For detailed information look https://docs.oracle.com/javase/7/docs/technotes/guides/security/jsse/JSSERefGuide.html#Debug
Felix Am 22.07.22 um 13:24 schrieb Harshit Gothalkar:
Hello Team,I tried with suggested steps & crated jks certificate and same has been imported/configured in jmeter (system.Properties file).Still its not going through. Currently its showing key not found in logs.(attached same for reference)Regards, Harshit *From: *Kiran Badi <mailto:kiranb...@yahoo.com.INVALID> *Sent: *20 July 2022 20:02 *To: *user@jmeter.apache.org *Subject: *Re: Jmeter | Connection Reset errorCAUTION: This E-mail has been received from an external source. Please review carefully before clicking on any links or opening attachments.try these steps,1. Open the application on test machine browser. 2.Export the certs from browser in the format you want. Please see this link How to save a remote server SSL certificate locally as a file| | | | | | | | | | | How to save a remote server SSL certificate locally as a fileI need to download an SSL certificate of a remote server (not HTTPS, but the SSL handshake should be the same as...| | |3. Import it in the JRE store as trusted cert which is used by Jmeter. Adding a certificate to JRE trusted certificates stores.| | | | | | | | | | | Adding a certificate to JRE trusted certificates stores.Adding a certificate to JRE trusted certificates stores. - add-certificate-to-java-cert-store.md| | |4. You also use keystore explorer for step 3 to manage, update and validate your certs. It will make your life easier. Just make sure you close cert in keystore explorer after making changes.(KeyStore Explorer| | | | KeyStore Explorer Kai KramerKeyStore Explorer is an open source GUI replacement for the Java command-line utilities keytool and jarsigner. K...| | | )5. now try recording and observe the jmeter logs.you are getting connection reset error because your handshake is probably failing. So i order to debug this you need to understand what type of SSL does your application support, 1 way ssl, 2 way ssl or something else. Once you know SSL and version, then understand cipher suites which are used by your application and then keep adding those to JRE if they don't exist in JRE.(Hopefully you might not need this step) Note that there are quite of bit use cases where cipher suites changed from JDK 8 TO JDK 11 or beyond. some were deprecated and no longer supported by Oracle JDK . Also it varies for JDK vendor to vendor. If this is your case, then take a look at bouncy castle library to fill those gaps or backport the jre folder from the supported version of JDK(Hmm might or might not work depending on JDK you are using). OpenSSL is good tool which will help you figure these changes provided you understand how to use it correctly and you know the exact issue to debug. Openssl has some learning curve associated with it.I would expect that you might iterate a bit to resolve this issue.Telnet and other ways are probably not reliable since not all system admins keep telnet ports open. Openssl , JRE keytool and keystore explorer is your friend if your application works via browser and not via JDK calls. Sometimes even these are not available, so you might have rely only on browser and jre keytool. however steps remains the same.On Wednesday, July 20, 2022 at 09:52:27 AM EDT, Dmitri T <glin...@live.com> wrote:Now try connecting to the application host and port using openssl <https://www.openssl.org/docs/man3.0/man1/openssl-s_client.html>and compare protocol version and cipher suites. On 7/20/2022 3:42 PM, Harshit Gothalkar wrote: > > Hello Team, > > Plz find attached stack trace & jmeter logs with debug level enabled > for better clarity. > > Meanwhile I am just ruuning though the links shared by you > > Regards, > > Harshit > > Sent from Mail <https://go.microsoft.com/fwlink/?LinkId=550986> for > Windows > > *From: *Dmitri T <mailto:glin...@live.com <mailto:glin...