Hi All,

I am testing a secure website, and have not problem in the production system, hitting and logging into https://registration.airnewzealand.com/spr/login/login.jsp <https://registration.airnewzealand.com/spr/login/login.jsp>

However, in our test environment, if you access this page in IE you see a popup saying "Unable to verify the identity of registration.airnewzealand.com <http://registration.airnewzealand.com> as a trusted site." etc etc.

When I try to log in on this page in the test environment (by using a proxy) using the following code:

<?xml version="1.0"?> <!DOCTYPE project SYSTEM " WebTest.dtd"> <project name="OLH" basedir="." default="main"> <property name="webtest.home" location="..\.."/> <import file="${ webtest.home}/lib/taskdef.xml"/> <target name="main"> <setproxy proxyhost="10.16.32.33 <http://10.16.32.33>" proxyport="4005" /> <!-- set to FT3 direct proxy --> <webtest name="ISIS SFF NZ Search"> <config host="any" port="1234" protocol="http" basepath="" summary="true" saveresponse="true" resultpath="..\webtest-results" resultfile="results.xml" showhtmlparseroutput="false" autorefresh="true" haltonfailure="false" timeout="120"> <option name="RedirectEnabled" value="true" /> <header name="User-Agent" value="WebTest" /> </config> <steps> <groovy> def logFile = new File('./webtest.log') logFile.append("\nTest Start\n") logFile.append(step.context.webClient.toString()) logFile.append("\nTest End\n") </groovy> <invoke url="https://registration.airnewzealand.com/spr/login/login.jsp"/> <!-- This fails with a "connection timed out error. It also fails in this format: https://registration.airnewzealand.com/spr?login?login.jsp --> <verifyTitle text="Air New Zealand - My Account"/> <verifyText text="Login"/> <setInputField name="username" value="966594"/> <setInputField name="password" value="password01"/> <!-- Qual value --> <clickButton description="Click image button: " name="image"/> <verifyTitle text="Air New Zealand - My Airpoints Account"/> <verifyText text="My Airpoints Account"/> </steps> </webtest> </target> </project>

I get:

C:\WebTest\doc\ISIS>webtest -debug -f testFT3.xml > out.txt

BUILD FAILED C:\WebTest\doc\ISIS\testFT3.xml:8: Canoo Webtest: R_1438. Test failed. Exception raised: com.canoo.webtest.engine.StepExecutionException: Unexpected ex ception caught: javax.net.ssl.SSLHandshakeException: sun.security.validator.Vali datorException: PKIX path building failed: sun.security.provider.certpath.SunCer tPathBuilderException: unable to find valid certification path to requested targ et, Step: InvokePage at C:\WebTest\doc\ISIS\testFT3.xml:32: with (taskName="inv oke")com.canoo.webtest.engine.StepExecutionException: Unexpected exception caugh t: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorExceptio n: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderE xception: unable to find valid certification path to requested target, Step: Inv okePage at C:\WebTest\doc\ISIS\testFT3.xml:32: with (taskName="invoke") at com.canoo.webtest.steps.Step.handleUnexpectedException(Step.java:413)

[rest of the stack below if you are interested]

and the relevant bit of the webtest debug output is:

Build sequence for target(s) `main' is [main] Complete build sequence is [main, ]

main: [setproxy] Setting proxy to 10.16.32.33:4005 <http://10.16.32.33:4005> Setting project property: webtest.version -> Canoo Webtest: R_1438. Adding reference: ant.PropertyHelper Adding reference: ant.PropertyHelper [Fatal Error] :-1:-1: Premature end of file.

A developer here has passed on this code to work around a similar problem in httpunit:

private static void trustAll() { TrustManager[] trustAllCerts = new TrustManager[] { new X509TrustManager() {

public java.security.cert.X509Certificate [] getAcceptedIssuers() { return null; }

public void checkClientTrusted(java.security.cert.X509Certificate[] certs, String authType) { }

public void checkServerTrusted( java.security.cert.X509Certificate[] certs, String authType) { } } };

HostnameVerifier hostnameVerifier = new HostnameVerifier() { public boolean verify(String rserver, SSLSession sses) {

if (!rserver.equals(sses.getPeerHost())) { if (!warnedCertificates.contains(sses.getPeerHost())) { warnedCertificates.add(sses.getPeerHost()); log.warn("certificate <" + sses.getPeerHost() + "> does not match host <" + rserver + ">"); } }

return true; } };

Unfortunately I do not have access to him to work on htmlunit if in fact there is a similar issue there, and I am not a java developer so don't fancy my chances messing with the htmlunit internals.

Can anyone confirm whether this is a defect (limitation?) in htmlunit, and whether I should open an issue, and hopefully a solution so I can continue writing my webtests? Thanks.

