Monday, 19 January 2015

Recording secure site in LoadRunner


A while ago, when I tried to record a secure site i couldn't get through the recording successfully. While accessing an application manually it worked fine and creating a manual script with web_add_header it worked fine, but when just hitting record in vugen with the http protocol, I was ended up "page cannot be displayed". Below are some of the proposed solutions to overcome this issue.


Proposed solutions:

I don't know that this will solve your problem, but I have seen somewhat similar behavior when dealing with security certificates on SSL enable pages. Try installing or re-installing the security certificate for the site in IE before you try recording the script.

  • Take a look at your credentials in the system and your browser vendor/version. Make sure that you have admin rights and that you are using a 32 bit browser (VUGEN is a 32 bit application) is one supported for your version of LoadRunner
  • To download security patch from LR site
    • http://www.jds.net.au/tech-tips/problems-recording-https-with-vugen/
  • This is affecting LoadRunner Vugen versions 9 up to and including 11.5 that are trying to record secure sites (https:// www…).  The problem is due to "Microsoft Security Update KB 2661254" (Microsoft Security Advisory: Update for minimum certificate key length) now requiring 1024 bit RSA Certificates and LoadRunner Vugen currently uses 512 bit RSA Certificates .  Please note HP is working on an update.  In the meantime, there are two workarounds.   The First workaround is to uninstall “Microsoft Security Update KB 2661254" via the control panel add and remove Programs which is the easiest method. The second workaround is a registry edit adjusting the acceptable length of the certificate.  Please see the article below For details of the registry edit as it varies from OS to OS.
  • For operating systems with Windows Vista, Windows 7 and Windows Server 2008, you can use certutil commands to change these registry settings. On Windows XP, Windows Server 2003, and Windows Server 2003 R2, you cannot use certutil commands to change these registry settings. However, you can use Registry Editor, reg command, or reg file.
    • At a CMD prompt type 
      • certutil -setreg chain\minRSAPubKeyBitLength 512
    • The "MinRsaPubKeyBitLength" is a DWORD value that defines the minimum allowed RSA             key length. By default, this value is not present, and the minimum allowed RSA key length         is 1024. You can use certutil to set this value to 512 by running the above command:
    • For more detail about this issue and the fix please read "Microsoft Security Advisory:Update for minimum certificate key length".
              http://technet.microsoft.com/security/advisory/2661254
  • KB2839229 is the latest along with the one listed on this page. In case if you got this MS Security patch installed, uninstalling the same will help recording the https urls.




2 comments:

  1. Hello,
    The Article on Recording secure site in LoadRunner gives detailed information about it. Thanks for Sharing the information about Secuting Site with LoadRunner For More information check the detail on the Loadrunner testing here Mobile App Testing

    ReplyDelete
  2. Really Happy to say your post is very interesting. Keep sharing your information regularly for my future reference. Thanks Again.

    Pen testing services
    Vulnerability assessment services
    Load Testing Services
    Mobile app testing services

    ReplyDelete