https://bz.apache.org/bugzilla/show_bug.cgi?id=64831

--- Comment #3 from Michael Osipov <[email protected]> ---
Just tried, this doesn't scale at all, unfortunately. To have this printed you
need some sampler accessing it and since one has to be in debug mode HttpClient
logs so much that those log statements are long gone from the pane buffer in
JMeter. It would require additional effort to configure some fake sampler or
configure a log file.

I understand that this is the easiest way to implement, but from a user's POV
not useful.

I would also rearrage the log statements for consistency too:

1:
>  log.debug("{}: {}", i++, alias);

This give virtually no context about the printed information.

2:
Next:
Subject DN: ...
Issuer DN: ...
Not valid before: ...
Not valid after: ...

2:
SAN can be empty, probe for it. (Javadoc: an immutable Collection of subject
alternative names (or null))

3: Printing SAN as-is isn't really helpful. The ASN.1 defition is:
 GeneralName ::= CHOICE {
      otherName                       [0]     OtherName,
      rfc822Name                      [1]     IA5String,
      dNSName                         [2]     IA5String,
      x400Address                     [3]     ORAddress,
      directoryName                   [4]     Name,
      ediPartyName                    [5]     EDIPartyName,
      uniformResourceIdentifier       [6]     IA5String,
      iPAddress                       [7]     OCTET STRING,
      registeredID                    [8]     OBJECT IDENTIFIER}

So a switch on the first member of the nested list to a string literal would be
helpful. In case of otherName it would be very helpful to dumb the ASN.1 blob
with Apache Kerby ASN.1. I have used it myself, very nice. Many enterprise
certs like mine will contain MS UserPrincipalName (1.3.6.1.4.1.311.20.2.3)
which Java does not know.

Maybe the debug sampler could be extended for this?

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to