regards, John

at com.canoo.webtest.steps.AbstractBrowserAction.handleUnexpectedExcepti on(AbstractBrowserAction.java:120) at com.canoo.webtest.steps.request.TargetHelper.protectedGoto (TargetHelp er.java:115) at com.canoo.webtest.steps.request.AbstractTargetAction.gotoTarget(Abstr actTargetAction.java:106) at com.canoo.webtest.steps.request.AbstractTargetAction.doExecute(Abstra ctTargetAction.java:78) at com.canoo.webtest.steps.Step.execute(Step.java:106) at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:275) at org.apache.tools.ant.Task.perform (Task.java:364) at com.canoo.webtest.ant.TestStepSequence.executeSteps(TestStepSequence. java:43) at com.canoo.webtest.ant.TestStepSequence.doExecute(TestStepSequence.jav a:31) at com.canoo.webtest.steps.Step.execute (Step.java:106) at org.apache.tools.ant.Task.perform(Task.java:364) at com.canoo.webtest.ant.WebtestTask.execute(WebtestTask.java:164) at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java :275) at org.apache.tools.ant.Task.perform(Task.java:364) at org.apache.tools.ant.Target.execute(Target.java:341) at org.apache.tools.ant.Target.performTasks(Target.java:369) at org.apache.tools.ant.Project.executeSortedTargets(Project.java:1216) at org.apache.tools.ant.Project.executeTarget(Project.java:1185) at org.apache.tools.ant.helper.DefaultExecutor.executeTargets(DefaultExe cutor.java:40) at org.apache.tools.ant.Project.executeTargets(Project.java:1068) at org.apache.tools.ant.Main.runBuild(Main.java:668) at org.apache.tools.ant.Main.startAnt(Main.java:187) at org.apache.tools.ant.launch.Launcher.run(Launcher.java:246) at org.apache.tools.ant.launch.Launcher.main(Launcher.java:67) Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.Validator Exception: PKIX path building failed: sun.security.provider.certpath.SunCertPath BuilderException: unable to find valid certification path to requested target at com.sun.net.ssl.internal.ssl.Alerts.getSSLException (Alerts.java:150) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1 476) at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:174) at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE (Handshaker.java:168) at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(Clien tHandshaker.java:847) at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHa ndshaker.java :106) at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:4 95) at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.jav a:433) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord (SSLSocketImpl.j ava:815) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SS LSocketImpl.java:1025) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl. java:619) at com.sun.net.ssl.internal.ssl.AppOutputStream.write(AppOutputStream.ja va:59) at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:65 ) at java.io.BufferedOutputStream.flush (BufferedOutputStream.java:123) at org.apache.commons.httpclient.HttpConnection.flushRequestOutputStream (HttpConnection.java:827) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$Http ConnectionAdapter.flushRequestOutputStream(MultiThreadedHttpConnectionManager.ja va:1525) at org.apache.commons.httpclient.HttpMethodBase.writeRequest(HttpMethodB ase.java:1975) at org.apache.commons.httpclient.HttpMethodBase.execute (HttpMethodBase.j ava:993) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Htt pMethodDirector.java:397) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMe thodDirector.java:170) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.jav a:396) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.jav a:346) at com.gargoylesoftware.htmlunit.HttpWebConnection.getResponse(HttpWebCo nnection.java:126) at com.gargoylesoftware.htmlunit.WebClient.loadWebResponseFromWebConnect ion(WebClient.java:1371) at com.gargoylesoftware.htmlunit.WebClient.loadWebResponse (WebClient.jav a:1329) at com.gargoylesoftware.htmlunit.WebClient.getPage(WebClient.java:322) at com.gargoylesoftware.htmlunit.WebClient.getPage(WebClient.java:389) at com.canoo.webtest.steps.request.TargetHelper.getResponse (TargetHelper .java:69) at com.canoo.webtest.steps.request.AbstractTargetAction.getResponse(Abst ractTargetAction.java:68) at com.canoo.webtest.steps.request.InvokePage.findTarget(InvokePage.java :134) at com.canoo.webtest.steps.request.AbstractTargetAction$1.call(AbstractT argetAction.java:108) at com.canoo.webtest.steps.request.TargetHelper.protectedGoto(TargetHelp er.java:88) ... 22 more Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find vali d certification path to requested target at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:221) at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.jav a:145) at sun.security.validator.Validator.validate (Validator.java:203) at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted( X509TrustManagerImpl.java:172) at com.sun.net.ssl.internal.ssl.JsseX509TrustManager.checkServerTrusted ( SSLContextImpl.java:320) at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(Clien tHandshaker.java:840) ... 49 more Caused by: sun.security.provider.certpath.SunCertPathBuilderException : unable to find valid certification path to requested target at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCert PathBuilder.java:236) at java.security.cert.CertPathBuilder.build (CertPathBuilder.java:194) at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:216) ... 54 more

at com.canoo.webtest.ant.WebtestTask.stopBuildIfNeeded(WebtestTask.java: 228) at com.canoo.webtest.ant.WebtestTask.execute(WebtestTask.java:175) at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:275) at org.apache.tools.ant.Task.perform(Task.java :364) at org.apache.tools.ant.Target.execute(Target.java:341) at org.apache.tools.ant.Target.performTasks(Target.java:369) at org.apache.tools.ant.Project.executeSortedTargets(Project.java :1216) at org.apache.tools.ant.Project.executeTarget(Project.java:1185) at org.apache.tools.ant.helper.DefaultExecutor.executeTargets(DefaultExe cutor.java:40) at org.apache.tools.ant.Project.executeTargets (Project.java:1068) at org.apache.tools.ant.Main.runBuild(Main.java:668) at org.apache.tools.ant.Main.startAnt(Main.java:187) at org.apache.tools.ant.launch.Launcher.run(Launcher.java:246) at org.apache.tools.ant.launch.Launcher.main(Launcher.java:67)

Total time: 4 seconds

C:\WebTest\doc\ISIS>

Incidentally, the above has the test environment password which is different to the production one so you can't run it against the public page.