Highlighted
Absent Member.
Absent Member.
11223 views

SSL Certificate Exceptions in AJAX TruClient?

Jump to solution

Has anyone been able to add an SSL certificate exception?  This functionality should be available for testing disaster recovery sites - dr.example.com is typically configured with the SSL certificate for www.example.com.

 

Would like to be able to add the site as an exception.  Recording that process doesn't work; TruClient doesn't seem able to act upon the warning window that pops up requesting confirmation.

 

Running LR 11 Patch 3.  Tried modifying various settings in the Encryption tab of Tools > TruClient General Settings dialog box to no avail.

Tags (2)
0 Likes
1 Solution

Accepted Solutions
Highlighted
New Member..
New Member..

Re: SSL Certificate Exceptions in AJAX TruClient?

Jump to solution

Found a solution:

 

The issue is that the cert_override.txt document located at \profiles\interactive needs to be updated when the cert expires and you need a new one.  To avoid re-scripting, open a new TruClient script and establish the certificates there and save the script.  From there open the newly created script with the new certificates and copy the \profiles\interactive\cert_override.txt from that script to your old script.  It should now work properly.  TruClient establishes the certs during the recording, so simply adding them and performing a save as won't work.

 

Hope this helps everyone!

View solution in original post

Tags (2)
20 Replies
Highlighted
Absent Member.. Absent Member..
Absent Member..

Re: SSL Certificate Exceptions in AJAX TruClient?

Jump to solution

Hello

Plase open a case with support, I think this require dedicated assitance, not sure if is even possible.

0 Likes
Highlighted
Absent Member.. Absent Member..
Absent Member..

Re: SSL Certificate Exceptions in AJAX TruClient?

Jump to solution

Hi,

 

I was able to add an exception in by going to "Edit Browser Options -> Encryption Tab -> View Certificates -> Servers Tab.

 

Then you can add an exception in there. Just type in the URL/hostname, retrieve the cert and you're good to go.

0 Likes
Highlighted
Absent Member.. Absent Member..
Absent Member..

Re: SSL Certificate Exceptions in AJAX TruClient?

Jump to solution

Hi, This did work for the first session, but if you stop and start the session it doesn't remember the settings.  Was there some other change you made for the settings to get preserved after restarting TrueClient?

0 Likes
Highlighted
Absent Member.
Absent Member.

Re: SSL Certificate Exceptions in AJAX TruClient?

Jump to solution

Hi All,

Did any one get the solution to this? I am facing the same issue, tried adding the exception in truclient general settings as mentioned above but no luck.

0 Likes
Highlighted
Absent Member.
Absent Member.

Re: SSL Certificate Exceptions in AJAX TruClient?

Jump to solution

Hi,

 

 

I can see that in the FF general settings you do not see the exception after adding it, but when performing a replay FF acts as if there is an exception (no warning). Does the browser still shows you the warning page?

 

Thanks

Yehuda Sabag
TruClient R&D
Tags (1)
0 Likes
Highlighted
Absent Member.. Absent Member..
Absent Member..

Re: SSL Certificate Exceptions in AJAX TruClient?

Jump to solution

I'm having the same issue, with Vugen 11.51 + TruClient for Firefox. I've added it through Tools->TruClient General Settings, then clicking 'Add Exception' on the 'Encryption' tab.

0 Likes
Highlighted
Absent Member.. Absent Member..
Absent Member..

Re: SSL Certificate Exceptions in AJAX TruClient?

Jump to solution

I am having the same problem with Web protocol.

0 Likes
Highlighted
New Member..
New Member..

Re: SSL Certificate Exceptions in AJAX TruClient?

Jump to solution

I am having the same issue.  After adding exception, either through the Firefox window or by bringing up the settings (TruClient General Settings) window and adding it that way.  Can also be added by importing the cert in the settings window.  The certificate gets added but seems to require a new script to be started fresh and recorded.  If attempting with an existing script the "this connection is untrusted" window keeps appearing even if the exception/cert has been added.  Re-recording after adding the new cert/exception is the only way I've found to get around this issue.  Kind of a pain when you have to re-record after the cert expires every 6 months or so.

 

0 Likes
Highlighted
New Member..
New Member..

Re: SSL Certificate Exceptions in AJAX TruClient?

Jump to solution

Found a solution:

 

The issue is that the cert_override.txt document located at \profiles\interactive needs to be updated when the cert expires and you need a new one.  To avoid re-scripting, open a new TruClient script and establish the certificates there and save the script.  From there open the newly created script with the new certificates and copy the \profiles\interactive\cert_override.txt from that script to your old script.  It should now work properly.  TruClient establishes the certs during the recording, so simply adding them and performing a save as won't work.

 

Hope this helps everyone!

View solution in original post

Tags (2)
Highlighted
Absent Member.. Absent Member..
Absent Member..

Re: SSL Certificate Exceptions in AJAX TruClient?

Jump to solution

I wish I read this thread early, so it would give me the hint and save me lot of time. In my case, everything else is same, but the file I had to replace is the cert8.db file in the same folder. BTW, I didn't need to replace the cert_override.txt file.

this work around works, so I don't need to re-record entire script, but I'm thinking there should be  a way to import the certificates, how the cert8 file gets created in the first place?

0 Likes
Highlighted
Absent Member.. Absent Member..
Absent Member..

Re: SSL Certificate Exceptions in AJAX TruClient?

Jump to solution

Continue to this thread, we definitely need to find a way to import the certificate to the cert8.db file.

In my case, I have a load balancer and there are multiple servers behind it, the script may hit a different server each time, then the server returns with different certificate, the cert8.db created by the work around only contains 1 server certificate, I need to find a way to import all certificates to the cert8.db file, so that no matter which server the script connects to, it will NOT get the security warning, which eventually errors out the script.

 

Anyone had simular experience?

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.