Problem with client certificates - No certificate found for alias:'john_doe'

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

Problem with client certificates - No certificate found for alias:'john_doe'

ohaya@yahoo.com.INVALID
Banned User
This post was updated on .
CONTENTS DELETED
The author has deleted this message.
Reply | Threaded
Open this post in threaded view
|

Re: Problem with client certificates - No certificate found for alias:'john_doe'

glinius@live.com
It's hard to say what's wrong without seeing your jmeter.log file
<https://jmeter.apache.org/usermanual/get-started.html#logging>  , CSV Data
Set Config and Keystore Config setup so I can only give a generic piece of
advice: what you put into "Variable Names" in the CSV Data Set Config must
match what your put into "Variable name holding certificate alias" in the
Keystore Config, also ensure that "Alias start index" is 0 and "Alias end
index" is -1 so Keystore Config would load all the certificates in the
keystore.

See  How to Use Multiple Certificates When Load Testing Secure Websites
<https://www.blazemeter.com/blog/how-to-use-multiple-certificates-when-load-testing-secure-websites>  
article for more details.

If you need only one certificate from the keystore you can  extract it into
a separate keystore
<https://www.misterpki.com/import-keystore-into-another-keystore/>   like


> keytool -importkeystore -srckeystore c:\temp\keystore.p12 -destkeystore
> c:\temp\onecert.p12 -srcstorepass secret --deststorepass secret -srcalias
> intuser_cindy

This way you will have *onecertp.12* keystore with only one certificate
which can be used directly without having to add CSV Data Set Config or
KeyStore Config



--
Sent from: http://www.jmeter-archive.org/JMeter-User-f512775.html

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Re: Problem with client certificates - No certificate found for alias:'john_doe'

ohaya@yahoo.com.INVALID
Banned User
This post was updated on .
CONTENTS DELETED
The author has deleted this message.
Reply | Threaded
Open this post in threaded view
|

Re: Problem with client certificates - No certificate found for alias:'john_doe'

Felix Schumacher

Am 22.12.20 um 16:39 schrieb ohaya:
>  Hi glinius,
>
> Thanks!
>
> Our "normal" Jmeter is 4.0. Yes, I know that is old, but our work doesn't want to move to newer one yet.

Any special reason, other than 'never change a running system'?


>
> FYI, I transferred the .jks file and .csv file over to a different 5.21 Jmeter, and it worked there!! So I am kind of ok with that for my testing, BUT, if I do make a new JKS with only a single cert/key in it, as you suggested, how do I use that without the CSV and Keystore Config?

You might be hit by https://bz.apache.org/bugzilla/show_bug.cgi?id=62766
, but I honestly don't have enough solid information to make more than a
guess.

Felix

>
> Thanks again!
>
> Jim
>
>
>
>      On Tuesday, December 22, 2020, 03:06:41 AM EST, [hidden email] <[hidden email]> wrote:  
>  
>  It's hard to say what's wrong without seeing your jmeter.log file
> <https://jmeter.apache.org/usermanual/get-started.html#logging>  , CSV Data
> Set Config and Keystore Config setup so I can only give a generic piece of
> advice: what you put into "Variable Names" in the CSV Data Set Config must
> match what your put into "Variable name holding certificate alias" in the
> Keystore Config, also ensure that "Alias start index" is 0 and "Alias end
> index" is -1 so Keystore Config would load all the certificates in the
> keystore.
>
> See  How to Use Multiple Certificates When Load Testing Secure Websites
> <https://www.blazemeter.com/blog/how-to-use-multiple-certificates-when-load-testing-secure-websites
> article for more details.
>
> If you need only one certificate from the keystore you can  extract it into
> a separate keystore
> <https://www.misterpki.com/import-keystore-into-another-keystore/>  like
>
>
>> keytool -importkeystore -srckeystore c:\temp\keystore.p12 -destkeystore
>> c:\temp\onecert.p12 -srcstorepass secret --deststorepass secret -srcalias
>> intuser_cindy
> This way you will have *onecertp.12* keystore with only one certificate
> which can be used directly without having to add CSV Data Set Config or
> KeyStore Config
>
>
>
> --
> Sent from: http://www.jmeter-archive.org/JMeter-User-f512775.html
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [hidden email]
> For additional commands, e-mail: [hidden email]
>
>  

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]