LoadRunner Practitioners Forum
Showing results for 
Search instead for 
Do you mean 

SSL Certificate Exceptions in AJAX TruClient?

SOLVED
Go to Solution
Occasional Contributor

SSL Certificate Exceptions in AJAX TruClient?

Has anyone been able to add an SSL certificate exception?  This functionality should be available for testing disaster recovery sites - dr.example.com is typically configured with the SSL certificate for www.example.com.

 

Would like to be able to add the site as an exception.  Recording that process doesn't work; TruClient doesn't seem able to act upon the warning window that pops up requesting confirmation.

 

Running LR 11 Patch 3.  Tried modifying various settings in the Encryption tab of Tools > TruClient General Settings dialog box to no avail.

19 REPLIES
HPE Expert

Re: SSL Certificate Exceptions in AJAX TruClient?

Hello

Plase open a case with support, I think this require dedicated assitance, not sure if is even possible.

Advisor

Re: SSL Certificate Exceptions in AJAX TruClient?

Hi,

 

I was able to add an exception in by going to "Edit Browser Options -> Encryption Tab -> View Certificates -> Servers Tab.

 

Then you can add an exception in there. Just type in the URL/hostname, retrieve the cert and you're good to go.

Highlighted
Occasional Visitor

Re: SSL Certificate Exceptions in AJAX TruClient?

Hi, This did work for the first session, but if you stop and start the session it doesn't remember the settings.  Was there some other change you made for the settings to get preserved after restarting TrueClient?

Occasional Visitor

Re: SSL Certificate Exceptions in AJAX TruClient?

Hi All,

Did any one get the solution to this? I am facing the same issue, tried adding the exception in truclient general settings as mentioned above but no luck.

Advisor

Re: SSL Certificate Exceptions in AJAX TruClient?

Hi,

 

 

I can see that in the FF general settings you do not see the exception after adding it, but when performing a replay FF acts as if there is an exception (no warning). Does the browser still shows you the warning page?

 

Thanks

Yehuda Sabag
TruClient R&D
Valued Contributor

Re: SSL Certificate Exceptions in AJAX TruClient?

I'm having the same issue, with Vugen 11.51 + TruClient for Firefox. I've added it through Tools->TruClient General Settings, then clicking 'Add Exception' on the 'Encryption' tab.

Visitor

Re: SSL Certificate Exceptions in AJAX TruClient?

I am having the same problem with Web protocol.

Visitor

Re: SSL Certificate Exceptions in AJAX TruClient?

I am having the same issue.  After adding exception, either through the Firefox window or by bringing up the settings (TruClient General Settings) window and adding it that way.  Can also be added by importing the cert in the settings window.  The certificate gets added but seems to require a new script to be started fresh and recorded.  If attempting with an existing script the "this connection is untrusted" window keeps appearing even if the exception/cert has been added.  Re-recording after adding the new cert/exception is the only way I've found to get around this issue.  Kind of a pain when you have to re-record after the cert expires every 6 months or so.

 

Visitor

Re: SSL Certificate Exceptions in AJAX TruClient?

Found a solution:

 

The issue is that the cert_override.txt document located at \profiles\interactive needs to be updated when the cert expires and you need a new one.  To avoid re-scripting, open a new TruClient script and establish the certificates there and save the script.  From there open the newly created script with the new certificates and copy the \profiles\interactive\cert_override.txt from that script to your old script.  It should now work properly.  TruClient establishes the certs during the recording, so simply adding them and performing a save as won't work.

 

Hope this helps everyone!

Advisor

Re: SSL Certificate Exceptions in AJAX TruClient?

I wish I read this thread early, so it would give me the hint and save me lot of time. In my case, everything else is same, but the file I had to replace is the cert8.db file in the same folder. BTW, I didn't need to replace the cert_override.txt file.

this work around works, so I don't need to re-record entire script, but I'm thinking there should be  a way to import the certificates, how the cert8 file gets created in the first place?

Advisor

Re: SSL Certificate Exceptions in AJAX TruClient?

Continue to this thread, we definitely need to find a way to import the certificate to the cert8.db file.

In my case, I have a load balancer and there are multiple servers behind it, the script may hit a different server each time, then the server returns with different certificate, the cert8.db created by the work around only contains 1 server certificate, I need to find a way to import all certificates to the cert8.db file, so that no matter which server the script connects to, it will NOT get the security warning, which eventually errors out the script.

 

Anyone had simular experience?

Advisor

Re: SSL Certificate Exceptions in AJAX TruClient?

[ Edited ]

Great solution, thank you for the advice.

I have adapted this solution by taking this cert_override.txt file from my firefox profile in "C:\Users\XXX\AppData\Roaming\Mozilla\Firefox\Profiles\XXX"

Regular Visitor

Re: SSL Certificate Exceptions in AJAX TruClient?

In our office recently changed new cert..last 2 times I copied cert_override.txt from new script it worked well but this time giving tough time ..I tried above all procedures .. can anyone help me on this..

HPE Expert

Re: SSL Certificate Exceptions in AJAX TruClient?

Which version do you use?

Did you reconfigure the exception from General Settings dialog in VuGen?

Did you override also cert8.db and key3.db? these two binary files contains data about the certificates and have to be updated as well

Thanks,

Shlomi

 

Regular Visitor

Re: SSL Certificate Exceptions in AJAX TruClient?

1. 12.02.00

2. Nope but imported the new cert through vugen FF browser  (HP\LoadRunner\bin\firefox)

3. Yes replaced new cert_override.txt cert8.db and key3.db

HPE Expert

Re: SSL Certificate Exceptions in AJAX TruClient?

Where did you copy the new cert_override.txt, cert8.db and key3.db from?

Doing that from HP\LoadRunner\bin\firefox does not guarentee if will . effect the script and copying the files from that folder will not resolve the issue.  Also it is not recommended opening\working with Firefox directly from LR bin folder. It might cause the browser to upgrade and as a result to fail TruClient from loading.

I recommend creating a new script, configuring it from TruClient General Settings which is available from VuGen toolbar while the browser is closed. After you do that, create another new script and copy the files from the last created script or use the newly created script.

Regards,

Shlomi

 

Regular Visitor

Re: SSL Certificate Exceptions in AJAX TruClient?

 

HPE Expert

Re: SSL Certificate Exceptions in AJAX TruClient?

Hi,

As long as you do not configure the exception from the General Settings dialog in VuGen these files will not contain the required information.

This thread is getting long. I suggest you will raise a support ticket and get help from HPE support team. We can continue disucssing it here but I am afraid it will not yield desired results. 

Regards,

Shlomi

 

Frequent Advisor

Re: SSL Certificate Exceptions in AJAX TruClient?

Thanks for that solution it works perfect, just copy from the mentioned location to the script interactive directory and it works !

 

thanks