article https and Web Application Transaction (WAT) Monitor

Web Browsers are continuously being updated to improve security.  Some recent patches have changed how browsers handle the SSL Certificates required for https encryption.  This change may cause issues when using the up.time WAT Recorder to record https web transactions.

This article provides some possible workarounds for getting the WAT Recorder to work with common web browsers.

Internet Explorer

The Cumulative Security Update for Internet Explorer patch changes how the browser handles Self Signed SSL Certificates, which are used with the WAT Recorder.  To use IE to record an https session, this patch will need to be un-installed from the Windows desktop being used to record the session (not the monitoring station itself).
 
After you have successfully recorded the WAT session, you can re-install the patch, as the monitor itself is not affected, just the ability to record the session is impaired.

For more details about the Cumulative update, please refer to Microsoft Security Bulletin MS12-037.
 
Firefox 

Firefox should allow you to record a WAT session after acknowledging the warnings that the connection is untrusted, and that the page is using an invalid security certificate.  However, it is possible to get stuck on the following error even after adding exceptions for the page you are trying to record a WAT session for.

The certificate is not trusted because it is self-signed.
The certificate is only valid for uptime software end to end monitor keystore.
 
Error code: sec_error_untrusted_issuer
If you are getting stuck on this particular error, try the following process to clear Firefox's cached SSL certs & exceptions before trying to record the WAT session again:
  1. Launch Firefox and enter about:support in the address bar.  On the page that opens, click on the  Show Folder button beside Profile Folder.
  2. This will open the folder that contains the contents of your current Firefox profile.  Leave this window open but quit Firefox completely.
  3. You should see two files in the folder:

cert8.db (this file contains the cached SSL certs)

cert_override.txt (this file contains the domains with acknowledged exceptions)

 

Both of these files will need to be either re-named or deleted before restarting Firefox.  Firefox will generate new versions of these files on launch if they do not exist with the default names.

After re-starting Firefox, start the WAT Recorder and change your proxy settings before visiting the https page you intend to monitor.  Otherwise you will need to quit and remove the cert8.db file again. 


You should now be able to successfully record a https WAT session after adding exceptions for the intended https page, but without getting stuck on the warning about self-signed certificates.

If you are still having issues recording an https protected WAT session after attempting the above workarounds, please contact [email protected] and provide the following information:
  1. Type and version of web browser are you using to record the WAT session.
  2. Any error messages received either in the WAT recorder or the web browser itself.
  3. Details of the partial WAT script you were able to record.
  4. Link to the https protected page if it is externally available over the Internet.

Related Articles


Does the Web Application Transaction monitor download images?

RatingViews
article

Image handling within the WAT monitor is handled differently depending on the playback script. For example: If the WAT script was page0 GET http://www.uptimesoftware.com:80/index.html GET...

By: uptime Support | Date Created: 6-13-2009 | Last Modified: 8-10-2011 | Index: 371

  2314

Application Availability Does Not Match Average Status of Service...

RatingViews
article

By: uptime Support | Date Created: 7-9-2007 | Last Modified: 6-28-2011 | Index: 192

  3924

Ensuring an Application is Always Running

RatingViews
article

up.time's Process Count Check monitor can help you ensure an application is always running

By: uptime Support | Date Created: 10-30-2007 | Last Modified: 6-27-2011 | Index: 223

  11948

Implementing SSL for the Web Interface

RatingViews
article

By: uptime Support | Date Created: 2-22-2006 | Last Modified: 6-4-2014 | Index: 057

  8870

How do I create an Application?

RatingViews
article

Applications are used in up.time to group together dispersed service monitors into a single status of up/down. To create an application follow these steps 1) Create all of the service monitors you...

By: uptime Support | Date Created: 12-31-1969 | Last Modified: 8-25-2011 | Index: 344

  4076

User Comments



No comments have been posted.

Copyright © 2021 IDERA, Inc.   Legal   Privacy Statement