Hi All,
First I would like to say great job on the existing JMeter. It can handle 
just about 99% of what we throw at it. I am however attempting to develop 
some extra functionality in the Proxy, and I could use some help. I have a 
few questions, and any guidance would be greatly appreciated.


1. Is anyone currently working on an HTTPS proxy?

2. HTTPS was created as an end to end security measure. As a result creating 
an HTTPS Proxy is essentially creating an "man in the middle" attack. Is it 
even possible to create an HTTPS proxy?

3. The current proxy exists in org.apache.jmeter.protocol.http.proxy. I have 
come up with the following options

3.1 A new package of org.apache.jmeter.protocol.https.proxy is created with 
a https only proxy. The user will have to set up an https proxy in their 
browser. 

3.2 Extract an interface from HttpRequestHdr and HttpRepyHdr. Then use the 
existing header parsing for HTTP, and create an HTTPS implementation. The 
implementation could then determine if the request/response is HTTP or HTTPS 
possible via an isProtocol(Buffer) method. This will allow the user to 
define a single proxy.

Thanks all,
Todd

Reply via email to