local host = adas
2012/08/25 19:26:49 INFO  - jmeter.protocol.http.sampler.HTTPHC3Impl: HTTP request retry count = 1
2012/08/25 19:26:49 INFO  - jmeter.util.JsseSSLManager: Using default SSL protocol: TLS
2012/08/25 19:26:49 INFO  - jmeter.util.JsseSSLManager: SSL session context: per-thread
2012/08/25 19:26:49 INFO  - jmeter.util.SSLManager: JmeterKeyStore Location:  type JKS
2012/08/25 19:26:49 INFO  - jmeter.util.SSLManager: KeyStore created OK
2012/08/25 19:26:49 WARN  - jmeter.util.SSLManager: Keystore file not found, loading empty keystore
2012/08/25 19:26:49 INFO  - jmeter.protocol.http.proxy.FormCharSetFinder: Using htmlparser version: 2.0 (Release Build Sep 17, 2006)
2012/08/25 19:27:27 INFO  - jmeter.protocol.http.proxy.Proxy: Opened Keystore file: E:\JMeter\apache-jmeter-2.7\apache-jmeter-2.7\bin\proxyserver.jks
2012/08/25 19:27:27 INFO  - jmeter.protocol.http.proxy.Proxy: KeyStore for SSL loaded OK and put host in map (id.google.pl)
2012/08/25 19:27:27 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with SSL certificate? Ensure browser is set to accept the JMeter proxy cert: Software caused connection abort: recv failed
2012/08/25 19:27:29 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with SSL certificate? Ensure browser is set to accept the JMeter proxy cert: Connection reset
2012/08/25 19:27:43 INFO  - jmeter.protocol.http.proxy.Daemon: Proxy Server stopped
Reply | Threaded
Open this post in threaded view
|

Re: HTTP Proxy Server - SSL Certificate

Milamber


Le 25/08/2012 18:33, adam007 a ecrit :
> I did everything according to your tutorial with google example. Requests are
> recorded and everything looks like on the screens from tutorial, but when i
> record following steps I have still error in JM:
> 1. Record request:  https://google.com  ->  no errors
> 2. Enter text to search field on google and hit enter: ->  requests are
> recorded,

Ok good news.

>   but I see error in JM:
>
>
> 2012/08/25 19:26:33 INFO  - jmeter.protocol.http.proxy.Daemon: Creating
> Daemon Socket on port: 8080
> 2012/08/25 19:26:33 INFO  - jmeter.protocol.http.proxy.Daemon: Proxy up and
> running!
> 2012/08/25 19:26:48 INFO  - jmeter.protocol.http.proxy.Proxy: Proxy will
> remove the headers: If-Modified-Since,If-None-Match,Host
> 2012/08/25 19:26:48 INFO  - jmeter.protocol.http.proxy.Proxy: Opened
> Keystore file:
> E:\JMeter\apache-jmeter-2.7\apache-jmeter-2.7\bin\proxyserver.jks
> 2012/08/25 19:26:48 INFO  - jmeter.protocol.http.proxy.Proxy: KeyStore for
> SSL loaded OK and put host in map (www.google.pl)
> 2012/08/25 19:26:49 INFO  - jmeter.protocol.http.sampler.HTTPHCAbstractImpl:
> Local host = adas
> 2012/08/25 19:26:49 INFO  - jmeter.protocol.http.sampler.HTTPHC3Impl: HTTP
> request retry count = 1
> 2012/08/25 19:26:49 INFO  - jmeter.util.JsseSSLManager: Using default SSL
> protocol: TLS
> 2012/08/25 19:26:49 INFO  - jmeter.util.JsseSSLManager: SSL session context:
> per-thread
> 2012/08/25 19:26:49 INFO  - jmeter.util.SSLManager: JmeterKeyStore Location:
> type JKS
> 2012/08/25 19:26:49 INFO  - jmeter.util.SSLManager: KeyStore created OK
> 2012/08/25 19:26:49 WARN  - jmeter.util.SSLManager: Keystore file not found,
> loading empty keystore
> 2012/08/25 19:26:49 INFO  - jmeter.protocol.http.proxy.FormCharSetFinder:
> Using htmlparser version: 2.0 (Release Build Sep 17, 2006)
> 2012/08/25 19:27:27 INFO  - jmeter.protocol.http.proxy.Proxy: Opened
> Keystore file:
> E:\JMeter\apache-jmeter-2.7\apache-jmeter-2.7\bin\proxyserver.jks
> 2012/08/25 19:27:27 INFO  - jmeter.protocol.http.proxy.Proxy: KeyStore for
> SSL loaded OK and put host in map (id.google.pl)
> *2012/08/25 19:27:27 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with
> SSL certificate? Ensure browser is set to accept the JMeter proxy cert:
> Software caused connection abort: recv failed

Your browser (or a addon) must try to reach another website (with
hidden/background request) and Firefox don't accept the fake JMeter
certificate for this https website.
You must identify this background request. Use Live HTTP headers addon
for Firefox to look for all requests attempt.

> 2012/08/25 19:27:29 ERROR - jmeter.protocol.http.proxy.Proxy: Problem with
> SSL certificate? Ensure browser is set to accept the JMeter proxy cert:
> Connection reset
> 2012/08/25 19:27:43 INFO  - jmeter.protocol.http.proxy.Daemon: Proxy Server
> stopped *
>
>
>
> --
> View this message in context: http://jmeter.512774.n5.nabble.com/HTTP-Proxy-Server-SSL-Certificate-tp5714504p5714512.html
> Sent from the JMeter - User mailing list archive at Nabble.com.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [hidden email]
> For additional commands, e-mail: [hidden email]
>
>


---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Re: HTTP Proxy Server - SSL Certificate

adam007
Thank you very much for your help :)
Reply | Threaded
Open this post in threaded view
|

Re: HTTP Proxy Server - SSL Certificate

Adil
This post has NOT been accepted by the mailing list yet.
In reply to this post by adam007
Hi,

I am using IE8 and getting the same error. Please let me know how to check the certificate in IE.

Thanks