[Webtest] webtest https support
Vikenty Menshutkin
webtest@lists.canoo.com
Thu, 14 Jul 2005 16:03:12 +0400
This is a multi-part message in MIME format.
------=_NextPart_000_0021_01C5888D.8A169830
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
thats all that I found:
HOW TO TEST HTTPS WITH WEBTEST
Since you will be using Java 1.4.2 and above ( as mentioned in the
installation checklist for Calypso), you need not worry about the SSL , as
JSSE is included.
The Java Secure Socket Extension (JSSE) is a set of packages that enable
secure Internet communications. It implements a Java technology version of
Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols. It
includes functionality for data encryption, server authentication, message
integrity, and optional client authentication.
Get the server certificate
The server certificate can be downloaded by clicking at the "key lock" icon
at Internet Explorer while having a SSL connection. The icon is locatetd at
the very bottom at the right. The ceritifcate dialogs open and at "Details"
you can click "Copy to File". Here you export the server certificate as DER
encoded X.509 certificate.You can use a name for it, say, "connection.cer".
Create your server keystore
We need a keystore containing the server certificate of the server you
want to test. No certificate - no connection.
You create the "trust.keystore" with following command on the command
line.
keytool -import -storepass together -file connection.cer -keystore
trust.keystore -alias connection
Here we had created a keystore with the name "trust.keystore" protected with
the password "together". Into this keystore we import the certificate
"connection.cer" with the alias "together".
Now you have a keystore with the name "trust.keystore" with exactly one
server certificate.
Canoo Webtest needs to know that you are going to use SSL. You have to
define the following properties at the start of your webtest script.
Property
Value
What it does?
webtest.connectioninitializer
com.canoo.webtest.security.SunJsseBaseConnectionInitializer
Tell Canoo Webtest to instantiate SSL connections
webtest.truststore.file
webtest/certs/trust.keystore (or the location of this keystore)
Tell Canoo Webtest where to look for server certificates
Now tell Canoo Webtest about using HTPPS and the port 443 in the config
element.
> -----Original Message-----
> From: webtest-admin@lists.canoo.com
> [mailto:webtest-admin@lists.canoo.com] On Behalf Of Paul King
> Sent: Thursday, July 14, 2005 3:55 PM
> To: webtest@gate2.canoo.com
> Subject: Re: [Webtest] webtest https support
>
>
> Yes, we should fix this.
>
> In the meantime, you can submit a fix for the doc :-) or
> search the mailing list or look at the included examples.
>
> Paul.
>
> Vikenty Menshutkin wrote:
> > So, how can we use webtest without the latest docs?
> >
> >
> >>-----Original Message-----
> >>From: webtest-admin@lists.canoo.com
> >>[mailto:webtest-admin@lists.canoo.com] On Behalf Of Paul King
> >>Sent: Thursday, July 14, 2005 2:37 PM
> >>To: webtest@gate2.canoo.com
> >>Subject: Re: [Webtest] webtest https support
> >>
> >>
> >>https is supported, the doco looks like it needs updating.
> >>
> >>Paul.
> >>
> >>Vikenty Menshutkin wrote:
> >>
> >>>Hi All,
> >>>
> >>>Does any of you guys have some suggestions on how to use
> webtest on
> >>>https protocol? Or, when it will be available?
> >>>(http://webtest.canoo.com/webtest/manual/syntax.html#config
> >>
> >>- I cant
> >>
> >>>imagine that 2 simple protocols is enough!!)