@live.com>> > *Sent: *20 July 2022 18:47 > *To: *user@jmeter.apache.org > *Subject: *Re: Jmeter | Connection Reset error > > CAUTION: This E-mail has been received from an external source. Please > review carefully before clicking on any links or opening attachments. > > "Connection reset" can have a lot of different underlying reasons, > you're supposed to provide full stacktrace, this way troubleshooting > will be much easier > > The only thing I can suggest so far is: > > * Increasing JMeter logging verbosity for at least HTTP(S) Test Script > Recorder >> <https://jmeter.apache.org/usermanual/component_reference.html#HTTP(S)_Test_Script_Recorder>and> Apache HC components <https://hc.apache.org/>by adding the next line > to /log4j2.xml/ file: > > * <Logger name="org.apache.jmeter.protocol.http.proxy" > level="debug" /> > * <Logger name="org.apache.http" level="debug" /> > > * Adding the next line to /system.properties/ file: > o javax.net.debug=all > > and inspecting STDOUT> <https://en.wikipedia.org/wiki/Standard_streams#Standard_output_(stdout)>andjmeter.log> > file <https://jmeter.apache.org/usermanual/get-started.html#logging> for > any clues. > > Also be aware that there is an alternative way of recording a JMeter > test: JMeter Chrome Extension> <https://guide.blazemeter.com/hc/en-us/articles/206732579-The-BlazeMeter-Chrome-Extension-Record-JMeter-Selenium-or-Synchronized-JMeter-and-Selenium>,> > in this case you won't have to worry about proxies and SSL certificates. > > > On 7/20/2022 3:02 PM, Harshit Gothalkar wrote: > > Hello Team, > > > > Thanks for quick reply. > > > > We have the ports too, those are opened. we tried on this pointer > already:- > > > > 1 telnet to specified url & port --> this is working. Able to telent > successfully > > 2 1 telnet to IP (find the resolved ip from nsloopup) & port ---> > this is working, Able to telent successfully > > 3 manually able to access the application from browser --> this > already tried as mentioned in pointer 4 in initial check > > > > Regards, > > Harshit > > > > Sent from Mail<https://go.microsoft.com/fwlink/?LinkId=550986> for > Windows > >> > From: Deepak Goel<mailto:deic...@gmail.com <mailto:deic...@gmail.com <mailto:deic...@gmail.com>>>> > Sent: 20 July 2022 18:17 > > To: JMeter Users List<mailto:user@jmeter.apache.org > <mailto:user@jmeter.apache.org <mailto:user@jmeter.apache.org>>> > > Subject: Re: Jmeter | Connection Reset error > > > > CAUTION: This E-mail has been received from an external source. > Please review carefully before clicking on any links or opening > attachments. > > > > Check if the port of servers are open (not the Jmeter machine)... > > > > > > Deepak > > "The greatness of a nation can be judged by the way its animals are > treated > > - Mahatma Gandhi" > > > > +91 73500 12833 > > deic...@gmail.com > > > > Facebook:https://www.facebook.com/deicool> > LinkedIn:www.linkedin.com/in/deicool<http://www.linkedin.com/in/deicool>> > > > "Plant a Tree, Go Green" > > > > Make In India :http://www.makeinindia.com/home > > > > > > On Wed, Jul 20, 2022 at 5:21 PM Harshit Gothalkar > > <harsh...@qualitykiosk.com.invalid> wrote: > > > >> Hello Team, > >> > >> While recording of the application Landing page from Windows Test > machine > >> we are getting ‘connection reset’ error. > >> > >> Kindly suggest what next could be tried in order to resolve the issue > >> > >> Further have checked the below things as first steps:-> >> 1 JMeter proxy certificate --> this is installed properly under trusted> >> root certificate> >> 2 changing with port number --> instead of tried with port 8888 used ,> >> 8181 . > >> 3 Validated the listening port if already in use --> with netstat > command > >> checked, neither of these are in us > >> 4 Checked application access w/o configuring proxy in the browser > --> Able > >> to access the application landing page successfully > >> 5 SSL version--> tried setting up the default protocol version in > >> jmeter.properties as TLS1.2 , this version verified from browsers > security > >> tab for my application > >> 6 Firewall --> Test machines firewall checked , nothing is blocking > there > >> & its in disable state > >> 7 Antivirus---> Currently trend micro is antivirus used on my test> >> machine. Even after disabling the same, getting connection reset error> >> 8 Browser proxy --> Currently there is no browser proxy enabled , > so that > >> also rule out. > >> 9 Manual ---> This anyway just a trial, where manual HTTP request > created > >> using HHTP sampler & headers from developer tool-> network tab. But > still > >> the same issue > >> > >> Currently using below setup of Test machine > >> OS --> Windows 2016 servers standard > >> Jmeter --> 5.4.1 version > >> Java version installed --> 