Not able to capture HTTPS request - mobile performance testing
Android TAB and JMeter is being used to capture/ Record the application flow. But the HTTPS reqests are not capturing in JMeter. I turned off Jmeter and enabled Charles Proxy and did the recording again. After recording the same application flow in Charles I took all the HTTPS requests and placing in Jmeter. It took longer time because am doing the recording twice.
Is there any other way to capture the HTTPS traffic via JMETER?
Apprecaite your help and share your suggestions.
Regards,
Siva
android https jmeter asked Jul 18 '15 at 9:18
hsk
62
add a comment |
Android TAB and JMeter is being used to capture/ Record the application flow. But the HTTPS reqests are not capturing in JMeter. I turned off Jmeter and enabled Charles Proxy and did the recording again. After recording the same application flow in Charles I took all the HTTPS requests and placing in Jmeter. It took longer time because am doing the recording twice.
Is there any other way to capture the HTTPS traffic via JMETER?
Apprecaite your help and share your suggestions.
Regards,
Siva
android https jmeter asked Jul 18 '15 at 9:18
hsk
62
add a comment |
Android TAB and JMeter is being used to capture/ Record the application flow. But the HTTPS reqests are not capturing in JMeter. I turned off Jmeter and enabled Charles Proxy and did the recording again. After recording the same application flow in Charles I took all the HTTPS requests and placing in Jmeter. It took longer time because am doing the recording twice.
Is there any other way to capture the HTTPS traffic via JMETER?
Apprecaite your help and share your suggestions.
Regards,
Siva
android https jmeter asked Jul 18 '15 at 9:18
hsk
62
Android TAB and JMeter is being used to capture/ Record the application flow. But the HTTPS reqests are not capturing in JMeter. I turned off Jmeter and enabled Charles Proxy and did the recording again. After recording the same application flow in Charles I took all the HTTPS requests and placing in Jmeter. It took longer time because am doing the recording twice.
Is there any other way to capture the HTTPS traffic via JMETER?
Apprecaite your help and share your suggestions.
Regards,
Siva
android https jmeter android https jmeter asked Jul 18 '15 at 9:18
hsk
62
asked Jul 18 '15 at 9:18
hsk
62
asked Jul 18 '15 at 9:18
hsk
62
asked Jul 18 '15 at 9:18
hsk
62
asked Jul 18 '15 at 9:18
hsk
62
62
add a comment |
add a comment |
2 Answers
2
active
oldest
votes
Certain Android versions support only HTTP proxying out of the box, you may have to install 3rd-party software like ProxyDroid in order to be able to configure HTTPS Proxy.
Easier option is using Mobile Recorder solution, if you have doubts regarding correctness of your JMeter side of things configuration you can test Mobile Recorder.
answered Jul 19 '15 at 7:04
Dmitri T
68.9k33458
add a comment |
First use JMeter Recording Template
Then start JMeter's HTTP(S) Test Script Recorder, it will generate in jmeter/bin folder, a file called ApacheJMeterTemporaryRootCA.crt .
Copy file to your android device and install it as CA Certificate.
See How do I install a user certificate? thread for more details.
The certificate has limited life time (defaults to 7 days) but you can extend it by setting in user.properties
proxy.cert.validity=Number of days
Now the problem you'll face in Android >= 7.0 is that applications only use by default System installed Certificates.
So you'll need to ask developper of application to modify the APK, see why here.
Edit manifest and add :
android:networkSecurityConfig="@xml/network_security_config"
You'll get:
...
Then add in res/xml/network_security_config.xml this:
<?xml version="1.0" encoding="utf-8"?>
<network-security-config>
<base-config>
<trust-anchors>
<!-- Trust preinstalled CAs -->
<certificates src="system" />
<!-- Additionally trust user added CAs -->
<certificates src="user" />
</trust-anchors>
</base-config>
</network-security-config>
Note that this is needed whatever tool you use (Neoload, LoadRunner, ...)
answered Jul 18 '15 at 12:34
UBIK LOAD PACK
24.4k43466
What should be specified in the HTTPS domain field,if i am testing the performance of an Android application?...
