jmeter website’s security certificate

0
votes

I'm new to jmeter, I'm facing an issue while trying to record on IE, after i enter URL and hit enter i get website’s security certificate error, when i try it without recording on JMETER it works fine. Can anyone please tell me how to over come this issue?enter image description here

Steps followed:

I have launched jmeter using proxy or else i won't record anything, Launched using: C:\apache-jmeter-2.13\apache-jmeter-2.13\bin>jmeter -H {myproxyadd} -P 8080 -u etc

LAN Settings:

Only use a proxy server for your LAN is checked and everything else is unchecked on LAN Settings.

Address: localhost port:8080

jmeter website’s security certificate.

1
jmeter

1 Answers

0
votes

This is expected. JMeter is using self-signed certificate in order to be able to record HTTPS traffic and Internet Explorer warns you that certificate is not "trusted". So you can ignore this warning, click Continue to this website (not recommended) and move on.

As per "Installing the JMeter CA certificate for HTTPS recording" chapter of HTTP(S) Test Script Recorder documentation.

As mentioned above, when run under Java 7, JMeter can generate certificates for each server. For this to work smoothly, the root CA signing certificate used by JMeter needs to be trusted by the browser. The first time that the recorder is started, it will generate the certificates if necessary. The root CA certificate is exported into a file with the name ApacheJMeterTemporaryRootCA in the current launch directory. When the certificates have been set up, JMeter will show a dialog with the current certificate details. At this point, the certificate can be imported into the browser, as per the instructions below.

Note that once the root CA certificate has been installed as a trusted CA, the browser will trust any certificates signed by it. Until such time as the certificate expires or the certificate is removed from the browser, it will not warn the user that the certificate is being relied upon. So anyone that can get hold of the keystore and password can use the certificate to generate certificates which will be accepted by any browsers that trust the JMeter root CA certificate. For this reason, the password for the keystore and private keys are randomly generated and a short validity period used. The passwords are stored in the local preferences area. Please ensure that only trusted users have access to the host with the keystore.

Documentation also suggests installing certificate into browser to make this warning go away:

  • Browse to the JMeter launch directory, and click on the file ApacheJMeterTemporaryRootCA.crt, and open it

  • Click on the "Details" tab and check that the certificate details agree with the ones displayed by the JMeter Test Script Recorder

  • If OK, go back to the "General" tab, and click on "Install Certificate ..." and follow the Wizard prompts

By the way, you can use an alternative to JMeter's HTTP(S) Test Script recorder service. It makes recording process easier and also can export recorded requests in so called "SmartJMX" form - automatic correlation of dynamic parameters. See How to Cut Your JMeter Scripting Time by 80% article for more details.