I am trying to get my script to work but it is having handshake failure. The
script have one webservice request through https. I imported the ca.cert
into the $java_home/jre/lib/security/cacerts and also have the keystore
file. I ran the script with "-Djavax.net.debug=all" in the java command
line and below is what I get, can someone tell me what I did wrong?
*** ClientHello, TLSv1
RandomCookie: GMT: 1145911895 bytes = { 79, 192, 138, 73, 135, 76, 185, 71,
180, 106, 226, 95, 227, 75, 224, 9, 58, 1, 4, 201, 131, 61, 115, 211, 81,
75, 37, 72 }
Session ID: {}
Cipher Suites: [***SNIP***]
Compression Methods: { 0 }
***
[write] MD5 and SHA1 hashes: len = 73
***SNIP***
Thread Group 1-1, WRITE: TLSv1 Handshake, length = 73
[write] MD5 and SHA1 hashes: len = 98
***SNIP***
Thread Group 1-1, WRITE: SSLv2 client hello message, length = 98
Thread Group 1-1, READ: TLSv1 Handshake, length = 74
*** ServerHello, TLSv1
RandomCookie: GMT: 1145911764 bytes = { 23, 118, 115, 61, 161, 226, 80,
152, 23, 204, 33, 209, 129, 233, 57, 135, 20, 18, 84, 42, 41, 141, 236, 29,
60, 146, 124, 123 }
Session ID: {124, 81, 91, 168, 58, 168, 190, 183, 37, 98, 16, 127, 66, 172,
143, 37, 14, 151, 242, 163, 46, 42, 124, 63, 246, 55, 141, 111, 62, 0, 15,
168}
Cipher Suite: SSL_RSA_WITH_RC4_128_MD5
Compression Method: 0
***
%% Created: [Session-2, SSL_RSA_WITH_RC4_128_MD5]
** SSL_RSA_WITH_RC4_128_MD5
[read] MD5 and SHA1 hashes: len = 74
***SNIP***
Thread Group 1-1, READ: TLSv1 Handshake, length = 2083
*** Certificate chain
chain [0] = [
[
Version: V3
Subject: EMAILADDRESS=***SNIP***
Signature Algorithm: MD5withRSA, OID = 1.2.840.113549.1.1.4
Key: SunJSSE RSA public key:
public exponent:
010001
modulus:
***SNIP***
Validity: [From: Thu Nov 03 01:00:51 PST 2005,
To: Fri Nov 03 01:00:51 PST 2006]
Issuer: EMAILADDRESS=***SNIP***
SerialNumber: [ a3]
Certificate Extensions: 4
[1]: ObjectId: 2.16.840.1.113730.1.13 Criticality=false
Extension unknown: DER encoded OCTET string =
***SNIP***
[2]: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
***SNIP***
]
]
[3]: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
***SNIP***
]
[EMAILADDRESS=***SNIP***]
SerialNumber: [ 80294c39 53b67e8b]
]
[4]: ObjectId: 2.5.29.19 Criticality=false
BasicConstraints:[
CA:false
PathLen: undefined
]
]
Algorithm: [MD5withRSA]
Signature:
***SNIP***
]
chain [1] = [
[
Version: V3
Subject: EMAILADDRESS=***SNIP***
Signature Algorithm: MD5withRSA, OID = 1.2.840.113549.1.1.4
Key: SunJSSE RSA public key:
public exponent:
010001
modulus:
***SNIP***
Validity: [From: Tue Aug 09 03:22:23 PDT 2005,
To: Sun Aug 08 03:22:23 PDT 2010]
Issuer: EMAILADDRESS=***SNIP***
SerialNumber: [ 80294c39 53b67e8b]
Certificate Extensions: 3
[1]: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
***SNIP***
]
]
[2]: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
***SNIP***
]
[EMAILADDRESS=***SNIP***]
SerialNumber: [ 80294c39 53b67e8b]
]
[3]: ObjectId: 2.5.29.19 Criticality=false
BasicConstraints:[
