Hi Jim, from the stacktrace it looks like you are using JMeter 4.0. Have you tried a newer version? If not, what are your reasons for not updating?
One good reason for updating might be https://bz.apache.org/bugzilla/show_bug.cgi?id=62766 If your problem persists after upgrading, you might want to share test data, that shows the aliases from your keystore and the relevant csv entries. If you can't share that data, you can try to set the log level for the http components to debug (in newer JMeter versions that can be done with bin/log4j2.xml). Felix Am 23.02.20 um 09:19 schrieb [email protected]: > Hi, > I don't know what is wrong yet, but it has something to do with the client > certs in the JKS vs. the aliases in the CSV config element, I think. > I did find that if I run 16 threads 1 time, no problem, but if I run 17 > thread 1 time, then I start getting the error. > I am kind of unclear about the meaning of the alias start index and the alias > end index in the Keystore configuration? > I think that the "unknown_certificate" it is referring to is that jmeter is > looking for a cert with an alias, but cannot find it in the JKS, and then it > is causing the "unknown_certificate" error, but I cannot figure out why this > might be happening. > Jim > > > > > On Sunday, February 23, 2020, 2:02:56 AM UTC, [email protected] > <[email protected]> wrote: > > Hi, > I checked the jmeter.log, and I don't see any additional info about this > error. > Any idea which certificate it is referring to with the "unknown_certificate"? > Jim > > > On Saturday, February 22, 2020, 6:48:49 PM UTC, Felix Schumacher > <[email protected]> wrote: > > > > Am 22. Februar 2020 16:41:07 MEZ schrieb "[email protected]" > <[email protected]>: >> Hi, >> I am using Jmeter to test client certificate authentication. >> I have a JKS with a bunch of client certs (imported from pfx files) and >> I have Jmeter properties pointing to that JKS. >> >> In my test plan, I have a CSV Configuration (pointing to a text file >> with the list of aliases in the JKS) and a Keystore Configuration and >> it seems to work ok until I run a longer test, then I start getting the >> following errors: >> javax.net.ssl.SSLHandshakeException: Received fatal alert: >> certificate_unknown >> at sun.security.ssl.Alerts.getSSLException(Unknown Source) >> at sun.security.ssl.Alerts.getSSLException(Unknown Source) >> at sun.security.ssl.SSLSocketImpl.recvAlert(Unknown Source) >> at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source) >> at sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown >> Source) >> at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source) >> at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source) >> at >> org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:553) >> at >> org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:414) >> at >> org.apache.jmeter.protocol.http.sampler.LazySchemeSocketFactory.connectSocket(LazySchemeSocketFactory.java:97) >> at >> org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:180) >> at >> org.apache.jmeter.protocol.http.sampler.hc.ManagedClientConnectionImpl.open(ManagedClientConnectionImpl.java:318) >> at >> org.apache.jmeter.protocol.http.sampler.MeasuringConnectionManager$MeasuredConnection.open(MeasuringConnectionManager.java:114) >> at >> org.apache.http.impl.client.DefaultRequestDirector.tryConnect(DefaultRequestDirector.java:610) >> at >> org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:445) >> at >> org.apache.http.impl.client.AbstractHttpClient.doExecute(AbstractHttpClient.java:835) >> at >> org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:83) >> at >> org.apache.jmeter.protocol.http.sampler.HTTPHC4Impl.executeRequest(HTTPHC4Impl.java:697) >> at >> org.apache.jmeter.protocol.http.sampler.HTTPHC4Impl.sample(HTTPHC4Impl.java:455) >> at >> org.apache.jmeter.protocol.http.sampler.HTTPSamplerProxy.sample(HTTPSamplerProxy.java:74) >> at >> org.apache.jmeter.protocol.http.sampler.HTTPSamplerBase.followRedirects(HTTPSamplerBase.java:1542) >> at >> org.apache.jmeter.protocol.http.sampler.HTTPSamplerBase.resultProcessing(HTTPSamplerBase.java:1636) >> at >> org.apache.jmeter.protocol.http.sampler.HTTPAbstractImpl.resultProcessing(HTTPAbstractImpl.java:525) >> at >> org.apache.jmeter.protocol.http.sampler.HTTPHC4Impl.sample(HTTPHC4Impl.java:536) >> at >> org.apache.jmeter.protocol.http.sampler.HTTPSamplerProxy.sample(HTTPSamplerProxy.java:74) >> at >> org.apache.jmeter.protocol.http.sampler.HTTPSamplerBase.sample(HTTPSamplerBase.java:1189) >> at >> org.apache.jmeter.protocol.http.sampler.HTTPSamplerBase.sample(HTTPSamplerBase.java:1178) >> at >> org.apache.jmeter.threads.JMeterThread.executeSamplePackage(JMeterThread.java:490) >> at >> org.apache.jmeter.threads.JMeterThread.processSampler(JMeterThread.java:416) >> at >> org.apache.jmeter.threads.JMeterThread.run(JMeterThread.java:250) >> at java.lang.Thread.run(Unknown Source) >> What certificate is it referring to when it says "unknown_certificate"? >> Can anyone tell me what the problem might be? > Have you looked into the file jmeter.log? Is there more information? > > Felix > >> Thanks,Jim > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
