[Dev] HTTPS proxy recorder?

[Frank Cohen]

I found it. -Frank


http://www.pushtotest.com/Wiki/RecordingHTTPS

RecordingHTTPS
Hi everybody, I’ve read threads about recording HTTPS communications-  
if its any use to anyone I achieved it by use of 2 apache servers  
using mod_proxy set up either side of the TestMaker proxy, the first  
to rewrite HTTPS as HTTP through the TestMaker proxy, and the second  
to rewrite the HTTP back as HTTPS. By manipulating the (Windows/Unix)  
hosts file, and ensuring the 2nd apache server is on a different  
physical machine I’ve found it possible to record both HTTP and HTTPS.

(How hard would it be to rewrite AgentBase?.py to add support for  
HTTPS to the .get and .post methods? This would allow anything  
recorded to also be played back, which would be useful ;-) )

The disadvantage of this is you have to change your hosts file again  
when you want to run tests for real (if you want significant  
performance measurements), but that can be done at the click of a mouse.

Hope this is of some use to people (I didn’t see any other  
suggestions along this line, but it worked for me.)

In the meantime I’m having real trouble getting TestMaker to connect  
to HTTPS sites which have non globally-signed certificates. Any help  
would be appreciated (yes read the FAQ on keytool, don’t really  
understand it, more help would be appreciated)

Geoff






On Nov 21, 2006, at 8:12 AM, Frank Cohen wrote:

> Thanks Jason. The script you sent shows how to apply a custom  
> client-side SSL certificate to the Java Keystore. That's not quite  
> what I was looking for. The TestMaker proxy recorder watches  
> network traffic between a browser and target host and creates a  
> Jython jUnit TestCase script. When the network traffic uses HTTPS  
> protocols the recorder does not have a way to decode and record the  
> request/response. A TestMaker user about a year ago posted a  
> message that he had set up a second proxy to handle the HTTPS  
> encryption/decryption in front of the recorder - thus making the  
> recorder compatible with HTTPS requests. I'm searching for his  
> solution.
>
> About your script, what is not working about it?
>
> Thanks.
>
> -Frank
>
> On Nov 21, 2006, at 5:41 AM, McNutt, Jason wrote:
>
>> Frank,
>> Here is the example I found but it does not work for me.  Have  
>> tried a
>> lot of different changes but still cant get it to work.  Any ideas or
>> suggestions would be much appreciated.
>>
>> Thanks,
>> Jason McNutt
>>
>> -----Original Message-----
>> From: dev-bounces at lists.pushtotest.com
>> [mailto:dev-bounces at lists.pushtotest.com] On Behalf Of Frank Cohen
>> Sent: Tuesday, November 21, 2006 1:52 AM
>> To: Load and TestMaker Developers List
>> Subject: [Dev] HTTPS proxy recorder?
>>
>> Can someone help me with a pointer to a posting that proposed a
>> solution to the proxy recorder's non-support for HTTPS protocols? I
>> remember someone came up with a solution where the proxy recorder
>> acts as the HTTPS client but I haven't found it. -Frank
>>
>> _______________________________________________
>> Dev mailing list
>> Dev at lists.pushtotest.com
>> http://lists.pushtotest.com/mailman/listinfo/dev
>>
>> <HTTPS_SSL_Reference.zip>
>> _______________________________________________
>> Dev mailing list
>> Dev at lists.pushtotest.com
>> http://lists.pushtotest.com/mailman/listinfo/dev
>
> _______________________________________________
> Dev mailing list
> Dev at lists.pushtotest.com
> http://lists.pushtotest.com/mailman/listinfo/dev
>