> >>>
>
>
> _______________________________________________
> WebTest mailing list
> WebTest@lists.canoo.com
> http://lists.canoo.com/mailman/listinfo/webtest
------=_NextPart_000_0021_01C5888D.8A169830
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE></TITLE>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2900.2668" name=3DGENERATOR></HEAD>
<BODY><!-- Converted from text/plain format --><FONT size=3D2>
<P class=3DMsoNormal><SPAN style=3D"mso-spacerun: yes"><FONT =
face=3DVerdana=20
color=3D#0000ff>thats all that I found:</FONT></SPAN></P>
<P class=3DMsoNormal><SPAN style=3D"mso-spacerun: yes"> =
</SPAN><B=20
style=3D"mso-bidi-font-weight: normal">HOW TO TEST HTTPS WITH=20
WEBTEST<?xml:namespace prefix =3D o ns =3D =
"urn:schemas-microsoft-com:office:office"=20
/><o:p></o:p></B></P>
<P class=3DMsoNormal><B=20
style=3D"mso-bidi-font-weight: normal"><o:p> </o:p></B><SPAN=20
style=3D"mso-spacerun: yes"> </SPAN>Since you =
will be=20
using Java 1.4.2 and above <SPAN class=3DGramE>( as</SPAN> mentioned in =
the=20
installation checklist for Calypso), you need not worry<SPAN=20
style=3D"mso-spacerun: yes"> </SPAN>about the SSL , as JSSE is =
included.=20
<SPAN=20
style=3D"mso-spacerun: =
yes"> </SPAN></P>
<P class=3DMsoNormal style=3D"MARGIN-LEFT: 0.25in"><SPAN style=3D"COLOR: =
black">The=20
Java Secure Socket Extension (JSSE) is a set of packages that enable =
secure=20
Internet communications. It implements a Java technology version of =
Secure=20
Sockets Layer (SSL) and Transport Layer Security (TLS) protocols. It =
includes=20
functionality for data encryption, server authentication, message =
integrity, and=20
optional client authentication.<o:p></o:p></SPAN></P>
<P class=3DMsoNormal style=3D"MARGIN-LEFT: 0.25in"><SPAN=20
style=3D"COLOR: black"><o:p></o:p></SPAN></P>
<P class=3DMsoNormal style=3D"MARGIN-LEFT: 0.25in"><B=20
style=3D"mso-bidi-font-weight: normal"><SPAN style=3D"COLOR: black">Get =
the server=20
certificate<o:p></o:p></SPAN></B></P>
<P class=3DMsoNormal style=3D"MARGIN-LEFT: 0.25in"><SPAN style=3D"COLOR: =
black">The=20
server certificate can be downloaded by clicking at the "key lock" icon =
at=20
Internet Explorer while having a SSL connection. The icon is locatetd at =
the=20
very bottom at the right. The ceritifcate dialogs open and at "Details" =
you can=20
click "Copy to File". Here you export the server certificate as DER =
encoded=20
X.509 certificate.You can use a name for it, say,=20
"connection.cer”.<o:p></o:p></SPAN></P>
<P class=3DMsoNormal style=3D"MARGIN-LEFT: 0.25in"><SPAN=20
style=3D"COLOR: black"><o:p></o:p></SPAN></P>
<P class=3DMsoNormal style=3D"MARGIN-LEFT: 0.25in"><B=20
style=3D"mso-bidi-font-weight: normal"><SPAN style=3D"COLOR: =
black">Create your=20
server keystore<o:p></o:p></SPAN></B></P>
<P class=3DMsoNormal style=3D"MARGIN: 8.05pt 5.25pt"><SPAN=20
style=3D"COLOR: black"><SPAN style=3D"mso-spacerun: =
yes"> =20
</SPAN>We need a keystore containing the server certificate of the =
server you=20
want to test. No certificate - no connection. <o:p></o:p></SPAN></P>
<P class=3DMsoNormal style=3D"MARGIN: 8.05pt 5.25pt"><SPAN=20
