JMeter › JMeter - User

Problem with client certificates - No certificate found for alias:'john_doe'

_‹ Previous Topic Next Topic _›

Classic

List

Threaded

4 messages Options

ohaya@yahoo.com.INVALID

Problem with client certificates - No certificate found for alias:'john_doe'

Banned User

This post was updated on .

CONTENTS DELETED

The author has deleted this message.

glinius@live.com

Re: Problem with client certificates - No certificate found for alias:'john_doe'

It's hard to say what's wrong without seeing your jmeter.log file
<https://jmeter.apache.org/usermanual/get-started.html#logging> , CSV Data
Set Config and Keystore Config setup so I can only give a generic piece of
advice: what you put into "Variable Names" in the CSV Data Set Config must
match what your put into "Variable name holding certificate alias" in the
Keystore Config, also ensure that "Alias start index" is 0 and "Alias end
index" is -1 so Keystore Config would load all the certificates in the
keystore.

See How to Use Multiple Certificates When Load Testing Secure Websites
<https://www.blazemeter.com/blog/how-to-use-multiple-certificates-when-load-testing-secure-websites>
article for more details.

If you need only one certificate from the keystore you can extract it into
a separate keystore
<https://www.misterpki.com/import-keystore-into-another-keystore/> like

> keytool -importkeystore -srckeystore c:\temp\keystore.p12 -destkeystore
> c:\temp\onecert.p12 -srcstorepass secret --deststorepass secret -srcalias
> intuser_cindy

This way you will have *onecertp.12* keystore with only one certificate
which can be used directly without having to add CSV Data Set Config or
KeyStore Config

--
Sent from: http://www.jmeter-archive.org/JMeter-User-f512775.html

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

ohaya@yahoo.com.INVALID

Re: Problem with client certificates - No certificate found for alias:'john_doe'

Banned User

This post was updated on .

CONTENTS DELETED

The author has deleted this message.

Felix Schumacher

Re: Problem with client certificates - No certificate found for alias:'john_doe'

Am 22.12.20 um 16:39 schrieb ohaya:
> Hi glinius,
>
> Thanks!
>
> Our "normal" Jmeter is 4.0. Yes, I know that is old, but our work doesn't want to move to newer one yet.

Any special reason, other than 'never change a running system'?

>
> FYI, I transferred the .jks file and .csv file over to a different 5.21 Jmeter, and it worked there!! So I am kind of ok with that for my testing, BUT, if I do make a new JKS with only a single cert/key in it, as you suggested, how do I use that without the CSV and Keystore Config?

You might be hit by https://bz.apache.org/bugzilla/show_bug.cgi?id=62766
, but I honestly don't have enough solid information to make more than a
guess.

Felix

>
> Thanks again!
>
> Jim
>
>
>
> On Tuesday, December 22, 2020, 03:06:41 AM EST, [hidden email] <[hidden email]> wrote:
>
> It's hard to say what's wrong without seeing your jmeter.log file
> <https://jmeter.apache.org/usermanual/get-started.html#logging> , CSV Data
> Set Config and Keystore Config setup so I can only give a generic piece of
> advice: what you put into "Variable Names" in the CSV Data Set Config must
> match what your put into "Variable name holding certificate alias" in the
> Keystore Config, also ensure that "Alias start index" is 0 and "Alias end
> index" is -1 so Keystore Config would load all the certificates in the
> keystore.
>
> See How to Use Multiple Certificates When Load Testing Secure Websites
> <https://www.blazemeter.com/blog/how-to-use-multiple-certificates-when-load-testing-secure-websites>
> article for more details.
>
> If you need only one certificate from the keystore you can extract it into
> a separate keystore
> <https://www.misterpki.com/import-keystore-into-another-keystore/> like
>
>
>> keytool -importkeystore -srckeystore c:\temp\keystore.p12 -destkeystore
>> c:\temp\onecert.p12 -srcstorepass secret --deststorepass secret -srcalias
>> intuser_cindy
> This way you will have *onecertp.12* keystore with only one certificate
> which can be used directly without having to add CSV Data Set Config or
> KeyStore Config
>
>
>
> --
> Sent from: http://www.jmeter-archive.org/JMeter-User-f512775.html
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [hidden email]
> For additional commands, e-mail: [hidden email]
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]