All,<br><br> I have a problem similar to the one described in <a href="http://mirt.net/pipermail/stunnel-users/2006-October/001324.html" target="_blank">http://mirt.net/pipermail/stunnel-users/2006-October/001324.html</a>
i.e. I ***wish*** to use the recording functionalities of JMeter while accessing an apache-SSL-secured Tomcat web server.
<br><br> JMeter does not allow recording on SSL so I have to ... un-cipher my HTTPS sessions, stunnel looks like the right choice.<br><br> Being an stunnel newbie, I started here: <a href="http://www.stunnel.org/examples/https_client.html">
http://www.stunnel.org/examples/https_client.html</a> , this HOWTO looks quite close to my configuration.<br><br> We have a plain-vanilla tomcat server behind an apache/SSL, and I want to access this web application from an HTTP-only browser.
<br><br> So, I configure stunnel as a "client", I run it on my PC, with the following configuration:<br><br>[psuedo-https]<br>accept = 8080<br>connect = <server>:443<br>TIMEOUTclose = 0<br><br>I read it as follows: stunnel talk cleartext HTTP on the local 8080 port and forwards in crypted HTTPS on the <server> port 443
<br><br>I set the URL in my browser to <a href="http://localhost:8080/oi/">http://localhost:8080/oi/</a> and this happens:<br><br>1) Ethereal sez that my PC and <server> start an SSLv3 conversation, good, we're on track
<br> <br>2) I have an HTTP analyzer plugged in my browser that shows me the content of the first GET<br> that is a redirect to an SSO server (on the same <server>:443 port) for user authentication<br><br> https://<server>/ssoserver/login?service=......
<br> <br>3) My browser then issue a GET to https://<server>/ssoserver/login?service=...... <br> and is GAME OVER, my beloved stunnel is cleanly bypassed by the<br> hardcoded https://<server>/ string
<br><br>Any suggestion? Is it a dead end?<br>Any dirty trick I could play with? Such as running multiple stunnel instances, setting <server> = localhost in my hosts file etc.?<br><br>Thanks,<br><br> Ezio
<br><br>-- <br>Ezio Ostorero, Catania<br>Seltz e limone col sale. Arriminatu, non annacatu