style=3D"COLOR: black"><SPAN style=3D"mso-spacerun: =
yes"> =20
</SPAN>You create the "trust.keystore" with following command on the =
command=20
line.<o:p></o:p></SPAN></P>
<P class=3DMsoNormal style=3D"MARGIN: 8.05pt 5.25pt"><B><SPAN=20
style=3D"COLOR: black"><SPAN style=3D"mso-spacerun: yes"> =
</SPAN><SPAN=20
class=3DGramE>keytool</SPAN> -import -storepass together -file =
connection.cer=20
-keystore trust.keystore -alias connection </SPAN></B><SPAN=20
style=3D"COLOR: black"><o:p></o:p></SPAN></P>
<P class=3DMsoNormal style=3D"MARGIN: 8.05pt 5.25pt"><SPAN =
style=3D"COLOR: black">Here=20
we had created a keystore with the name "trust.keystore" protected with =
the=20
password "together". Into this keystore we import the certificate=20
"connection.cer" with the alias "together". <o:p></o:p></SPAN></P>
<P class=3DMsoNormal style=3D"MARGIN: 8.05pt 5.25pt"><SPAN =
style=3D"COLOR: black">Now=20
you have a keystore with the name "trust.keystore" with exactly one =
server=20
certificate.<o:p></o:p></SPAN></P>
<P class=3DMsoNormal style=3D"MARGIN: 8.05pt 5.25pt"><SPAN=20
style=3D"COLOR: black">Canoo Webtest needs to know that you are going to =
use SSL.=20
You have to define the following properties at the start of your webtest =
script.=20
<o:p></o:p></SPAN></P>
<P>
<TABLE class=3DMsoNormalTable=20
style=3D"WIDTH: 100%; mso-cellspacing: 1.5pt; mso-padding-alt: 2.25pt =
2.25pt 2.25pt 2.25pt"=20
cellPadding=3D0 width=3D"100%" border=3D0>
<TBODY>
<TR style=3D"mso-yfti-irow: 0; mso-yfti-firstrow: yes">
<TD=20
style=3D"PADDING-RIGHT: 2.25pt; PADDING-LEFT: 2.25pt; BACKGROUND: =
#bbbbbb; PADDING-BOTTOM: 1.5pt; PADDING-TOP: 1.5pt"=20
vAlign=3Dtop>
<P class=3DMsoNormal><B><SPAN style=3D"COLOR: black">Property=20
<o:p></o:p></SPAN></B></P></TD>
<TD=20
style=3D"PADDING-RIGHT: 2.25pt; PADDING-LEFT: 2.25pt; BACKGROUND: =
#bbbbbb; PADDING-BOTTOM: 1.5pt; PADDING-TOP: 1.5pt"=20
vAlign=3Dtop>
<P class=3DMsoNormal><B><SPAN style=3D"COLOR: black">Value=20
<o:p></o:p></SPAN></B></P></TD>
<TD=20
style=3D"PADDING-RIGHT: 2.25pt; PADDING-LEFT: 2.25pt; BACKGROUND: =
#bbbbbb; PADDING-BOTTOM: 1.5pt; PADDING-TOP: 1.5pt"=20
vAlign=3Dtop>
<P class=3DMsoNormal><B><SPAN style=3D"COLOR: black">What it=20
does?<o:p></o:p></SPAN></B></P></TD></TR>
<TR style=3D"mso-yfti-irow: 1">
<TD=20
style=3D"PADDING-RIGHT: 2.25pt; PADDING-LEFT: 2.25pt; BACKGROUND: =
#efefef; PADDING-BOTTOM: 1.5pt; PADDING-TOP: 1.5pt"=20
vAlign=3Dtop>
<P class=3DMsoNormal><SPAN=20
style=3D"COLOR: black">webtest.connectioninitializer=20
<o:p></o:p></SPAN></P></TD>
<TD=20
style=3D"PADDING-RIGHT: 2.25pt; PADDING-LEFT: 2.25pt; BACKGROUND: =
#efefef; PADDING-BOTTOM: 1.5pt; PADDING-TOP: 1.5pt"=20
vAlign=3Dtop>
<P class=3DMsoNormal><SPAN=20
style=3D"COLOR: =
black">com.canoo.webtest.security.SunJsseBaseConnectionInitializer=20
<o:p></o:p></SPAN></P></TD>
<TD=20
style=3D"PADDING-RIGHT: 2.25pt; PADDING-LEFT: 2.25pt; BACKGROUND: =
#efefef; PADDING-BOTTOM: 1.5pt; PADDING-TOP: 1.5pt"=20
vAlign=3Dtop>
<P class=3DMsoNormal><SPAN style=3D"COLOR: black">Tell Canoo =
Webtest to=20
instantiate SSL connections <o:p></o:p></SPAN></P></TD></TR>