– Farheen Khanum
Mar 12 at 11:24
add a comment |
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f31489661%2fnot-able-to-capture-https-request-mobile-performance-testing%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
Certain Android versions support only HTTP proxying out of the box, you may have to install 3rd-party software like ProxyDroid in order to be able to configure HTTPS Proxy.
Easier option is using Mobile Recorder solution, if you have doubts regarding correctness of your JMeter side of things configuration you can test Mobile Recorder.
answered Jul 19 '15 at 7:04
Dmitri T
68.9k33458
add a comment |
Certain Android versions support only HTTP proxying out of the box, you may have to install 3rd-party software like ProxyDroid in order to be able to configure HTTPS Proxy.
Easier option is using Mobile Recorder solution, if you have doubts regarding correctness of your JMeter side of things configuration you can test Mobile Recorder.
answered Jul 19 '15 at 7:04
Dmitri T
68.9k33458
add a comment |
Certain Android versions support only HTTP proxying out of the box, you may have to install 3rd-party software like ProxyDroid in order to be able to configure HTTPS Proxy.
Easier option is using Mobile Recorder solution, if you have doubts regarding correctness of your JMeter side of things configuration you can test Mobile Recorder.
answered Jul 19 '15 at 7:04
Dmitri T
68.9k33458
Certain Android versions support only HTTP proxying out of the box, you may have to install 3rd-party software like ProxyDroid in order to be able to configure HTTPS Proxy.
Easier option is using Mobile Recorder solution, if you have doubts regarding correctness of your JMeter side of things configuration you can test Mobile Recorder.
answered Jul 19 '15 at 7:04
Dmitri T
68.9k33458
answered Jul 19 '15 at 7:04
Dmitri T
68.9k33458
answered Jul 19 '15 at 7:04
Dmitri T
68.9k33458
answered Jul 19 '15 at 7:04
Dmitri T
68.9k33458
68.9k33458
add a comment |
add a comment |
First use JMeter Recording Template
Then start JMeter's HTTP(S) Test Script Recorder, it will generate in jmeter/bin folder, a file called ApacheJMeterTemporaryRootCA.crt .
Copy file to your android device and install it as CA Certificate.
See How do I install a user certificate? thread for more details.
The certificate has limited life time (defaults to 7 days) but you can extend it by setting in user.properties
proxy.cert.validity=Number of days
Now the problem you'll face in Android >= 7.0 is that applications only use by default System installed Certificates.
So you'll need to ask developper of application to modify the APK, see why here.
Edit manifest and add :
android:networkSecurityConfig="@xml/network_security_config"
You'll get:
...
Then add in res/xml/network_security_config.xml this:
<?xml version="1.0" encoding="utf-8"?>
<network-security-config>
<base-config>
<trust-anchors>
<!-- Trust preinstalled CAs -->
<certificates src="system" />
<!-- Additionally trust user added CAs -->
<certificates src="user" />
</trust-anchors>
</base-config>
</network-security-config>
Note that this is needed whatever tool you use (Neoload, LoadRunner, ...)
answered Jul 18 '15 at 12:34
UBIK LOAD PACK
24.4k43466
What should be specified in the HTTPS domain field,if i am testing the performance of an Android application?...
– Farheen Khanum
Mar 12 at 11:24
add a comment |
First use JMeter Recording Template
Then start JMeter's HTTP(S) Test Script Recorder, it will generate in jmeter/bin folder, a file called ApacheJMeterTemporaryRootCA.crt .
Copy file to your android device and install it as CA Certificate.
See How do I install a user certificate? thread for more details.
The certificate has limited life time (defaults to 7 days) but you can extend it by setting in user.properties
proxy.cert.validity=Number of days
Now the problem you'll face in Android >= 7.0 is that applications only use by default System installed Certificates.
So you'll need to ask developper of application to modify the APK, see why here.
Edit manifest and add :
android:networkSecurityConfig="@xml/network_security_config"
You'll get:
...
