Re: SSL Certificate Exceptions in AJAX TruClient? (2546 Views)
Reply
Occasional Contributor
Posts: 3
Registered: ‎11-07-2011
Message 1 of 12 (3,488 Views)

SSL Certificate Exceptions in AJAX TruClient?

Has anyone been able to add an SSL certificate exception?  This functionality should be available for testing disaster recovery sites - dr.example.com is typically configured with the SSL certificate for www.example.com.

 

Would like to be able to add the site as an exception.  Recording that process doesn't work; TruClient doesn't seem able to act upon the warning window that pops up requesting confirmation.

 

Running LR 11 Patch 3.  Tried modifying various settings in the Encryption tab of Tools > TruClient General Settings dialog box to no avail.

HP Expert
Posts: 669
Registered: ‎04-06-2011
Message 2 of 12 (3,441 Views)

Re: SSL Certificate Exceptions in AJAX TruClient?

Hello

Plase open a case with support, I think this require dedicated assitance, not sure if is even possible.

Advisor
Posts: 24
Registered: ‎05-05-2010
Message 3 of 12 (3,363 Views)

Re: SSL Certificate Exceptions in AJAX TruClient?

Hi,

 

I was able to add an exception in by going to "Edit Browser Options -> Encryption Tab -> View Certificates -> Servers Tab.

 

Then you can add an exception in there. Just type in the URL/hostname, retrieve the cert and you're good to go.

Occasional Visitor
Posts: 1
Registered: ‎07-09-2012
Message 4 of 12 (2,951 Views)

Re: SSL Certificate Exceptions in AJAX TruClient?

Hi, This did work for the first session, but if you stop and start the session it doesn't remember the settings.  Was there some other change you made for the settings to get preserved after restarting TrueClient?

Occasional Visitor
Posts: 1
Registered: ‎05-29-2013
Message 5 of 12 (2,789 Views)

Re: SSL Certificate Exceptions in AJAX TruClient?

Hi All,

Did any one get the solution to this? I am facing the same issue, tried adding the exception in truclient general settings as mentioned above but no luck.

Advisor
Posts: 14
Registered: ‎08-10-2011
Message 6 of 12 (2,781 Views)

Re: SSL Certificate Exceptions in AJAX TruClient?

Hi,

 

 

I can see that in the FF general settings you do not see the exception after adding it, but when performing a replay FF acts as if there is an exception (no warning). Does the browser still shows you the warning page?

 

Thanks

Yehuda Sabag
TruClient R&D
Highlighted
Valued Contributor
Posts: 75
Registered: ‎01-05-2012
Message 7 of 12 (2,546 Views)

Re: SSL Certificate Exceptions in AJAX TruClient?

I'm having the same issue, with Vugen 11.51 + TruClient for Firefox. I've added it through Tools->TruClient General Settings, then clicking 'Add Exception' on the 'Encryption' tab.

Visitor
Posts: 2
Registered: ‎08-22-2013
Message 8 of 12 (2,533 Views)

Re: SSL Certificate Exceptions in AJAX TruClient?

I am having the same problem with Web protocol.

Visitor
Posts: 2
Registered: ‎06-04-2012
Message 9 of 12 (2,522 Views)

Re: SSL Certificate Exceptions in AJAX TruClient?

I am having the same issue.  After adding exception, either through the Firefox window or by bringing up the settings (TruClient General Settings) window and adding it that way.  Can also be added by importing the cert in the settings window.  The certificate gets added but seems to require a new script to be started fresh and recorded.  If attempting with an existing script the "this connection is untrusted" window keeps appearing even if the exception/cert has been added.  Re-recording after adding the new cert/exception is the only way I've found to get around this issue.  Kind of a pain when you have to re-record after the cert expires every 6 months or so.

 

Visitor
Posts: 2
Registered: ‎06-04-2012
Message 10 of 12 (2,515 Views)

Re: SSL Certificate Exceptions in AJAX TruClient?

Found a solution:

 

The issue is that the cert_override.txt document located at \profiles\interactive needs to be updated when the cert expires and you need a new one.  To avoid re-scripting, open a new TruClient script and establish the certificates there and save the script.  From there open the newly created script with the new certificates and copy the \profiles\interactive\cert_override.txt from that script to your old script.  It should now work properly.  TruClient establishes the certs during the recording, so simply adding them and performing a save as won't work.

 

Hope this helps everyone!

Occasional Advisor
Posts: 8
Registered: ‎11-04-2014
Message 11 of 12 (450 Views)

Re: SSL Certificate Exceptions in AJAX TruClient?

I wish I read this thread early, so it would give me the hint and save me lot of time. In my case, everything else is same, but the file I had to replace is the cert8.db file in the same folder. BTW, I didn't need to replace the cert_override.txt file.

this work around works, so I don't need to re-record entire script, but I'm thinking there should be  a way to import the certificates, how the cert8 file gets created in the first place?

Occasional Advisor
Posts: 8
Registered: ‎11-04-2014
Message 12 of 12 (410 Views)

Re: SSL Certificate Exceptions in AJAX TruClient?

Continue to this thread, we definitely need to find a way to import the certificate to the cert8.db file.

In my case, I have a load balancer and there are multiple servers behind it, the script may hit a different server each time, then the server returns with different certificate, the cert8.db created by the work around only contains 1 server certificate, I need to find a way to import all certificates to the cert8.db file, so that no matter which server the script connects to, it will NOT get the security warning, which eventually errors out the script.

 

Anyone had simular experience?

The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation.