Re: SSL traffic from Chrome browsers in RUM (411 Views)
Reply
Occasional Contributor
gloin
Posts: 4
Registered: ‎10-02-2012
Message 1 of 4 (455 Views)

SSL traffic from Chrome browsers in RUM

Hi All

 

I have an application with https interface which is necessary to monitor by RUM. I've imported SSL key on Probe as usual and got traffic in RUM. But there is high percent of errors on Decryption Failed (no handshake) about 60%. 

After brief analysis it looks like the problem is RUM don't get traffic from Chrome browsers. I've made an experiment and it has confirmed that RUM Probe is not able to decrypt  https traffic from clients with Chrome (and Chromium) browsers. I've tried with different probe versions (8.07, 9.21) and there are no differences.

 

Does anybody have the same problem? Are there any workarounds?

 

Regards

Occasional Collector
Migo
Posts: 2
Registered: ‎04-07-2013
Message 2 of 4 (423 Views)

Re: SSL traffic from Chrome browsers in RUM

Hi,

 

We've seen once a similar problem, that was caused by some of the browsers using a ZIP feature of SSL, that is not supported. We might have a patch to this problem, but I would like to make sure it's really it - would it be possible to record a PCAP file with Wireshark on client side and give us for analysis?

 

Michael

Occasional Contributor
gloin
Posts: 4
Registered: ‎10-02-2012
Message 3 of 4 (420 Views)

Re: SSL traffic from Chrome browsers in RUM

Hi, Michael

 

Thank you for answer. Please look at the attached files. There are two pcap files recorded for different browsers (ie9 and chromium 22) for the same https page. I've got only ie traffic in RUM.

 

Anton

Occasional Contributor
gloin
Posts: 4
Registered: ‎10-02-2012
Message 4 of 4 (411 Views)

Re: SSL traffic from Chrome browsers in RUM

I've got an answer from HP Support. This is known problem in RUM. It's caused by SSL compression feature used in Chrome and Safari. They mentioned it would be fixed in 9.22

http://support.openview.hp.com/selfsolve/document/FID/DOCUMENTUM_QCCR1I76462

 

The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation.