https://issues.apache.org/bugzilla/show_bug.cgi?id=56057

--- Comment #4 from Michael Aichlmayr <[email protected]> ---
>> While I understand that it is an unusual circumstance that someone might
>> remove the .crt file at all, it is the first thing to try when something
>> fails. 
> Not sure I follow that logic.

The process that led me there was, JMeter reported that it created the
ApacheJMeterTemporaryRootCA certificate in the bin folder. I went straight to
the bin folder with the browser and imported it, at first, without questioning
that it had been (re)created. When I realized it was the expired one I had
created some weeks before, my first thought was that maybe the existence of the
expired .crt was somehow interfering with the creation of the file (Windows
being what Windows is I have had such things happen before because of weird
attributes on a file). Since it did not exist in the original installation,
removing it seemed the most likely means through which to test if JMeter would
create it when it wasn't already there.

> The documentation [1] says:
> "If necessary, you can force JMeter to regenerate the keystore (and the
> exported certificates - ApacheJMeterTemporaryRootCA[.usr|.crt]) by
> deleting the keystore file proxyserver.jks from the JMeter directory. "
> Is that not clear?

Yes you are right it is absolutely clear. Had I not believed, that JMeter
'believed', that it had created the file, I probably would have gone to the
documentation for an explanation of what was going on. As JMeter seemed to tell
me that it did what I understood it was supposed to do, I immediately suspected
OS issue or bug. Checking the manual should have been part of my process
anyway, and would have changed (improved) the way I had initially reported
this.

I understand (now) that this is working as designed (with regard to exporting
.crt|.usr from the keystore). It does seem (again IMHO) that it would be such a
simple thing to check that the .crt|.usr files exist and re-export them if they
don't, that it is worth doing (YMMV).

> You can change the default expiry date from 7 days to 1 day
> (I don't think 0 days will work) by changing the following
> jmeter.property entry:
> proxy.cert.validity=7

I will give that a go then, and report back when I have a result.
Thank you.

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to