<TR style=3D"mso-yfti-irow: 2; mso-yfti-lastrow: yes">
<TD=20
style=3D"PADDING-RIGHT: 2.25pt; PADDING-LEFT: 2.25pt; BACKGROUND: =
#dddddd; PADDING-BOTTOM: 1.5pt; PADDING-TOP: 1.5pt"=20
vAlign=3Dtop>
<P class=3DMsoNormal><SPAN style=3D"COLOR: =
black">webtest.truststore.file=20
<o:p></o:p></SPAN></P></TD>
<TD=20
style=3D"PADDING-RIGHT: 2.25pt; PADDING-LEFT: 2.25pt; BACKGROUND: =
#dddddd; PADDING-BOTTOM: 1.5pt; PADDING-TOP: 1.5pt"=20
vAlign=3Dtop>
<P class=3DMsoNormal><SPAN style=3D"COLOR: =
black">webtest/certs/trust.keystore=20
(<B style=3D"mso-bidi-font-weight: normal">or</B> the location of =
this=20
keystore)<o:p></o:p></SPAN></P></TD>
<TD=20
style=3D"PADDING-RIGHT: 2.25pt; PADDING-LEFT: 2.25pt; BACKGROUND: =
#dddddd; PADDING-BOTTOM: 1.5pt; PADDING-TOP: 1.5pt"=20
vAlign=3Dtop>
<P class=3DMsoNormal><SPAN style=3D"COLOR: black">Tell Canoo =
Webtest where to=20
look for server certificates=20
<o:p></o:p></SPAN></P></TD></TR></TBODY></TABLE></P>
<P class=3DMsoNormal style=3D"MARGIN: 8.05pt 5.25pt"><SPAN =
style=3D"COLOR: black">Now=20
tell Canoo Webtest about using HTPPS and the port 443 in the <B>config=20
</B>element. <o:p></o:p></SPAN><BR><BR>> -----Original =
Message-----<BR>>=20
From: webtest-admin@lists.canoo.com<BR>> [<A=20
href=3D"mailto:webtest-admin@lists.canoo.com">mailto:webtest-admin@lists.=
canoo.com</A>]=20
On Behalf Of Paul King<BR>> Sent: Thursday, July 14, 2005 3:55 =
PM<BR>> To:=20
webtest@gate2.canoo.com<BR>> Subject: Re: [Webtest] webtest https=20
support<BR>><BR>><BR>> Yes, we should fix this.<BR>><BR>> =
In the=20
meantime, you can submit a fix for the doc :-) or<BR>> search the =
mailing=20
list or look at the included examples.<BR>><BR>> =
Paul.<BR>><BR>>=20
Vikenty Menshutkin wrote:<BR>> > So, how can we use webtest =
without the=20
latest docs?<BR>> ><BR>> ><BR>> >>-----Original=20
Message-----<BR>> >>From: webtest-admin@lists.canoo.com<BR>> =
>>[<A=20
href=3D"mailto:webtest-admin@lists.canoo.com">mailto:webtest-admin@lists.=
canoo.com</A>]=20
On Behalf Of Paul King<BR>> >>Sent: Thursday, July 14, 2005 =
2:37=20
PM<BR>> >>To: webtest@gate2.canoo.com<BR>> >>Subject: =
Re:=20
[Webtest] webtest https support<BR>> >><BR>> =
>><BR>>=20
>>https is supported, the doco looks like it needs =
updating.<BR>>=20
>><BR>> >>Paul.<BR>> >><BR>> >>Vikenty=20
Menshutkin wrote:<BR>> >><BR>> >>>Hi All,<BR>>=20
>>><BR>> >>>Does any of you guys have some =
suggestions on=20
how to use<BR>> webtest on<BR>> >>>https protocol? Or, =
when it=20
will be available?<BR>> >>>(<A=20
href=3D"http://webtest.canoo.com/webtest/manual/syntax.html#config">http:=
//webtest.canoo.com/webtest/manual/syntax.html#config</A><BR>>=20
>><BR>> >>- I cant<BR>> >><BR>> =
>>>imagine=20
that 2 simple protocols is enough!!)<BR>>=20
>>><BR>><BR>><BR>>=20
_______________________________________________<BR>> WebTest mailing=20
list<BR>> WebTest@lists.canoo.com<BR>> <A=20
href=3D"http://lists.canoo.com/mailman/listinfo/webtest">http://lists.can=
oo.com/mailman/listinfo/webtest</A></FONT>=20
</P></BODY></HTML>
------=_NextPart_000_0021_01C5888D.8A169830--