Hello!

I need to be able to create and decrypt encrypted session-cookies created by the Apache's mod_session:

   http://httpd.apache.org/docs/2.4/mod/mod_session_crypto.html

Obviously, I know the passphrase used by the server being tested, but I'm not sure, how to implement in JMeter the algorithm used by Apache (aes256).

I managed to replicate it in PHP:

   http://aldan.algebra.com/~mi/mod_session_crypt.html

and can, if I have to, simply exec the PHP-program on the client-side. But, if it is not too hairy, I'd rather reimplement it using JMeter's scripting facilities (JavaScript?) -- if it has the supporting crypto-functions already. Are there any? In particular, I need hash_hmac implementation (with the SHA1 digest support) and the AES256 encryption...

Thanks! Yours,

   -mi


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to