Re: SSL traffic from Chrome browsers in RUM (329 Views)
Reply
Occasional Contributor
gloin
Posts: 4
Registered: ‎10-02-2012
Message 1 of 4 (373 Views)

SSL traffic from Chrome browsers in RUM

Hi All

 

I have an application with https interface which is necessary to monitor by RUM. I've imported SSL key on Probe as usual and got traffic in RUM. But there is high percent of errors on Decryption Failed (no handshake) about 60%. 

After brief analysis it looks like the problem is RUM don't get traffic from Chrome browsers. I've made an experiment and it has confirmed that RUM Probe is not able to decrypt  https traffic from clients with Chrome (and Chromium) browsers. I've tried with different probe versions (8.07, 9.21) and there are no differences.

 

Does anybody have the same problem? Are there any workarounds?

 

Regards

Please use plain text.
Occasional Collector
Migo
Posts: 2
Registered: ‎04-07-2013
Message 2 of 4 (341 Views)

Re: SSL traffic from Chrome browsers in RUM

Hi,

 

We've seen once a similar problem, that was caused by some of the browsers using a ZIP feature of SSL, that is not supported. We might have a patch to this problem, but I would like to make sure it's really it - would it be possible to record a PCAP file with Wireshark on client side and give us for analysis?

 

Michael

Please use plain text.
Occasional Contributor
gloin
Posts: 4
Registered: ‎10-02-2012
Message 3 of 4 (338 Views)

Re: SSL traffic from Chrome browsers in RUM

Hi, Michael

 

Thank you for answer. Please look at the attached files. There are two pcap files recorded for different browsers (ie9 and chromium 22) for the same https page. I've got only ie traffic in RUM.

 

Anton

Please use plain text.
Occasional Contributor
gloin
Posts: 4
Registered: ‎10-02-2012
Message 4 of 4 (329 Views)

Re: SSL traffic from Chrome browsers in RUM

I've got an answer from HP Support. This is known problem in RUM. It's caused by SSL compression feature used in Chrome and Safari. They mentioned it would be fixed in 9.22

http://support.openview.hp.com/selfsolve/document/FID/DOCUMENTUM_QCCR1I76462

 

Please use plain text.
The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation