Testing help still needed!

On 6 September 2013 23:09, sebb <[email protected]> wrote:
> The Proxy server can now record embedded resources when used on Java 7.
>
> It creates a CA and keystore as needed.
>
> More work is needed:
> - creating certs is fairly slow, so it would help if these were set up
> before the test started.

This is now done in ProxyControl when the start button is pressed.

> - the CA cert is not created until the first SSL request is received,
> so the first browser request will fail. The certificate can then be
> loaded and the recording restarted. This needs to be fixed

This has been fixed as above; pressing Start creates the CA if necessary.

The CA cert can now be installed before starting the recording.

> - documentation

That still needs to be done, but it would help to know whether the
code works for others, not just on my system.

> Initialising the keystore
> ---------------------------------
> Ideally the CA cert needs to be created before the test starts, so it
> can be loaded into the browser. However not all recordings use SSL, so
> it seems wasteful to create the keystore if it won't then be used.
>
> Also, creating additional host entries is quite slow, so it would be
> useful to be able to specify these in advance.
>
> One possible approach would be to add a new field to the GUI (Global
> Settings has room) where the user could list the hosts/domains they
> intend to test. [This would also signal that SSL proxying is required]
> When the Proxy is started, it could then create the keys if necessary.
> This would also create the certificate ready for the browser to load.

That has been implemented.

Note that Start can now take a minute or two the first time it is used.

> Domains would be indicated by a leading "*." - e.g. *.apache.org.
> It would be easy to match a host against a domain.
> This would get round the issue that converting from host to domain is
> tricky to do programmatically (there are lots of special cases).
> Whereas the user presumably has a pretty good idea what domains they
> are testing.

That has been implemented.

> I hope to make a start on improving the code in a day or two; in the
> meantime if there are any issues/suggestions please raise them here.

Feedback needed on the latest version.

Does it work OK for you?
What does not work well?
Are there any blockers (apart from docs) that mean it could not be
used for the next release of JMeter?

Reply via email to