CA:true
PathLen:2147483647
]
]
Algorithm: [MD5withRSA]
Signature:
***SNIP***
]
***
Found trusted certificate:
[
[
Version: V3
Subject: ***SNIP***
Signature Algorithm: MD5withRSA, OID = 1.2.840.113549.1.1.4
Key: SunJSSE RSA public key:
public exponent:
010001
modulus:
***SNIP***
Validity: [From: Tue Aug 09 03:22:23 PDT 2005,
To: Sun Aug 08 03:22:23 PDT 2010]
Issuer: EMAILADDRESS=***SNIP***
SerialNumber: [ 80294c39 53b67e8b]
Certificate Extensions: 3
[1]: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
***SNIP***
]
]
[2]: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
***SNIP***
]
[EMAILADDRESS=***SNIP***]
SerialNumber: [ 80294c39 53b67e8b]
]
[3]: ObjectId: 2.5.29.19 Criticality=false
BasicConstraints:[
CA:true
PathLen:2147483647
]
]
Algorithm: [MD5withRSA]
Signature:
***SNIP***
]
[read] MD5 and SHA1 hashes: len = 2083
***SNIP***
Thread Group 1-1, READ: TLSv1 Handshake, length = 511
*** CertificateRequest
Cert Types: RSA, DSS,
Cert Authorities:
<EMAILADDRESS=***SNIP***>
<EMAILADDRESS=***SNIP***>
<EMAILADDRESS=***SNIP***>
[read] MD5 and SHA1 hashes: len = 507
***SNIP***
*** ServerHelloDone
[read] MD5 and SHA1 hashes: len = 4
0000: 0E 00 00 00 ....
*** Certificate chain
***
JsseJCE: Using JSSE internal implementation for cipher RSA/ECB/PKCS1Padding
*** ClientKeyExchange, RSA PreMasterSecret, TLSv1
Random Secret: { 3, 1, 161, 32, 232, 190, 101, 87, 69, 92, 1, 193, 37, 245,
84, 89, 158, 6, 147, 111, 249, 41, 136, 219, 77, 135, 206, 211, 200, 112,
35, 61, 200, 231, 2, 111, 104, 163, 146, 42, 117, 79, 199, 10, 196, 162,
110, 120 }
[write] MD5 and SHA1 hashes: len = 141
***SNIP***
Thread Group 1-1, WRITE: TLSv1 Handshake, length = 141
SESSION KEYGEN:
PreMaster Secret:
***SNIP***
CONNECTION KEYGEN:
Client Nonce:
***SNIP***
Server Nonce:
***SNIP***
Master Secret:
***SNIP***
Client MAC write Secret:
***SNIP***
Server MAC write Secret:
***SNIP***
Client write key:
***SNIP***
Server write key:
***SNIP***
... no IV for cipher
Thread Group 1-1, WRITE: TLSv1 Change Cipher Spec, length = 1
JsseJCE: Using JSSE internal implementation for cipher RC4
*** Finished
verify_data: { 181, 5, 176, 172, 202, 181, 152, 174, 16, 166, 44, 4 }
***
[write] MD5 and SHA1 hashes: len = 16
***SNIP***
Plaintext before ENCRYPTION: len = 32
***SNIP***
Thread Group 1-1, WRITE: TLSv1 Handshake, length = 32
waiting for close_notify or alert: state 1
Thread Group 1-1, READ: TLSv1 Alert, length = 2
Thread Group 1-1, RECV TLSv1 ALERT: fatal, handshake_failure
Thread Group 1-1, called closeSocket()
Exception while waiting for close javax.net.ssl.SSLHandshakeException:
Received fatal alert: handshake_failure
Thread Group 1-1, handling exception: javax.net.ssl.SSLHandshakeException:
Received fatal alert: handshake_failure
--
View this message in context:
http://www.nabble.com/Webservice-Request-with-HTTPS-t1502408.html#a4073533
Sent from the JMeter - User forum at Nabble.com.
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