Then add in res/xml/network_security_config.xml this:
<?xml version="1.0" encoding="utf-8"?>
<network-security-config>
<base-config>
<trust-anchors>
<!-- Trust preinstalled CAs -->
<certificates src="system" />
<!-- Additionally trust user added CAs -->
<certificates src="user" />
</trust-anchors>
</base-config>
</network-security-config>
Note that this is needed whatever tool you use (Neoload, LoadRunner, ...)
answered Jul 18 '15 at 12:34
UBIK LOAD PACK
24.4k43466
What should be specified in the HTTPS domain field,if i am testing the performance of an Android application?...
– Farheen Khanum
Mar 12 at 11:24
add a comment |
First use JMeter Recording Template
Then start JMeter's HTTP(S) Test Script Recorder, it will generate in jmeter/bin folder, a file called ApacheJMeterTemporaryRootCA.crt .
Copy file to your android device and install it as CA Certificate.
See How do I install a user certificate? thread for more details.
The certificate has limited life time (defaults to 7 days) but you can extend it by setting in user.properties
proxy.cert.validity=Number of days
Now the problem you'll face in Android >= 7.0 is that applications only use by default System installed Certificates.
So you'll need to ask developper of application to modify the APK, see why here.
Edit manifest and add :
android:networkSecurityConfig="@xml/network_security_config"
You'll get:
...
Then add in res/xml/network_security_config.xml this:
<?xml version="1.0" encoding="utf-8"?>
<network-security-config>
<base-config>
<trust-anchors>
<!-- Trust preinstalled CAs -->
<certificates src="system" />
<!-- Additionally trust user added CAs -->
<certificates src="user" />
</trust-anchors>
</base-config>
</network-security-config>
Note that this is needed whatever tool you use (Neoload, LoadRunner, ...)
answered Jul 18 '15 at 12:34
UBIK LOAD PACK
24.4k43466
First use JMeter Recording Template
Then start JMeter's HTTP(S) Test Script Recorder, it will generate in jmeter/bin folder, a file called ApacheJMeterTemporaryRootCA.crt .
Copy file to your android device and install it as CA Certificate.
See How do I install a user certificate? thread for more details.
The certificate has limited life time (defaults to 7 days) but you can extend it by setting in user.properties
proxy.cert.validity=Number of days
Now the problem you'll face in Android >= 7.0 is that applications only use by default System installed Certificates.
So you'll need to ask developper of application to modify the APK, see why here.
Edit manifest and add :
android:networkSecurityConfig="@xml/network_security_config"
You'll get:
...
Then add in res/xml/network_security_config.xml this:
<?xml version="1.0" encoding="utf-8"?>
<network-security-config>
<base-config>
<trust-anchors>
<!-- Trust preinstalled CAs -->
<certificates src="system" />
<!-- Additionally trust user added CAs -->
<certificates src="user" />
</trust-anchors>
</base-config>
</network-security-config>
Note that this is needed whatever tool you use (Neoload, LoadRunner, ...)
answered Jul 18 '15 at 12:34
UBIK LOAD PACK
24.4k43466
edited Sep 10 at 19:35
answered Jul 18 '15 at 12:34
UBIK LOAD PACK
24.4k43466
answered Jul 18 '15 at 12:34
UBIK LOAD PACK
24.4k43466
answered Jul 18 '15 at 12:34
UBIK LOAD PACK
24.4k43466
24.4k43466
What should be specified in the HTTPS domain field,if i am testing the performance of an Android application?...
– Farheen Khanum
Mar 12 at 11:24
add a comment |
What should be specified in the HTTPS domain field,if i am testing the performance of an Android application?...
– Farheen Khanum
Mar 12 at 11:24
What should be specified in the HTTPS domain field,if i am testing the performance of an Android application?...
– Farheen Khanum
Mar 12 at 11:24
What should be specified in the HTTPS domain field,if i am testing the performance of an Android application?...
– Farheen Khanum
Mar 12 at 11:24
add a comment |
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f31489661%2fnot-able-to-capture-https-request-mobile-performance-testing%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