1.8.0 > >> > >> Regards, > >> Harshit > >> > >> > >> > >> Sent from Mail<https://go.microsoft.com/fwlink/?LinkId=550986> for > Windows > >> > >> > >> This e-mail (including any attachments) is confidential and may also > >> contain proprietary information of QualityKiosk. The email and the> >> attachments, if any, are transferred for the exclusive attention of the> >> intended addressees named above. If you have received this > transmission in> >> error, please immediately notify the sender by return e-mail and delete > >> this message with its attachments. Unauthorized use, copying or further> >> full or partial distribution of this e-mail or its attachments is > strictly > >> prohibited and may subject you to legal action. Although this > e-mail and > >> any attachments are believed to be free of any virus that may > affect any > >> computer system into which it is received and opened, it is the > >> responsibility of the recipient to ensure that it is virus free. > >> QualityKiosk is not liable for any loss or damage arising in any > way from > >> the use of this e-mail or its attachments. > >> > > This e-mail (including any attachments) is confidential and may also > contain proprietary information of QualityKiosk. The email and the > attachments, if any, are transferred for the exclusive attention of > the intended addressees named above. If you have received this > transmission in error, please immediately notify the sender by return > e-mail and delete this message with its attachments. Unauthorized use, > copying or further full or partial distribution of this e-mail or its > attachments is strictly prohibited and may subject you to legal > action. Although this e-mail and any attachments are believed to be > free of any virus that may affect any computer system into which it is > received and opened, it is the responsibility of the recipient to > ensure that it is virus free. QualityKiosk is not liable for any loss > or damage arising in any way from the use of this e-mail or its > attachments. > > > > This e-mail (including any attachments) is confidential and may also > contain proprietary information of QualityKiosk. The email and the > attachments, if any, are transferred for the exclusive attention of > the intended addressees named above. If you have received this > transmission in error, please immediately notify the sender by return > e-mail and delete this message with its attachments. Unauthorized use, > copying or further full or partial distribution of this e-mail or its > attachments is strictly prohibited and may subject you to legal > action. Although this e-mail and any attachments are believed to be > free of any virus that may affect any computer system into which it is > received and opened, it is the responsibility of the recipient to > ensure that it is virus free. QualityKiosk is not liable for any loss > or damage arising in any way from the use of this e-mail or its > attachments. > > > --------------------------------------------------------------------- > To unsubscribe, e-mail:user-unsubscr...@jmeter.apache.org > For additional commands, e-mail:user-h...@jmeter.apache.orgThis e-mail (including any attachments) is confidential and may also contain proprietary information of QualityKiosk. The email and the attachments, if any, are transferred for the exclusive attention of the intended addressees named above. If you have received this transmission in error, please immediately notify the sender by return e-mail and delete this message with its attachments. Unauthorized use, copying or further full or partial distribution of this e-mail or its attachments is strictly prohibited and may subject you to legal action. Although this e-mail and any attachments are believed to be free of any virus that may affect any computer system into which it is received and opened, it is the responsibility of the recipient to ensure that it is virus free. QualityKiosk is not liable for any loss or damage arising in any way from the use of this e-mail or its attachments.--------------------------------------------------------------------- To unsubscribe, e-mail:user-unsubscr...@jmeter.apache.org For additional commands, e-mail:user-h...@jmeter.apache.org
OpenPGP_0xEA6C3728EA91C4AF.asc
Description: OpenPGP public key
OpenPGP_signature
Description: OpenPGP digital signature
