Vugen Error when recording from a site using HSTS (HTTP Strict Transport Security)
Hi fellow Load Testers,
I'm trying to record a script using LR VuGen 12.02 (Web HTTP/S protocol) from a site that is using HSTS (HTTP Strict Transport Security) but cannot record anything because the IE Browser reports a 'DLG_FLAGS_SEC_CERT_CN_INVALID' error at the start and I can't progress any further. It seems that this is happening because the site is using HSTS (HTTP Strict Transport Security):
Error reported by IE:
The hostname in the website’s security certificate differs from the website you are trying to visit.
Error Code: DLG_FLAGS_SEC_CERT_CN_INVALID
Because this site uses HTTP Strict Transport Security, you cannot continue to this site at this time.
I'm able to access the site successfully manually using IE so the error only happens when I try to record a script in VuGen which indicates that the problem only happens when the VuGen proxy is listening in between the IE client and the web server.
Have any of you come across this problem with HTST before? If so, can you tell me how you resolved it, please?
Many thanks and I look forward to your replies.
HSTS recording is not supported if the site does not accept SSL2/3.
Try use TruClient protocol instead of Web protocol.
If fails, you can still use Citrix or Remote Desktop protocol so that IE is not altered in any way.
Thank you for your reply.
I did look at the troubleshooting and limitations page already and found this limitation with recording HSTS but just wanted to get some suggestions. Thank you for your confirming that HSTS is not supported. I'll try using TruClient protocol as you suggested and see if that works.